Digital Audit: HSBC

Enterprise Technology Stack & Vendor Relationships

No public evidence identified of a direct, named licensing or subscription relationship between HSBC and Check Point, Wiz, SentinelOne, CyberArk, Claroty, or Palo Alto Networks; repeated searches pairing each vendor with HSBC returned only generic vendor marketing material or unrelated third-party case studies. No public evidence identified of a direct HSBC relationship with Verint, despite an AI-generated search summary suggesting one. HSBC is recorded as a customer of NICE Actimize, the Israeli-founded financial-crime technology provider, for anti-money-laundering, fraud, and compliance services, alongside CITIC Group, StoneX, Wells Fargo, and Citibank in a third-party customer-purchase database, though no implementation date or contract value was disclosed ¹. HSBC’s core infrastructure runs a multicloud strategy spanning Amazon Web Services, Google Cloud, and Microsoft Azure ²³. AWS became HSBC’s long-term strategic public-cloud provider under a multi-year global agreement announced 15 July 2020, initially covering Global Wealth and Personal Banking customer-facing applications ²⁴. Google Cloud hosts more than 1,800 HSBC projects and over 100 petabytes of migrated data, underpins the bank’s BigQuery- and Dataflow-based STAR risk platform processing 4.4 billion calculations per day, and made HSBC the first financial institution to deploy Corda Enterprise blockchain on Google Cloud ³. In June 2026, HSBC and Google Cloud announced an AI banking partnership deploying Gemini models and the Gemini Enterprise Agent Platform across wealth management, financial-crime detection covering roughly one billion monthly transactions, and staff decision-assistant tools, with more than 600 HSBC applications already running on Google Cloud; the release contains no reference to Israel, data residency, biometrics, or cybersecurity ⁵. HSBC’s most recent Form 20-F annual filing with the SEC has not been confirmed, in the sources reviewed, to reference Check Point, CyberArk, NICE, Verint, or comparable vendors by name ⁶. No public evidence identified of HSBC engaging systems integrators such as Accenture, Cognizant, or TCS in a manner that specifically mandated or recommended Israeli-origin technology.

Surveillance, Biometrics & Retail Technology

HSBC is substantially expanding internal, staff-facing biometric access control at its new London headquarters at 40 Bank Street, increasing card/biometric readers from roughly 350 to 779–780 and cameras from roughly 440 to 1,754, at a budget of approximately $15 million, using palm-scanning and facial-recognition-based access control alongside badge-enabled mobile-phone digital access, with further rollout planned for offices in the US, Hong Kong, India, and Mexico ⁷⁸⁹. No public evidence identified of the vendor supplying this biometric access-control system, despite searches for named biometric suppliers. No public evidence identified of HSBC use of Trigo, BriefCam, AnyVision/Oosto, or Trax for facial recognition, biometrics, or retail/loss-prevention technology; as a retail and commercial bank rather than a retail merchant, frictionless-checkout use cases of this kind are structurally inapplicable to HSBC’s business. No public evidence identified of HSBC use of Israeli-origin predictive-policing, sentiment-analysis, social-media-monitoring, or workforce-surveillance tools. No public evidence identified of indirect or bundled delivery of Israeli-origin surveillance technology to HSBC via managed security service providers.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

No public evidence identified that HSBC operates, leases, or co-locates data-centre infrastructure within Israel; HSBC’s Israel presence is a licensed commercial and institutional bank branch, operating under a full banking licence since 2001, located at the Amot Atrium Tower in Ramat Gan ¹⁰¹¹. No public evidence identified of HSBC participation in Project Nimbus or any comparable Israeli government cloud initiative; HSBC is a customer of AWS, Google Cloud, and Azure for its own banking operations, but no source connects HSBC to the Nimbus arrangement itself, which runs directly between Google, Amazon, and the Israeli government. No public evidence identified of HSBC providing digital-sovereignty, data-residency, or infrastructure-resilience services to Israeli state institutions or military bodies.

