Digital Domain Audit: Lexus

Target: Lexus - luxury vehicle marque of Toyota Motor Corporation Domain: Digital (Digital / Technology) Date: June 2026 Scope: The Lexus brand’s own digital/data/cyber/surveillance/AI conduct re Israel. Toyota group-level tech is documented and attributed at parent level except where deployed in Lexus vehicles.

Enterprise Technology Stack & Vendor Relationships

Lexus vehicles use the Lexus Safety System+ (LSS+) suite of advanced driver-assistance features as standard equipment across the model range.¹ The system uses a forward-facing camera and grille-mounted radar to power pre-collision, lane-departure, and adaptive-cruise functions.²

Mobileye (Israeli-origin ADAS supplier - in-scope where deployed in Lexus vehicles): In May 2021, Toyota Motor Corporation selected the joint ZF–Mobileye technology stack for ADAS across “multiple vehicle platforms.”³ The confirmed specification is Mobileye’s EyeQ®4 vision-computing system-on-chip integrated with ZF’s Gen21 mid-range radar, with ZF as system integrator.⁴ Mobileye is an Israeli company, founded in Jerusalem in 1999, headquartered in Jerusalem, with the large majority of its ~3,600 staff in Israel.⁵ It was acquired by Intel in 2017 and re-listed on Nasdaq in 2022.⁶ Public sourcing does not confirm which specific Toyota or Lexus model lines carry the ZF–Mobileye stack in production, nor the production launch date. Given that LSS+ is a Toyota-group technology stack shared across the Toyota and Lexus lineups, and given Toyota’s confirmed nomination of the ZF–Mobileye unit for multiple platforms, there is a credible basis that Lexus vehicles are within scope of this deployment, though Lexus-specific confirmation has not been publicly identified.

Toyota Connected (connected-car data platform - parent-level, in-scope where serving Lexus vehicles): Toyota Connected, established in 2016, provides the data-science and connected-services backbone for both Toyota and Lexus connected-car products globally.⁷ The Lexus G-Link connected service (Japan) and Lexus Drive Connect (North America) operate on this platform.⁸ Toyota Connected uses Microsoft Azure as its primary cloud and Amazon Web Services (AWS) for its Mobility Services Platform (MSPF).⁹¹⁰ Neither Microsoft nor AWS operates a commercial cloud region in Israel; no public evidence of Israeli cloud-infrastructure participation by Toyota Connected or Lexus connected services was identified.

Surveillance, Biometrics & Retail Technology

The Mozilla Foundation’s Privacy Not Included project rated Lexus as failing all minimum privacy standards in its automotive review.¹¹ Mozilla found Lexus collects, through its connected services and app, driving-behaviour data, interior/exterior camera imagery, facial geometric features (biometric data collected when scanning a face to identify users for personalised driver profiles), precise geolocation, and third-party data-broker inputs.¹¹¹²

The Lexus Connected Services Privacy Notice (updated June 2025) states that Lexus “may sell your Personal Information to third parties or share your Personal Information with third parties for targeted advertising.”¹² Facial geometric features are stated to be processed and stored on the vehicle itself rather than centrally.¹² No public evidence was identified linking Lexus’s biometric collection programme to Israeli surveillance technology vendors or Israeli state entities.

No public evidence identified of Lexus deploying Israeli-developed retail analytics, facial recognition, or in-store surveillance technology.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Toyota Connected’s dual-cloud architecture uses Microsoft Azure (primary) and AWS (for the MSPF global platform).⁹¹⁰ The MSPF on AWS processes vehicle data from Toyota’s and Lexus’s worldwide connected-vehicle fleet.¹⁰ Neither Azure nor AWS operates a sovereign or commercial cloud region inside Israel; no evidence was identified of Lexus or Toyota Connected routing vehicle or user data through Israeli cloud infrastructure.

2023 data breach: A cloud misconfiguration exposed vehicle location data and connected-service IDs for approximately 2.15 million T-Connect and Lexus G-Link customers in Japan for nearly a decade (November 2013 to April 2023).¹³ A separate misconfiguration exposed navigation data for approximately 260,000 additional users.¹³ Toyota attributed the incidents to operator error. No connection to Israeli actors or infrastructure was identified.

