Digital Audit: Google

Enterprise Technology Stack & Vendor Relationships

Google Cloud integrates with CyberArk’s Conjur secrets-management application, which has been available on the Google Cloud Platform Marketplace for Kubernetes environments since 2018 ¹. CyberArk’s Privileged Access Security product further integrates with Google Cloud Identity to support the BeyondCorp zero-trust architecture ². Palo Alto Networks, an Israeli-founded firm led by Nir Zuk, is named as Google Cloud’s preferred next-generation firewall provider, with a “ten-figure, multi-year” expanded commercial commitment announced in April 2024 ³; the partnership was deepened again in December 2025 to integrate Palo Alto’s Prisma AIRS product with Google’s Vertex AI and Agent Engine, indicating infrastructure-level rather than peripheral integration ⁴. Check Point, another Israeli-founded cybersecurity vendor, announced an “AI Defense Plane” integration with Google Cloud’s Agent Gateway and Agent Registry, targeted for availability in late June 2026 ⁵. NICE Ltd., an Israeli customer-experience and call-centre analytics firm, had its CXone platform added to Google’s Chrome Enterprise Recommended program on 3 February 2022, confirming a direct commercial relationship in the call-centre analytics space ⁶. Most significantly, Google acquired Wiz - an Israeli cloud-security unicorn founded by four Unit 8200 alumni - for $32 billion, a deal announced 18 March 2025 and closed 11 March 2026 ⁷⁸⁹¹⁰; this is Google’s largest acquisition in its history and the largest Israeli technology exit on record, converting a vendor relationship into full ownership and embedding Wiz’s product line directly into Google Cloud’s core security infrastructure ⁷⁸⁹. Following the close, Israel is positioned as a strategic development and sales centre for Google Cloud’s cybersecurity products, and Wiz is leasing a 23,500 sqm, 13-floor Tel Aviv headquarters (Landmark Tower B, Sarona complex) expected to complete in late 2026, with a workforce concentrated in Tel Aviv engineering roles ¹¹¹². SentinelOne, a competitor to Google’s Chronicle Suite in the SIEM market, and Verint, an Israeli surveillance-analytics vendor, were both examined for a direct commercial relationship with Google; No public evidence identified establishes such a relationship for either company, nor for a named systems integrator or IT consultancy mandating Israeli-origin technology within Google’s own enterprise stack.

Surveillance, Biometrics & Retail Technology

Trigo, an Israeli frictionless-checkout and computer-vision company, has joined Google Cloud’s partner ecosystem, using Google Cloud infrastructure, AI, and 3D modeling to power autonomous, cashier-less retail stores for grocery and supermarket customers ¹³¹⁴. In the opposite direction, Google itself is documented as a supplier of biometric and facial-recognition capability to the Israeli government: internal Project Nimbus training materials obtained by The Intercept show Google briefed Israeli officials on “facial detection, automated image categorization, object tracking, and sentiment analysis” tools available through Google Cloud Platform as part of the Nimbus AI/ML suite ¹⁵¹⁶. Separately, Google Play hosts the “Almunasseq” (al-Munasseq) application used by Palestinians to interact with COGAT and the Israeli Civil Administration’s West Bank movement and work-permit regime; Who Profits states this application collects Palestinian geolocation and biometric access data ¹⁷¹⁸. No public evidence identified shows Google directly deploying Israeli-origin predictive-policing or workforce/sentiment-surveillance tools internally; the documented sentiment-analysis capability flows outbound from Google to Israeli government users via Nimbus rather than being procured inbound by Google, and Trigo’s retail computer-vision product reaches customers through the Google Cloud partner-ecosystem/marketplace channel rather than direct Google procurement ¹³¹⁴.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Google operates a local cloud region in Israel (me-west1), live since October 2022, alongside data-center facilities in Petah Tikva, Modi’in, and Bnei Zion, with a fourth site near Beit Yehoshua reported in planning to disperse risk and ensure continuity of Nimbus-related services ^19202122. This buildout underpins Project Nimbus, a $1.2 billion (reported also as $1.22 billion) cloud and AI contract awarded jointly to Google and AWS in 2021, funded substantially through Israel’s Ministry of Defense budget, running to 2028 with an option to extend up to 23 years total, and serving confirmed customers including the Ministry of Defense, the Shin Bet, Israel Aerospace Industries, and the Israel Land Authority, which administers land in the occupied West Bank ²³²⁴²⁵. Internal Google documents obtained by The Intercept show that Google’s own lawyers and policy staff acknowledged as early as December 2020 that the company would have only “very limited visibility” into government use of Nimbus services, was “not permitted to restrict the types of services” migrated, and that Israel held a unilateral right to impose contract changes with “almost no ability” for Google to sue ²⁵²⁶. UN Special Rapporteur Francesca Albanese’s report A/HRC/59/23 states that Alphabet’s Israel-located servers “ensure data sovereignty and a shield from accountability, under favourable contracts offering minimal restrictions,” and quotes an Israeli colonel describing the cloud technology as “a weapon in every sense of the word” ²⁷. Further investigative reporting from +972 Magazine, the Business & Human Rights Resource Centre, and Business Standard describes “stringent and unorthodox controls” written into the Nimbus contract, including a mechanism sometimes described as requesting “secret data codes” allowing Israeli authorities to sidestep legal orders ²⁸²⁹³⁰; a subsequent report found Google and Amazon had violated their own terms of service in administering the deal ³¹. Separately, Who Profits documents that in January 2026 the Israeli government approved rollout of Google Workspace as the central digital work environment across all government ministries, following a pilot in more than 20 ministries, under the Nimbus governance framework ¹⁷.