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of direct HSBC contracts, partnerships, or service agreements with the Israeli Ministry of Defence, the IDF, or Israeli intelligence agencies for administrative IT, communications, hosting, or analytics. The 2021 Don’t Buy Into Occupation coalition report, which tracked 672 European financial institutions’ financing of 50 companies with West Bank/settlement-linked operations between January 2018 and May 2021, lists HSBC among the largest European creditors, alongside BNP Paribas, Barclays, Deutsche Bank, and Société Générale ^12131415. Per that report, HSBC provided $135 million in loans and underwriting to Motorola Solutions, whose Wide Area Surveillance System of radar and camera detection technology is installed in at least 25 West Bank settlements ¹²¹⁶¹⁷. HSBC also provided $245 million in loans to Cisco Systems, $317 million to Booking Holdings, and $1.02 billion to Expedia Group, all named in the settlement-nexus company lists, plus $1.29 billion in loans and underwriting to Volvo Group and a contribution to $1.53 billion in syndicated loans to Airbnb led by Barclays ¹². These are financing and underwriting relationships rather than direct technology procurement by HSBC itself. A separate AFSC Investigate database profile for HSBC documents financing links to US and Australian private-prison operators but records no Israel-specific content ¹⁸. HSBC’s relationship with Elbit Systems, described as Israel’s largest defense and dual-use technology contractor, has moved through a documented multi-year cycle: in 2017 HSBC held approximately £3.1 million ($3.92 million) in Elbit Systems shares ¹⁹²⁰. Following a campaign of more than 24,000 emails and monthly pickets at over 40 UK branches led by War on Want and the Palestine Solidarity Campaign since July 2017, HSBC informed campaigners on 20 December 2018 that it had fully divested from Elbit Systems, attributing the move to an existing internal cluster-munitions-linked investment exclusion policy triggered by Elbit’s acquisition of IMI Systems rather than to an explicit human-rights determination ^21222319. Regulatory 13F filings show HSBC re-accumulated Elbit Systems shares between August and November 2025, rising from 12,826 shares to 16,317 shares valued at $8,318,407 ²⁴²⁵. On 13 December 2025, the group “People Against Genocide” conducted coordinated direct action, including broken windows and red paint, against eleven HSBC branches across Britain, citing HSBC’s renewed Elbit shareholding explicitly ^25262728. By March 2026 HSBC had reportedly sold 15,666 of its 16,317 Elbit shares, and by 30 April/8 May 2026 it had divested its remaining 651 shares, reaching a zero holding ²⁹³⁰. This full cycle of 2018 divestment, 2025 re-accumulation, renewed direct-action campaign, and 2026 full re-divestment spans the entire period following both the 19 July 2024 ICJ Advisory Opinion and the November 2024 ICC arrest warrants, meaning HSBC held and increased an equity position in Elbit Systems for over a year after both events before fully exiting in 2026 ²⁰²⁴²⁹. No public evidence identified of HSBC development, sale, licensing, or maintenance of offensive cyber capabilities, zero-day tools, or digital weapons systems.

AI, Algorithmic & Autonomous Systems

No public evidence identified of HSBC providing AI/ML, computer-vision, or autonomous decision-support systems to Israeli state, military, or security bodies; HSBC’s disclosed AI activity, including the June 2026 Google Gemini partnership and related Google Cloud analytics infrastructure, is confined to internal banking operations such as wealth management, fraud detection, and staff productivity, with no Israel-specific application documented ⁵³. No public evidence identified that HSBC’s AI models were trained on or given access to civilian population data, intercepted communications, or surveillance-derived datasets originating from Israel or the Occupied Palestinian Territories. No public evidence identified of HSBC provision of autonomous target-generation, automated threat-detection, or autonomous-tracking systems to Israeli military or security forces. A database of former Israeli intelligence personnel employed across the technology sector, compiled by Drop Site News, contains no HSBC-related entries ³¹.

