Digital Audit: Deutsche Lufthansa AG

Audit Phase: Digital (Digital / Technology Forensics) Subject Entity: Deutsche Lufthansa AG (Lufthansa Group; FRA: LHA) Registered Address: Venloer Strasse 151–153, 50672 Cologne, Germany Audit Date: June 2026 Evidence Base: Published corporate disclosures, vendor press releases, aviation and technology trade press, NGO research, and data-protection/regulatory reporting. All factual claims are drawn from publicly available sources cited in the End Notes.

Scope and directionality note: Digital assesses the digital/technology nexus to Israel. The serious case is the provision of surveillance, digital, data, or cyber technology to the Israeli state, military, or security services. The reverse direction - Lufthansa procuring technology from Israeli-origin vendors - is a customer relationship and is recorded explicitly as such, weighted far lower than provision. Provision of commercial airline IT or maintenance services to an Israeli civil airline is recorded with its direction and civil character marked. No transitive guilt is imputed: a vendor’s other clients, its founders’ military backgrounds, or a partner’s separate activities are not attributed to Lufthansa. US-entity relationships (e.g. Microsoft, Google Cloud) are not Israeli-origin and are noted only for completeness.

Enterprise Technology Stack & Vendor Relationships

Strategic Technology Partnerships (Direction: Lufthansa as customer)

Lufthansa Group’s disclosed core enterprise technology stack is non-Israeli in origin across its principal categories. Lufthansa works with Microsoft (a US-headquartered entity) on cloud and AI: Deutsche Lufthansa AG selected the Datometry Hyper-Q virtualization platform (a San Francisco-headquartered, US-origin vendor) in September 2022 to migrate its on-premises data warehouse to Microsoft Azure Synapse.¹ Lufthansa Technik announced a December 2024 collaboration with Microsoft to deploy more than 50 AI use cases built on Microsoft Azure AI Services and the Azure cloud, with Microsoft represented by its Germany managing director; no Israeli involvement is referenced.²

Lufthansa Systems, the Group’s airline-IT subsidiary, operates a multi-cloud strategy and in 2024 announced a partnership with Google Cloud (a US entity) to advance multi-cloud support for its Global Aviation Cloud (GAC) products, alongside its existing Microsoft Azure footprint.³ Lufthansa Industry Solutions built the VoloIQ platform with Volocopter on Microsoft Azure.⁴ These are US-entity (procurement) relationships and are recorded for completeness only.

Israeli-Origin Technology Vendors in the Lufthansa Stack (Direction: Lufthansa as customer)

No public evidence was identified of a named Israeli-origin enterprise-software or cybersecurity vendor contracted into Lufthansa Group’s own technology stack. Prior assertions in legacy drafts that Israeli contact-centre vendors (NICE, Verint) or cybersecurity firms (Check Point, CyberArk, Wiz, SentinelOne, Claroty) are present in Lufthansa’s environment could not be corroborated against any primary source - corporate filings, vendor case-study libraries, or trade press - and none of those vendors publicly names Lufthansa Group as a customer. No public evidence identified.

Israeli-Origin Cybersecurity / Forensic Vendors

No public evidence was identified linking Lufthansa Group to any Israeli-origin cybersecurity, mobile-forensics, or interception vendor (including Check Point, Cellebrite, Cognyte, NSO Group, or Verint) as a customer, licensee, or integration partner.⁵ General reporting confirms these are Israeli firms with documented government clients, but none was tied to Lufthansa’s environment in any independently sourced record reviewed.⁵

Procurement Transparency Constraints

Lufthansa Group annual reports do not publicly enumerate specific cybersecurity or enterprise-software vendors by name. Vendor relationships below the level of named, publicly announced partnerships are not in the public domain, and the full security/IT vendor stack is undisclosed. This is the principal evidence gap in this domain.

Surveillance, Biometrics & Retail Technology

Facial Recognition & Biometric Boarding (Direction: Lufthansa as customer)

Lufthansa and SWISS (both Lufthansa Group / Star Alliance members) were the first carriers to implement Star Alliance Biometrics, a facial-recognition identity-verification platform, beginning at Frankfurt and Munich and later extended to Vienna and Hamburg airports.⁶⁷ The platform is built on NEC Corporation’s (a Japanese company) NEC I:Delight biometric and identity-management software; Star Alliance selected NEC in 2020 and the partnership dates to July 2019.⁶⁸ No Israeli-origin biometric vendor (e.g. Oosto/AnyVision, BriefCam, Corsight) was identified in connection with these deployments in any reviewed source.⁶⁸ Earlier Lufthansa biometric-boarding trials at US gateways operated under US Customs and Border Protection’s Traveler Verification Service, also without any identified Israeli-origin vendor.

Israeli-Origin Surveillance / Biometric Vendors

No public evidence was identified that Lufthansa Group has deployed facial-recognition, biometric, gait-analysis, or behavioural-analytics technology of Israeli origin in its operations.

No public evidence was identified of Lufthansa Group using Israeli-origin predictive-analytics, sentiment-analysis, social-media-monitoring, or workforce-surveillance tools.

