Digital Domain Audit: Lufthansa

Target: Deutsche Lufthansa AG (Lufthansa Group; incl. SWISS, Austrian, Brussels, Eurowings, Lufthansa Cargo, Lufthansa Technik) Domain: Digital (Digital / Technology) Date: June 2026 Scope: Lufthansa Group’s own digital/data/cyber/surveillance/AI conduct re Israel.

Enterprise Technology Stack & Vendor Relationships

Lufthansa Group’s enterprise IT backbone is managed principally through its in-house subsidiary Lufthansa Systems GmbH (HQ Raunheim, Germany), which supplies aviation-specific IT products - flight planning (Lido Flight 4D), operations control (NetLine Suite), and MRO IT - under a managed-service wrapper called the Global Aviation Cloud (GAC).¹ GAC runs on a multi-cloud architecture combining Microsoft Azure and (since August 2024) Google Cloud; the first European Google Cloud node is Frankfurt.² The platform is marketed to more than 350 external airline customers.³

For enterprise resource planning, Lufthansa Group and Lufthansa Technik rely on SAP software (relationship dating to 1997/1998); Lufthansa Industry Solutions (LHIND) holds SAP Gold Partner status.⁴ For passenger services and distribution, the Group renewed its three-decade partnership with Amadeus (Spanish multinational, HQ Madrid; operates an Israeli subsidiary Amadeus Global Travel Israel Ltd but is not Israeli-domiciled), covering the Altéa PSS across Lufthansa, Austrian, Brussels Airlines, SWISS, and Air Dolomiti, plus a migration to Amadeus Nevio.⁵⁶ In February 2025, Lufthansa Group and Lufthansa Systems entered a long-term collaboration with Infosys, establishing a Global Capability Centre in Bengaluru leveraging Infosys Topaz and Cobalt Airline Cloud.⁷

No public evidence identified of Lufthansa Group holding a current software or cloud-infrastructure contract with an Israeli-domiciled technology vendor.

Surveillance, Biometrics & Retail Technology

Lufthansa Group is a significant deployer of biometric passenger identification, operating under the Star Alliance Biometrics framework, which uses the NEC I:Delight facial-recognition and identity-management platform (supplied by Japanese conglomerate NEC in partnership with SITA); Lufthansa and Austrian Airlines are lead deployers.⁸ NEC (Japanese) and SITA (Geneva-registered) are not Israeli-domiciled.

At Berlin Brandenburg Airport, Lufthansa Group’s BER Traveller voluntary biometric priority-lane service uses an app from FastID, a Netherlands-based biometric access-control company (no Israeli connection identified); biometric identifiers are transmitted encrypted and deleted post-flight, remaining only on the passenger’s device.⁹¹⁰ Lufthansa also activated a FacePass biometric boarding system at Naples Capodichino Airport.¹¹ Airport-analytics coverage references the HID BG100 Speedgate (integrating facial-recognition algorithms from Paravision, a San Francisco company - no Israeli origin identified).¹² During 2025, Lufthansa and Amadeus piloted EU Digital Identity Wallet-based check-in/boarding, with biometric profiles stored encrypted on the passenger’s own smartphone.¹³ Lufthansa’s in-app Travel ID feature enables passport scanning; BigBear.ai (US-domiciled) operates Enhanced Passenger Processing at US/Canadian ports of entry as a US-government programme, not a Lufthansa contract.¹⁴

No public evidence identified that Lufthansa Group has contracted any Israeli-domiciled biometric or surveillance technology vendor for passenger-facing systems.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Lufthansa Systems’ Global Aviation Cloud operates on a dual-hyperscaler model - Microsoft Azure and Google Cloud (formalised August 2024), with the first European Google Cloud node in Frankfurt; both hyperscalers are US-domiciled.² For data-warehouse modernisation, Lufthansa adopted SAP Datasphere on SAP Business Technology Platform.⁴ For MRO AI use-cases, Lufthansa Technik is deploying Microsoft Azure AI Services under a partnership announced December 2024, covering over 50 AI use-cases.¹⁵

No public evidence identified of Lufthansa Group holding data in Israeli sovereign cloud infrastructure, or of any Israeli-domiciled cloud or data-residency vendor in its stack.

Defence, Intelligence & Security Sector Technology Relationships

Lufthansa Technik established Lufthansa Technik Defense as a dedicated brand in 2023, consolidating military MRO and modification for the Bundeswehr and NATO partners.¹⁶

PEGASUS SIGINT Programme: Lufthansa Technik Defense is the aircraft-procurement and systems-integration contractor (alongside prime HENSOLDT and airframe provider Bombardier Defense) for the Bundeswehr’s PEGASUS signals-intelligence system (three Bombardier Global 6000 jets with HENSOLDT’s Kalætron Integral SIGINT suite); first flight October 2024.¹⁷ HENSOLDT is German, Bombardier Canadian; no Israeli-domiciled technology identified.