Defence, Intelligence & Security Sector Technology Relationships

A draft contract dated 27 March 2024 shows Israel’s Ministry of Defense engaging Google for consulting services to expand Google Cloud access to “multiple units” for automation technologies, billing Google over $1 million with a 15% Nimbus-framework discount ³². The Nimbus procurement structure requires Israeli arms manufacturers Israel Aerospace Industries (maker of Heron drones, often armed with Spike missiles) and Rafael Advanced Defense Systems (maker of Iron Dome, Trophy, and Spike) to use Google and AWS cloud services, with Elta separately named as a Nimbus-linked entity ³³¹⁷. Intercept reporting further states that Google provides Nimbus users access to Palantir’s Foundry data-analysis software, also used by U.S. Special Operations Command ³³. A whistleblower complaint filed with the SEC in February 2026 alleges that in July 2024 a Google Cloud support request from an IDF-linked contractor referred to as “CloudX”/“CloudEx” sought help improving Gemini’s ability to identify “drones, armored vehicles and soldiers in aerial footage,” and that Google staff ran internal tests in response; Google’s stated position is that the usage “did not reach a significant level” (less than a couple hundred dollars monthly) and constituted a routine support inquiry rather than a policy violation ^34353637. On offensive cyber capability, no evidence identifies Google as developing or selling offensive cyber weapons; rather, Google’s Project Zero team discloses third-party exploits, including a December 2021 analysis of an NSO Group Pegasus zero-click iMessage exploit it called “one of the most technically sophisticated exploits we’ve ever seen” - a defensive, disclosure-oriented role rather than a provisioning one ³⁸. The Wiz acquisition itself has drawn scrutiny on defence-intelligence grounds: commentary describes Google as “playing with fire” by acquiring a company founded by Unit 8200 veterans, and Israeli press frames the deal as “another feather in the cap” of Israeli military intelligence’s commercial pipeline ³⁹⁴⁰.

AI, Algorithmic & Autonomous Systems

On 4 February 2025, Google removed from its public AI Principles the section on “applications we will not pursue,” which since 2018 had explicitly excluded weapons and surveillance technology “likely to cause overall harm”; Google’s stated rationale was that “democracies should lead in AI development” ⁴¹⁴²⁴³. In April 2026, reporting indicated Google agreed to let the U.S. Department of Defense use Gemini and other Google AI models on classified networks “for any lawful government purpose,” including applications supporting mission planning and weapons targeting per Pentagon AI chief Cameron Stanley, prompting roughly 600 Google employees to sign an open letter opposing it ⁴⁴⁴⁵⁴⁶. In May 2026, UK-based Google DeepMind staff voted 98% to unionize, explicitly citing the Pentagon deal and concern that DeepMind-derived AI is being used by the Israeli Defense Forces, and demanding reinstatement of the weapons/surveillance pledge removed in February 2025 plus an independent ethics body ⁴⁷⁴⁸; this followed an earlier internal letter signed by roughly 200 DeepMind workers in May 2024 citing Google’s cloud/AI contract with Israel’s Ministry of Defense under Nimbus ⁴⁹. No public evidence identified indicates that Google’s own AI models were trained on Israeli-military-derived intercepted communications or surveillance datasets; the documented flow runs in the opposite direction, with Google providing facial-detection, object-tracking, and sentiment-analysis tooling to Israeli government users via Nimbus ¹⁵¹⁶. Likewise, No public evidence identified shows Google itself operates or supplies a Lavender-, Gospel-, or Habsora-type autonomous target-generation system; those systems are documented as in-house developments of Israeli Unit 8200 ⁵⁰⁵¹, and the Gemini/CloudX object-recognition-assistance allegation described above is presented as the closest documented touchpoint rather than confirmed provision of a kill-chain system ³⁶. In a countervailing data point, Google reportedly stepped back from a roughly $100 million Pentagon drone-swarm AI contest in April 2026 following an internal ethics review ⁵².