Third-Party / Indirect Deployment

No public evidence was identified of Israeli-origin surveillance technology reaching Lufthansa indirectly via managed security services or as bundled components within enterprise suites. Structural indirect exposure within hyperscaler stacks (Azure, Google Cloud) cannot be positively excluded from public sources, but no specific instance was identified.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Data Centre Operations in Israel

No public evidence was identified that Lufthansa Group operates, leases, or co-locates data-centre infrastructure within Israel. The Group’s disclosed cloud strategy centres on Microsoft Azure and Google Cloud (US-entity relationships), with data-warehouse modernisation targeting Azure Synapse.¹³

Project Nimbus & Israeli State Cloud Infrastructure

Not applicable. Project Nimbus is the Israeli-government cloud contract awarded to Google Cloud and Amazon Web Services; Lufthansa Group is not a cloud-infrastructure provider and is neither a participant nor a sub-provider. No public evidence was identified of Lufthansa involvement in any Israeli state-backed digital-infrastructure programme.

Data-Sovereignty or Resilience Services to Israeli State Institutions

No public evidence identified. Lufthansa Group does not market or operate data-sovereignty, national-resilience, or state-infrastructure services to any state body, Israeli or otherwise.

Lufthansa Group and its Miles & More loyalty subsidiary are supervised for data protection by the Hesse State Commissioner for Data Protection and Freedom of Information in Germany, with processing anchored under EU GDPR.⁹ No Israeli data-residency exposure was identified in any public compliance disclosure reviewed.

Defence, Intelligence & Security Sector Technology Relationships

Military & Intelligence Contracts

No public evidence was identified of any contract, partnership, or service agreement between Lufthansa Group and the Israeli Ministry of Defence, the Israel Defense Forces (IDF), or Israeli intelligence agencies (Mossad, Shin Bet, or Unit 8200-linked commercial entities). Lufthansa Systems develops airline-specific IT products (operations control, flight planning, crew optimisation); none is documented as provided to any military or security body.³

Provision of Technology / Data to the Israeli State or Military

No public evidence was identified of Lufthansa Group providing surveillance technology, data, software, cloud capacity, or digital services to the Israeli state, military, or security services. This is the directionally serious Digital case, and no qualifying evidence of it was found. No public evidence identified.

Provision of Airline IT to an Israeli Civil Carrier (Direction: Lufthansa as provider; civil)

Lufthansa Systems provides commercial airline IT to El Al Israel Airlines, Israel’s civil flag carrier. In April 2024 El Al announced it would run its new operations control centre on Lufthansa Systems’ NetLine/Ops ++ (with five add-on modules) hosted on the Global Aviation Cloud (a SaaS solution), expanding an existing El Al product landscape that includes the Lido Flight 4D flight-planning solution and NetLine/Crew crew-management system.¹⁰ Direction here is Lufthansa Systems as provider of commercial software to an Israeli civil airline (not a state, military, or security body); it is recorded with that direction and civil character marked.

Dual-Use Technology Provision

No public evidence was identified of Lufthansa Group commercial technology being reported or confirmed as deployed for military, intelligence, or law-enforcement surveillance applications in Israel or the Occupied Palestinian Territories.

Offensive Cyber Capability

No public evidence identified. Lufthansa Group is not a defence contractor and does not develop, license, or sell offensive cyber capability, electronic-warfare systems, or digital weapons.

Lufthansa Technik - MRO to Israeli Civil Aviation (Direction: Lufthansa as provider; civil)

Lufthansa Technik AG, one of the world’s largest independent commercial MRO providers, holds documented agreements with Israeli civil carriers: a 15-year Total Component Support contract signed July 2017 with El Al for its Boeing 787 fleet (with inventory stocked at Ben Gurion Airport),¹¹ and a Technical Operations Management / line-maintenance approval for Israir Airlines, making Lufthansa Technik the first foreign MRO approved for line maintenance by Israel’s Civil Aviation Authority.¹² These are commercial civil-aviation services. No public evidence was identified of Lufthansa Technik holding MRO, conversion, or modification contracts for Israeli state or military aviation assets.

AI, Algorithmic & Autonomous Systems

Commercial AI/ML Deployment

Lufthansa deploys AI/ML for commercial-aviation applications, including Lufthansa Technik’s AI use cases on Microsoft Azure for maintenance/layover optimisation,² and Lufthansa Systems’ NetLine/Ops ++ aiOCC and revenue/operations products.³ These run on US-entity cloud platforms (Azure, Google Cloud).²³

AI/ML Provision to Israeli State Bodies

No public evidence identified of any AI or machine-learning system developed or operated by Lufthansa Group being provided to Israeli state, military, or security-sector bodies.

Training Data & Model Development Involving Israeli Population Data

No public evidence identified of Lufthansa AI models trained on Israeli population data, intercepted communications, biometric datasets, or surveillance-derived data from Israel or the Occupied Palestinian Territories.

Autonomous Systems & Lethality

No public evidence identified. Lufthansa Group does not operate in the defence autonomous-systems or lethal-autonomous-weapons sector.

