Heinz DIGITAL

The reporting-group target is The Kraft Heinz Company, whose SEC filing defines the company to include its consolidated subsidiaries ¹.

Enterprise Technology Stack & Vendor Relationships

• In 2022, Kraft Heinz designated Microsoft Azure as its preferred cloud platform and announced plans to migrate most global data-centre assets and its ERP environment to SAP on Azure ².

• The announced Supply Chain Control Tower used Azure AI, IoT and analytics, while Azure Digital Twins were planned for 34 North American facilities ².

• Kraft Heinz, Microsoft and EY developed the Azure-based Insights 2 Action and LaunchPad sales applications, which Microsoft reported were used by more than 500 sales-team members ³.

• A separately announced multi-year partnership with Google covered Google Cloud data, analytics and AI/ML tools, Google Ads, and Kraft-O-Matic, Kraft Heinz’s data platform ⁴.

• Kraft Heinz’s 2025 Form 10-K describes third-party security assessment and monitoring but does not identify endpoint, network, OT/ICS, managed-security, call-centre or retail-analytics vendors ¹.

• Legit Security identifies Kraft Heinz as a customer, and its Kraft Heinz CISO material states that the company adopted Legit to harden SDLC systems, obtain continuing real-time visibility across the SDLC, gain cross-functional adoption and mature its application-security programme ^{5, 6}.

• Legit identifies its co-founders Roni Fuchs, Liav Caspi and Lior Barak as former Unit 8200 personnel. The public customer material concerns defensive application and software-supply-chain security; it does not establish an Israeli state, military or intelligence customer relationship for Kraft Heinz ⁷.

• The Kraft Heinz relationship is documented at the reporting-group level and is in scope for this group audit. The reviewed sources do not isolate which individual Kraft Heinz brands or applications use Legit, disclose contract value, or establish the precise start or end date of the deployment ^{5, 6}.

• Apart from Legit, no public evidence identified of a disclosed relationship between Kraft Heinz and the reviewed Israeli-origin enterprise or security vendors, including Check Point, Wiz, SentinelOne, CyberArk, NICE, Verint, Trigo, BriefCam or Oosto/AnyVision ^{1, 2, 4, 3}.

Surveillance, Biometrics & Retail Technology

• The reviewed corporate announcements, Microsoft customer material and cybersecurity disclosures describe cloud, analytics, sales applications, supply-chain visibility and marketing uses rather than biometric or surveillance deployments ^{1, 2, 4, 3}.

• No public evidence identified of facial recognition, biometrics, gait analysis, predictive-policing, social-media monitoring, workforce-monitoring tools, or Israeli-origin retail-surveillance technology used by Kraft Heinz ^{1, 2, 4, 3}.

• No public evidence identified of indirect deployment of those tools through the disclosed Microsoft, Google Cloud or EY engagements ^{2, 4, 3}.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

• Google stated that Kraft Heinz’s Google Cloud customer-data platform used first-party data to personalize consumer experiences from call centres to in-store shopping ⁴.

• Microsoft described Azure-based sales applications that consolidate customer and retailer insights ³.

• The reviewed cloud disclosures do not identify cloud regions, backup locations, routing architecture, Israel-based data centres, Israeli legal accessibility or data-residency arrangements ^{2, 4, 3}.

• Kraft Heinz’s 2025 subsidiary exhibit lists Heinz Israel Limited, HZ.I.L. Ltd., RINC Ltd. and TNCOR Ltd. as Israel-jurisdiction entities, without describing their functions, facilities, personnel, operational status or data-processing roles ⁸.

• An earlier 2024 subsidiary exhibit also listed Heinz Israel Ltd. in Israel, but likewise did not state its activities, technology operations, customers, data-processing functions or state/security links ⁹.

• No public evidence identified of Project Nimbus participation, Israeli-government cloud work, digital-sovereignty services, or Israeli state or military data-residency services involving Kraft Heinz or the identified subsidiaries ^{8, 2, 4}.

Defence, Intelligence & Security Sector Technology Relationships

• The disclosed technology engagements concern Kraft Heinz’s internal supply chain, sales, consumer engagement and product-development functions ^{2, 4, 3}.

• No public evidence identified of Israeli Ministry of Defense, IDF, intelligence-agency or other security-body technology contracts involving Kraft Heinz ^{2, 4, 3}.

• No public evidence identified of dual-use technology provision, offensive cyber capabilities or digital-weapons activity by Kraft Heinz, which the reviewed materials describe as an enterprise technology customer ^{1, 2, 4}.

• The reviewed SEC corporate records do not establish an Israeli state/security contract, technology-vendor relationship or operation in occupied territory ^{1, 8, 10, 11}.

AI, Algorithmic & Autonomous Systems

• Kraft Heinz publicly described internal use of Azure and Google Cloud AI/ML for supply-chain prediction, digital twins, product innovation, consumer insights and personalized marketing ^{2, 4}.

• No public evidence identified of AI/ML provision by Kraft Heinz to Israeli state or security bodies ^{8, 2, 4}.

• No public evidence identified of Israeli or occupied-territory surveillance-data training, autonomous target generation or autonomous tracking systems involving Kraft Heinz ^{8, 2, 4}.

Technology Ecosystem & R&D Footprint

• The current subsidiary filing establishes group inclusion and Israeli jurisdiction for four entities, but does not establish an Israeli R&D centre, engineering office, innovation lab, accelerator or other technology footprint ⁸.

• No public evidence identified of Israeli technology acquisitions, strategic investments, patent or co-development agreements, or research-institution partnerships in the reviewed sources ^{1, 8}.

• The Israeli subsidiaries’ operational purpose, personnel, facilities, cloud tenancy, data flows and links to Israeli state institutions remain undisclosed in the reviewed corporate materials ^{1, 8}.

Civil Society Scrutiny & Regulatory History

• The supplied full-text check recorded no Heinz or Kraft Heinz mention in the UN Special Rapporteur’s July 2025 report, including its technology-focused discussion; this is a document-scoped finding only ¹².

• The supplied full-text checks recorded no Heinz or Kraft Heinz mention in the 2023 OHCHR settlement-business database report or its 2025 update; this does not establish absence from all settlement-related activity ^{13, 14}.

• The supplied full-text check recorded no Heinz or Kraft Heinz mention in the BDS National Committee’s December 2024 corporate-priority guide, which is a selected campaign list rather than a comprehensive record of boycott advocacy ¹⁵.

• No public evidence identified in the checked BDS guide and supplied NGO-report set of a campaign specifically concerning Heinz or Kraft Heinz technology provision to Israeli state entities or occupied territories ¹⁵.

• No public evidence identified in the reviewed SEC filing and permitted focused search batches of an export-control, sanctions, regulatory, court or parliamentary matter concerning Heinz or Kraft Heinz technology provision to Israeli state or security entities ¹⁶.

• No evidence located in the reviewed accountability materials establishes technology provision by Heinz or Kraft Heinz after 19 July 2024 or after November 2024 to Israeli state, military, intelligence or settlement-linked customers ^{12, 13, 14, 15, 16}.