No public evidence identified of Lexus participating in any Israeli sovereign cloud or data-sharing agreement.

Defence, Intelligence & Security Sector Technology Relationships

UVeye (Israeli vehicle-inspection AI - parent-level): Toyota Tsusho Corporation made an initial investment in UVeye Ltd., an Israeli AI-powered automated vehicle inspection startup, in June 2019, and obtained commercial distribution rights.¹⁴¹⁵ In 2024, Toyota’s growth fund Woven Capital led a $191 million Series C round for UVeye.¹⁶ UVeye also markets a Security product line for border crossings, embassies, airports, and seaports (automated under-vehicle inspection for IEDs, weapons, contraband).¹⁷ No public evidence was identified of UVeye holding contracts with the IDF or Israeli military. This relationship is Toyota group-level (Toyota Tsusho / Woven Capital) and does not describe a Lexus-brand technology relationship; it is attributed to the Toyota parent.

No public evidence identified of Lexus or Toyota having direct technology contracts with the Israeli Ministry of Defence, Israeli military intelligence, or Unit 8200-affiliated entities.

AI, Algorithmic & Autonomous Systems

Foretellix (Israeli ADAS/AV verification startup - parent-level): In May 2023, Toyota’s Woven Capital and Nvidia co-invested in Foretellix’s $43 million Series C round.¹⁸ Foretellix, founded 2018, is headquartered in Ramat Gan, Israel; its Foretify platform provides ADAS/autonomous-driving verification.¹⁹ No direct deployment relationship between Foretellix software and Lexus vehicle programmes has been publicly confirmed.

Cartica AI (Israeli perception startup - parent-level): Toyota AI Ventures co-invested in Cartica AI (spun out of Israeli AI firm Cortica), developing unsupervised-learning computer-vision perception for ADAS.²⁰ No deployment of Cartica AI technology in Lexus production vehicles has been publicly confirmed.

Mobileye EyeQ4 SoC (Israeli silicon - in-scope where deployed in Lexus vehicles): As described above, Toyota has nominated Mobileye’s EyeQ4 chip as the vision-computing core of its ZF-integrated ADAS stack.³⁴ Mobileye’s chip designs are developed in Israel.⁵ Where this SoC is deployed in production Lexus vehicles, it constitutes a direct technology supply relationship with an Israeli company at the silicon layer of the ADAS stack.

Intuition Robotics / ElliQ (Israeli AI companion - parent-level): Woven Capital led a $25 million round in Intuition Robotics (Ramat Gan), developer of the ElliQ AI companion device.²¹ This relates to Woven City and is not connected to the Lexus product line.

Technology Ecosystem & R&D Footprint

Toyota AI Ventures / Toyota Ventures Israel strategy: Toyota Ventures has stated its intent to increase investment in Israeli automobile-technology and robotics companies, with a portfolio including Cartica AI (ADAS perception), Moodify (in-vehicle scent/mood), Foretellix (AV validation), and Intuition Robotics.²⁰²¹²² Toyota Tsusho maintains a direct investment and commercial partnership with UVeye since 2019.¹⁴ In 2025, Toyota launched Woven Capital Fund II with an $800 million target.²³

These are all Toyota group-level activities. No Lexus-specific Israel R&D office, Lexus-brand Israeli startup partnership, or Lexus-brand Israeli vendor contract has been publicly identified separate from Toyota group-level activity.

Civil Society Scrutiny & Regulatory History

Mozilla Foundation - Privacy Not Included (2023): Lexus was among all 25 major car brands evaluated that received failing marks in Mozilla’s Privacy Not Included automotive study, which found the reviewed automakers to be “data privacy nightmares on wheels.”¹¹

Japan data breach: The 2023 T-Connect/G-Link data breach prompted Toyota to announce an internal audit and monitoring reforms.¹³ No formal regulatory penalty has been publicly confirmed, and no connection to Israeli entities was identified.

No Lexus-specific FTC enforcement action has been publicly confirmed, and no public evidence was identified of civil society, parliamentary, or regulatory scrutiny directed at Lexus’s Israeli technology relationships specifically.

End Notes