Technology Ecosystem & R&D Footprint

Google opened its first Middle East R&D center in Haifa in 2006, run in cooperation with the Technion, later adding a Tel Aviv office; work from these centers has touched search and algorithms, Gmail, YouTube features, Google Trends, flu-prediction modeling, and Dead Sea Scrolls digitization, with products including Waze, Autocomplete, and Person Finder cited as having roots there ⁵³. Google acquired Waze, the Israeli crowdsourced-navigation startup, in 2013 for an estimated $1.1–1.3 billion, a deal Israeli tech press credits with catalyzing the country’s subsequent unicorn boom ⁵⁴⁵⁵⁵⁶. The $32 billion acquisition of Wiz, announced March 2025 and closed March 2026, stands as Google’s largest-ever acquisition and a further deepening of its Israeli R&D and talent footprint ⁷⁸¹⁰. On the academic side, Google.org committed $1 million to a three-year (2026–2028) AI research collaboration with Tel Aviv University covering language models, AI-for-privacy, and algorithmic efficiency ⁵⁷. Google also runs a “Google for Startups Accelerator: AI First” program spanning Europe and Israel jointly, offering up to $350,000 in Cloud credits and mentorship from Google Cloud and Google DeepMind staff ⁵⁸. No public evidence identified establishes a formal Google partnership specifically with the Weizmann Institute or Hebrew University, or a joint-patent or IP co-development arrangement with either institution, beyond the Haifa center’s institutional link to the Technion and the new Tel Aviv University AI research agreement.

Civil Society Scrutiny & Regulatory History

Who Profits maintains an active company page on Google LLC (Alphabet Inc.) documenting the Nimbus award, the provision of facial-recognition and machine-learning tools to the Ministry of Defense, cloud services to Rafael, IAI, and Elta, the Almunasseq West Bank permit app, the January 2026 government-wide Workspace rollout, and a 2025 approximately $45 million (NIS 150 million) advertising contract with the office of Prime Minister Benjamin Netanyahu ¹⁷. UN Special Rapporteur Albanese’s A/HRC/59/23 names Alphabet, alongside Microsoft and Amazon, as granting Israel “virtually government-wide access” to cloud and AI capability ²⁷. The OHCHR’s business-and-settlements database, updated in September 2025 to list 158 companies (up from 97 in 2023), is weighted toward construction, real estate, and settlement-infrastructure firms; No public evidence identified places Google or Alphabet specifically within this database, distinct from the Special Rapporteur’s separate naming of Alphabet ⁵⁹. The 2025 “Don’t Buy Into Occupation” report expanded its company list from 58 to 104 entries, adding Amazon by name for provision of computing power and AI tools; available sourcing confirms Amazon’s addition but No public evidence identified confirms whether Google or Alphabet specifically is named on the 2025 list ⁶⁰⁶¹. The worker-led “No Tech for Apartheid” campaign, run by Google and Amazon employees opposing Nimbus, organized April 2024 sit-ins at Google’s Sunnyvale and New York offices, including an occupation of Google Cloud CEO Thomas Kurian’s office, resulting in nine trespassing charges and the firing of 28 (with some reports citing 50-plus) workers, several of whom subsequently filed unfair-labor-practice charges ^6263646566. The BDS Movement formally lists the Google-Amazon divestment campaign as a named corporate priority target in its November 2024 “Guide to BDS Boycott & Pressure Corporate Priority Targeting” ⁶⁷⁶⁸. The Electronic Frontier Foundation published critical assessments in December 2024 and again in April 2026 arguing that Google (with Amazon) acknowledged human-rights risks - reportedly including BSR-consultant recommendations to withhold ML/AI tools from the Israeli military, which were not adopted - and subsequently ignored calls for independent human-rights due diligence, transparency, and service suspension ⁶⁹⁷⁰. Amnesty International researcher Matt Mahmoudi is quoted stating that Google and Amazon must conduct “heightened human rights due diligence along the entire lifecycle of their products” ³³. On platform moderation, The Intercept reported that YouTube removed more than 700 videos and deleted accounts belonging to Al-Haq, Al Mezan, and the Palestinian Centre for Human Rights, and separately deleted an independent journalist’s account over alleged “Iranian influence operation” links after he covered Israel/Palestine ⁷¹⁷². +972 Magazine and 7amleh separately document that Google Maps does not label “Palestine,” displays Israeli West Bank settlements as though inside Israel, and uses a dashed disputed-boundary line broadly along the Green Line ⁷³⁷⁴. Middle East Eye reported that Google’s Benevity-based donation-matching program has matched employee contributions to Friends of the IDF (which has raised $34.5 million for Israeli soldiers since October 2023) and to HaYovel, a Christian Zionist group funding West Bank settlement security ($3.5 million since October 2023), and to IsraelGives; Google’s stated response cites a 15-year-old, 200,000-organization matching policy vetted by Benevity ⁷⁵. Google’s donation matching also extended to UNRWA, which drew separate criticism in Israeli press in November 2024, while Google.org itself committed $8 million in Israel-Hamas war relief via its own company blog ⁷⁶⁷⁷. Reporting further documents a roughly $45 million, six-month contract between Google/YouTube and the office of Israeli Prime Minister Benjamin Netanyahu for advertising described by critics as Gaza-war propaganda ⁷⁸⁷⁹⁸⁰. These civil-society and regulatory findings sit against the backdrop of International Criminal Court arrest warrants issued in November 2024 against Netanyahu and then-Defense Minister Yoav Gallant, which frame the broader legal context in which Google’s continued Nimbus, Workspace, and advertising relationships with the Israeli government have proceeded ⁸¹.

End Notes