Elbit Systems - Hermes 900 Starliner MOU: In January 2024, Lufthansa Technik signed an MOU with Israeli defence contractor Elbit Systems to deliver and maintain up to eight Hermes 900 Starliner military UAVs for the German Navy (Lufthansa Technik MRO/crew training; Elbit manufacturing) - Lufthansa Technik’s first military drone project; no formal contract had been signed as of mid-2024 and none has been confirmed as of June 2026.¹⁸

Elbit Systems - J-MUSIC DIRCM on Government A350: In December 2024, Elbit Systems Deutschland secured a five-year contract with Lufthansa Technik to install Elbit’s J-MUSIC DIRCM missile-protection system on the German Government’s Airbus A350 VIP/government fleet, under a Bundeswehr directive - a direct technology-integration relationship between Lufthansa Technik and an Israeli-headquartered defence contractor for a military mission system.¹⁹

F-35 Support MOU: Lufthansa Technik Defense signed an MOU with Lockheed Martin, Rheinmetall, and ESG for German F-35 fleet support; partners are US and German, no Israeli vendor identified.²⁰

EL AL / Lufthansa Technik MRO: A 2017 long-term MRO agreement between Lufthansa Technik and Israeli national carrier EL AL remains in the public record; no update or extension has been publicly announced in 2024–2026.²¹

AI, Algorithmic & Autonomous Systems

Lufthansa Group has deployed or piloted multiple AI/generative-AI systems: George (GPT-based pilot-training chatbot, October 2024); Holly (Eurowings Holidays AI travel advisor, February 2024); NOTAMIQ (NLP for flight-planning data); an aircraft-maintenance-manual NLP prototype at Lufthansa Technik; ChatGPT-powered customer-communication prototypes; the Lufthansa Technik × Microsoft Azure AI partnership (December 2024, 50+ MRO use-cases); Lufthansa Systems × Google Cloud AI/ML for predictive maintenance; and an AI Aviation Lab in Frankfurt (80 staff).¹⁵²²²³ In September 2025, Lufthansa Group announced plans to cut 4,000 administrative roles by 2030 via AI-driven automation (~€300 million annual savings), drawing union (Verdi) criticism.²⁴

No public evidence identified that any of Lufthansa Group’s deployed or piloted AI systems are built on Israeli-origin AI technology or involve Israeli-domiciled AI vendors.

Technology Ecosystem & R&D Footprint

The Lufthansa Innovation Hub (LIH), founded 2014 (Berlin), is the Group’s CVC arm; its publicly listed portfolio (~24 projects: Cosmos, SQUAKE, NAVIT, Hopper, Navan, cargo.one, etc.) contains no Israeli-origin startup identified in public sources.²⁵ The Group’s Innovation Runway ecosystem includes the AI Aviation Lab, Startup Gate incubation, and Open Lab network.²⁶ Lufthansa Technik’s AVIATAR digital MRO platform connected ~4,400 aircraft as of end-2024.²⁷ The Infosys GCC (from February 2025) provides aviation-IT product development in Bengaluru.⁷

No public evidence identified that Lufthansa Group has made direct equity investments in Israeli technology startups, participated in Israeli accelerator programmes, or entered R&D partnerships with Israeli-domiciled research institutions.

Civil Society Scrutiny & Regulatory History

Data breach - third-party hotel system (January 2024): An external service provider operating Lufthansa’s hotel-rebooking system suffered unauthorised access, exposing passenger names, gender, mobile numbers, flight numbers, child-travel flags, and reservation dates; no payment data was affected.²⁸ SITA PSS breach (2021): SITA’s Passenger Service System breach affected airline passengers globally, including Lufthansa Miles & More members; SITA is Geneva-registered, not Israeli.²⁹ Suspected dark-web data sale (2025 reports): Cybersecurity monitors reported dark-web listings claiming a “full database” of Lufthansa; Lufthansa has not publicly confirmed authenticity or scope as of June 2026.³⁰

No GDPR fine against Lufthansa Group entities has been identified in the publicly accessible enforcement tracker for 2023–2026. The Group’s biometric boarding programmes have not been the subject of identified regulatory enforcement, with the Group stating enrolment is voluntary and data stored locally.¹⁰ No public evidence identified of civil-society or regulatory challenge to Lufthansa Group’s technology relationships specifically on the grounds of an Israeli nexus.

End Notes