INDEX / DIRECTORY / KRISPY KREME / DIGITAL

Krispy Kreme DIGITAL

DIGITAL INFRASTRUCTURE AUDIT UPDATED 2026-08-30
Digital Score 0.00 /10 C Krispy Kreme - BDS-1000 508
Digital 0.00

Evidence-only forensic audit. Scoring happens downstream - see the main dossier for the composite assessment.

Forensic audits like this are reader-funded - no sponsors, no ads. Support OpenIntel →

Enterprise Technology Stack & Vendor Relationships

Krispy Kreme, Inc. is a Delaware corporation whose common stock trades on Nasdaq under “DNUT,” and its 2025 annual report defines “Krispy Kreme” and “Company” as the parent and its consolidated subsidiaries 1.

Digital ordering through branded platforms, third-party delivery apps, and customer digital platforms is identified as a sales channel 1.

NCR stated in 2012 that it would implement Aloha restaurant technology at Krispy Kreme’s U.S. corporate-owned sites and make it available to franchisees; NCR described cloud-hosted transactional data, configuration, and management 2.

A FluidOne case study describes a secure hybrid SD-WAN deployment, leased factory lines, 24/7 network-operations-centre support, and a FortiGate One firewall licence, but does not establish whether the deployment remains current 3.

A September 2024 mcrIT case study reports a six-month infrastructure upgrade across more than 40 Krispy Kreme Australia and New Zealand sites, using Cisco Meraki switches and Wi-Fi alongside monitoring, patching, and after-hours helpdesk support 4.

No public evidence identified of a Krispy Kreme relationship with Check Point, Wiz, SentinelOne, CyberArk, NICE, Verint, Claroty, Palo Alto Networks, or another verified Israeli-origin enterprise-software vendor.

No public evidence identified that the identified NCR, FluidOne, or mcrIT engagements deployed Israeli-origin technology for Krispy Kreme.

Surveillance, Biometrics & Retail Technology

A 2023 Illinois complaint alleges that Krispy Kreme enrolled the plaintiff’s fingerprint in timeclock equipment in 2021 and used fingerprint scans for clocking in and out thereafter 5.

The complaint is an allegation rather than a finding, and it does not identify the timekeeping vendor or an Israeli-origin technology component 5.

No public evidence identified of Krispy Kreme use of Israeli-origin facial recognition, gait or behavioural analytics, Trigo, BriefCam, AnyVision/Oosto, Trax, predictive-policing, sentiment-monitoring, social-media-surveillance, or workforce-surveillance products.

No public evidence identified that a third-party platform provider or managed-security service supplied such Israeli-origin surveillance or biometric products to Krispy Kreme.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

NCR’s 2012 statement supports that the described Aloha deployment was intended to host transactional data, systems configuration, and management in the cloud 2.

That statement does not identify a cloud provider, server location, data-residency arrangement, or Israeli legal or infrastructure nexus 2.

No public evidence identified of Krispy Kreme-operated, leased, or co-located data-centre capacity in Israel; participation in Project Nimbus or another Israeli-government cloud programme; or data-sovereignty and resilience services for Israeli institutions.

Krispy Kreme reported operations in 42 countries at fiscal year-end 2025, while its subsidiary exhibit listed no Israel-incorporated subsidiary 1, 6.

The subsidiary exhibit is not a complete franchise-location register and therefore does not establish the absence of an Israeli franchise or retail presence 6.

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of contracts, partnerships, or service agreements between Krispy Kreme and the Israeli Ministry of Defence, IDF, intelligence agencies, or other Israeli security bodies.

No public evidence identified that Krispy Kreme technology was deployed for Israeli military, intelligence, law-enforcement surveillance, offensive-cyber, or digital-weapons applications.

The reviewed corporate records do not identify a relationship with Israeli state institutions, Project Nimbus, Israeli data centres, or operations in occupied territory 1, 6, 7.

JAB Indulgence B.V. was reported as beneficial owner of 43% of Krispy Kreme common stock as of 7 April 2026, while BNP Paribas SA was reported at 8.9% 7.

No public evidence identified in the reviewed corporate records of Israeli defence, intelligence, cyber, AI, or surveillance relationships involving the named controlling shareholder, directors, or executive officers.

AI, Algorithmic & Autonomous Systems

No public evidence identified that Krispy Kreme supplied AI, machine-learning, computer-vision, autonomous decision-support, training-data, or autonomous-tracking systems to Israeli state, military, or security bodies.