Internal Algorithmic Deployment - Israeli-Origin AI Tooling

Lufthansa’s documented internal AI deployment runs through Microsoft Azure (US-entity) and Google Cloud (US-entity).²³ No public evidence was identified of any Israeli-origin AI vendor embedded in Lufthansa Group’s stack; the undisclosed full vendor list means secondary embedding within managed services cannot be positively excluded, but no such instance was identified.

Technology Ecosystem & R&D Footprint

Israeli R&D Facilities

No public evidence was identified that Lufthansa Group operates an R&D facility, engineering office, or innovation lab domiciled within Israel. The Lufthansa Innovation Hub is headquartered in Berlin with a secondary presence in Singapore.

Startup / Innovation Partnership with Israeli Investor (Direction: collaboration)

In November 2017, Lufthansa Systems entered a strategic partnership with Cockpit Innovation, the high-tech investment arm of El Al Israel Airlines, to jointly identify and cultivate aviation/travel-tech startups; Lufthansa contributed industry expertise and personnel, while Cockpit acted as the investor (its early portfolio included AI, big-data, communications, and fintech startups).¹³¹⁴ Direction is a collaboration in startup scouting with an Israeli civil-airline venture arm; no provision of Lufthansa technology to any Israeli state or security body arises from it.

Acquisitions & Investments in Israeli Technology Companies

No public evidence was identified of Lufthansa Group or the Lufthansa Innovation Hub acquiring, or taking a corporate-venture stake in, an Israeli-domiciled technology company, VC fund, or defence-tech spinout. Disclosed Innovation Hub portfolio activity (e.g. Hopper, Cargo.one, the SQUAKE spin-off) centres on travel/mobility tech outside Israel.¹⁵

Patents & IP Co-Development with Israeli Institutions

No public evidence was identified of patent portfolios, licensing, or co-development arrangements between Lufthansa Group entities and Israeli-domiciled research institutions (Technion, Hebrew University, Weizmann Institute) or Israeli commercial technology companies.

Lufthansa Systems - Airline IT Products to Third-Party Carriers

Lufthansa Systems markets proprietary airline IT (Lido navigation, NetLine operations, revenue management) to airline customers globally, including the El Al relationship noted above (civil carrier).³¹⁰ No public evidence was identified of Israeli state customers or Israeli technology sub-contractors embedded in Lufthansa Systems products.

Civil Society Scrutiny & Regulatory History

NGO & Academic Scrutiny - Technology Supply Chain

No public evidence was identified of an NGO investigation, academic study, or UN report addressing Lufthansa Group’s technology relationships with the Israeli state, Israeli defence entities, or Israeli-origin vendors. The Who Profits Research Center company database, which documents corporate involvement in the occupation economy and is consulted by the BDS movement, was reviewed; no Lufthansa technology-supply-chain finding was identified there in this review.¹⁶

BDS & Boycott Campaigns (Technology-Specific)

No public evidence was identified of an organised boycott, divestment, or sanctions campaign specifically targeting Lufthansa Group for technology provision to, or procurement from, Israeli state entities, Israeli military bodies, or Israeli-origin technology companies.¹⁷

SITA Passenger-System Breach (Done to Lufthansa)

In February–March 2021, the airline IT provider SITA disclosed a breach of its Passenger Service System; the incident compromised frequent-flyer data for multiple Star Alliance carriers, with the largest affected group reported to be Lufthansa Group’s Miles & More members.¹⁸ This exposure concerns Lufthansa’s posture as a customer affected by a third-party breach; it has no nexus to the provision of technology to Israel and is recorded as factual digital context only.

No public evidence was identified of any action by export-control authorities (e.g. Germany’s BAFA, US BIS), sanctions bodies, or data-protection regulators relating to Lufthansa technology or data sales, services, or transfers to Israeli state entities. Lufthansa Cargo’s 2025 suspension of military/security-related shipments to Israel, reported in connection with UK export-control guidance, is a logistics/freight matter assessed under Military, not a digital-technology provision.¹⁹ No public evidence identified within the Digital scope.

Evidence Gaps

Full IT and security vendor stack (highest priority) - Lufthansa Group does not publicly enumerate its sub-strategic IT and cybersecurity vendor relationships, so Israeli-origin cybersecurity vendor exposure cannot be positively excluded on public evidence.
Scope of provision to El Al - Lufthansa Systems (NetLine/Ops ++, Lido, NetLine/Crew on GAC) and Lufthansa Technik (component support, line maintenance) provide commercial services to El Al and Israir; both are civil carriers, but contract data-flow specifics and any onward use are not fully disclosed.
Cockpit Innovation partnership status - The 2017 Lufthansa Systems / Cockpit Innovation startup partnership’s current status and any resulting joint products are not comprehensively documented in public sources.
Hyperscaler indirect exposure - Israeli-origin components within Azure or Google Cloud managed services cannot be assessed from public sources.
Innovation Hub portfolio - The Lufthansa Innovation Hub’s full portfolio is not exhaustively disclosed; undisclosed Israeli startup stakes, if any, cannot be excluded.