Digital Audit - Maybelline

Domain: Digital (Digital / Technology nexus) Entity scope: Maybelline New York, a cosmetics brand owned by L’Oréal (Maybelline is not a separately listed legal entity). Maybelline-branded technology acts are in scope; L’Oréal corporate/group technology and L’Oréal’s other brands are flagged as parent acts. Directionality: the serious case is providing technology/data to the Israeli state (not applicable to a cosmetics brand); using or procuring Israeli-domiciled technology is a weaker customer-side relationship. Only genuinely Israeli-domiciled vendors count as Israeli-origin; Israeli-founded but foreign-domiciled firms are flagged. Compiled: 2026-06-27 Method: Live web search (≈20 queries) against L’Oréal/Maybelline and ModiFace press, beauty-tech and Israeli tech trade press (Calcalist/CTech, Times of Israel), L’Oréal-finance releases, Who Profits, and BDS materials. No model training data.

Enterprise Technology Stack & Vendor Relationships

Maybelline’s signature digital capability - augmented-reality virtual makeup try-on - is built on ModiFace, which is Canadian (Toronto; a University of Toronto spin-off acquired by L’Oréal in 2018), not Israeli¹. ModiFace powers Maybelline’s website try-on, its Instagram Shopping AR lipstick try-on, a 2023 Microsoft Teams “Beauty App” filter, and an announced 2026 virtual-try-on integration inside ChatGPT²³. No Israeli-domiciled AR or beauty-technology vendor was identified in Maybelline’s try-on stack.

At the L’Oréal parent level there are two Israeli-domiciled technology relationships, neither identified as Maybelline-specific: L’Oréal’s 2014 acquisition of Coloright (a hair-colour optical-reader startup in Rehovot, converted into an L’Oréal R&D site, relevant to professional/salon colour rather than mass-market Maybelline), and a 2021 strategic partnership with BreezoMeter (a Haifa air-quality/environmental-data firm, since acquired by Google) for skin-”exposome” research⁴⁵. Both are L’Oréal corporate acts, flagged as parent context.

Surveillance, Biometrics & Retail Technology

Maybelline’s facial-analysis features (virtual try-on, shade/foundation finders) run on ModiFace’s in-house computer-vision technology (Canadian); no Israeli-origin facial-recognition or biometric vendor was identified in Maybelline’s or L’Oréal’s consumer skin/face AI⁶. No public evidence was identified of Maybelline deploying Israeli-origin predictive analytics, social-media monitoring, workforce surveillance, or in-store retail-biometric systems.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

No public evidence was identified of Maybelline or L’Oréal operating, leasing, or co-locating data-centre infrastructure in Israel. Maybelline is a cosmetics brand and is not a cloud or infrastructure provider; it is not a participant in Israel’s Project Nimbus government-cloud programme, and no Israeli sovereign-cloud arrangement was identified. L’Oréal’s documented consumer/e-commerce platform layer (e.g. Salesforce) is non-Israeli.

Defence, Intelligence & Security Sector Technology Relationships

No public evidence was identified of any contract, partnership, or technology/data provision between Maybelline (or L’Oréal) and the Israeli Ministry of Defence, the IDF, or Israeli intelligence agencies. Maybelline is a cosmetics brand, develops no offensive-cyber or surveillance capability, and no instance was identified of its consumer technology being repurposed for military, intelligence, or law-enforcement applications.

AI, Algorithmic & Autonomous Systems

Maybelline’s AI activity is confined to consumer beauty applications - virtual try-on, shade matching, and skin diagnostics - built on ModiFace (Canadian) and, increasingly, integrations with general-purpose AI platforms (the announced ChatGPT/OpenAI try-on)³. No public evidence was identified of Maybelline providing AI or ML systems, models, or data to any Israeli state, military, or security body, nor of its models being trained on surveillance-derived or population-monitoring data from Israel or the occupied territories. Autonomous or lethal systems are outside its business.

Technology Ecosystem & R&D Footprint

No public evidence was identified of a Maybelline-specific R&D centre, laboratory, or accelerator in Israel. The Israeli technology footprint in Maybelline’s corporate chain is L’Oréal-parent: the Rehovot R&D site (from the Coloright acquisition) and the BreezoMeter partnership, plus L’Oréal’s stated strategic interest in the Israeli startup ecosystem⁴⁵⁷. None of these is identified as a Maybelline-brand deployment, and no Maybelline acquisition, investment, or patent/licensing arrangement with Israeli research institutions was identified.

Civil Society Scrutiny & Regulatory History

No civil-society organisation was identified citing Maybelline or L’Oréal on technology-specific grounds. Maybelline appears on consumer BDS/boycott lists, but the stated basis is economic - L’Oréal’s Israeli manufacturing presence and broader Israel business ties - rather than any digital or technology activity; BDS technology campaigning (“No Tech for Oppression”) targets cloud and AI infrastructure suppliers to the Israeli state (Google, Amazon, Microsoft), not Maybelline⁸⁹. No Maybelline or L’Oréal technology relationship is listed in the UN OHCHR settlement database, and no regulatory, export-control, or sanctions action involving Maybelline’s technology procurement from Israeli entities was identified.

End Notes