Technology Ecosystem & R&D Footprint

HSBC does not appear to operate a dedicated Israeli R&D or engineering lab; instead it operates HSBC Innovation Banking Israel, a Tel Aviv-based banking-services team formed following the March 2023 acquisition of Silicon Valley Bank UK for £1 ³²³³³⁴. Coverage of the launch describes the division as built “from the bones” of the collapsed SVB UK, with more than 20 bankers recruited in Tel Aviv ³⁵³⁶³⁴. This Tel Aviv operation provides banking, lending, and advisory services to Israeli technology companies as clients, a commercial-banking relationship distinct from a vendor or technology-procurement relationship ³². HSBC Ventures lists Israel among its broad geographic investment focus areas spanning AI, digital assets, quantum computing, and embedded finance, and HSBC co-authored a “Serial Founders in Israel” report with Battery Ventures using Dealigence data, though no specific named Israeli portfolio company was identified in available sources ³⁷. HSBC Holdings plc is a substantial institutional shareholder in Palantir Technologies: 13F filings show holdings declining from 5,435,956 shares to 4,847,885 shares valued at $884,351,182 (a 10.82% quarterly reduction), and further reduced to 4,299,759 shares valued at $766,138,000 as of the most recently referenced filing ³⁸³⁹. This is a portfolio/asset-management equity holding rather than a vendor or technology-provision relationship, reflecting passive or institutional investment management ³⁸³⁹. No public evidence identified of HSBC acquisitions of Israeli-origin technology companies. No public evidence identified of patent portfolios, licensing agreements, or co-development arrangements between HSBC and Technion, Hebrew University, or the Weizmann Institute.

Civil Society Scrutiny & Regulatory History

The UN Special Rapporteur’s 2025 report on the “economy of occupation to economy of genocide” (A/HRC/59/23) addresses the role of financial institutions in channelling capital to settlement-linked and weapons-manufacturing companies generally ⁴⁰. No public evidence identified of an HSBC-specific paragraph or citation within that report or within the OHCHR’s related database of business enterprises (A/HRC/60/19, listing 158 enterprises) in the secondary sources reviewed ⁴¹⁴². For comparison, Human Rights Watch’s 2018 “Bankrolling Abuse” report addresses Israeli banks’ financing of West Bank settlements and does not name HSBC, a UK-headquartered institution outside that report’s scope ⁴³. HSBC’s Elbit Systems shareholding has twice been the subject of organised civil-society campaigns: a 2017–2018 campaign by War on Want and the Palestine Solidarity Campaign that resulted in full divestment ²¹²²¹⁹, and a December 2025–2026 campaign by “People Against Genocide” over HSBC’s re-accumulated Elbit shareholding, which included direct action at eleven branches and preceded HSBC’s full re-divestment ^25262728. No public evidence identified of an HSBC public statement addressing the 2025–2026 campaign, beyond the December 2018 email confirmation of divestment to campaigners in the earlier cycle ²¹. In April 2020, HSBC announced it would stop processing standing-order payments to the Palestinian aid charity Interpal, citing internal compliance policy, a decision publicly criticized by MPs across parties, including Conservative members, as “appalling moral cowardice” ⁴⁴⁴⁵. HSBC’s board of directors, most recently updated per a November 2025 stock exchange announcement on changes to board and committee composition, has not been shown in available sources to include members with named ties to Israeli defense, cyber, or AI firms ⁴⁶⁴⁷. No public evidence identified of regulatory inquiries, export-control actions, or sanctions investigations specifically involving HSBC’s technology sales or services to Israeli state entities, as distinct from HSBC’s general, unrelated anti-money-laundering and sanctions regulatory history. No public evidence identified of an OECD National Contact Point complaint specifically naming HSBC over Israel/Palestine-related conduct.

End Notes