No public evidence identified of Israeli technology-company acquisitions, Israeli venture-fund investments, Israeli R&D facilities, or patent or co-development arrangements with Israeli-domiciled entities or research institutions.

Krispy Kreme’s June 2025 quarterly filing identifies minority interests in KK France, KK Brazil, and KK Spain, but does not report an Israeli technology-company investment in that disclosure 8.

That filing-specific observation does not establish the absence of unreported or later investments 8.

Technology Ecosystem & R&D Footprint

Krispy Kreme reported three operating segments: U.S.; International company-owned operations in the United Kingdom, Ireland, Australia, New Zealand, Mexico, Canada, and Japan; and Market Development franchise operations 1.

Its 2025 subsidiary exhibit lists entities in several jurisdictions, including the United Kingdom, Australia, Canada, Japan, Mexico, France, Spain, Brazil, Ireland, New Zealand, and the UAE 6.

No public evidence identified in the reviewed filings and technology materials of an Israeli-incorporated subsidiary, Israeli parent entity, or Krispy Kreme-operated Israeli R&D facility.

The public materials reviewed do not disclose all enterprise SaaS vendors, sub-processors, cloud regions, data-routing paths, or data-residency controls 1, 3, 4.

Civil Society Scrutiny & Regulatory History

The supplied document-scoped pre-scan reported no Krispy Kreme mention in the 2023 OHCHR settlement-database update or the UN Special Rapporteur’s 2025 report A/HRC/59/23 9, 10.

The OHCHR update states that its reassessment of 112 enterprises does not purport to provide a complete list of enterprises involved in relevant settlement activity 9.

No public evidence identified of an NGO or academic investigation specifically documenting Krispy Kreme technology provision to Israeli state, military, intelligence, police, settlement, or occupied-territory operations.

No public evidence identified of an Israel-specific regulatory inquiry, export-control action, sanctions-related investigation, OECD National Contact Point complaint, or court action concerning Krispy Kreme technology sales or services.

Krispy Kreme’s June 2025 quarterly filing reports U.S. data-breach litigation arising from a November 2024 cybersecurity incident 8.

A 2014 Business & Human Rights Resource Centre release included Krispy Kreme Doughnuts, Inc. in a discussion of California supply-chain-transparency disclosures, but the item predates the audit period and does not concern Israeli operations, digital technology, or state/security customers 11.

An unofficial boycott-aggregator lead was not treated as substantiated because the reviewed material did not provide a verifiable primary-source chain connecting its ownership-related assertions to a Krispy Kreme technology relationship with Israeli state bodies, settlements, or occupied territory.

Footnotes

  1. https://www.sec.gov/Archives/edgar/data/1857154/000185715426000015/dnut-20251228.htm ↩ ↩2 ↩3 ↩4 ↩5 ↩6

  2. https://investor.ncr.com/static-files/cc41f151-c3c7-42eb-80b1-ff17ab01347a ↩ ↩2 ↩3

  3. https://www.fluidone.com/hubfs/FluidOne_July_2022/pdf/Krispy-kreme.pdf ↩ ↩2

  4. https://mcr.com.au/case-studies/krispy-kreme-case-study/ ↩ ↩2

  5. https://s3.amazonaws.com/jnswire/jns-media/1c/f0/12608138/bipa_coleman_v_krispykreme.pdf ↩ ↩2

  6. https://www.sec.gov/Archives/edgar/data/1857154/000185715426000015/exh211-listofsubsidiariesf.htm ↩ ↩2 ↩3 ↩4

  7. https://www.sec.gov/Archives/edgar/data/1857154/000119312526182138/d90101ddef14a.htm ↩ ↩2

  8. https://www.sec.gov/Archives/edgar/data/1857154/000185715425000131/dnut-20250629.htm ↩ ↩2 ↩3

  9. https://www.ohchr.org/sites/default/files/documents/hrbodies/hrcouncil/sessions-regular/session31/database-hrc3136/23-06-30-Update-israeli-settlement-opt-database-hrc3136.pdf ↩ ↩2

  10. https://docs.un.org/en/A/HRC/59/23 ↩

  11. https://media.business-humanrights.org/media/documents/files/documents/Press-release-re-SB-657-statements-9-July-2014_1.pdf ↩