McDonald's DIGITAL

Enterprise Technology Stack & Vendor Relationships

• McDonald’s Corporation reported 45,356 restaurants globally as of 31 December 2025, with approximately 95% franchised, and defines its corporate group separately from the broader system of franchisees and suppliers ¹.

• McDonald’s announced a multi-year global partnership with Google Cloud in December 2023 to connect Google Cloud hardware, data, and AI technologies across thousands of restaurants ².

• McDonald’s identified its mobile application, loyalty programme, and self-service kiosks as relevant platforms within that partnership ².

• A January 2026 McDonald’s Cloud Engineer posting describes deployment-automation work specifically supporting Google Cloud, providing current evidence of internal Google Cloud engineering activity ³.

• Google’s separate reported consulting arrangement involving an Israeli Ministry of Defense Google Cloud landing zone does not establish that McDonald’s workloads, customer data, or restaurant systems use that environment ⁴.

• No public evidence identified.

Surveillance, Biometrics & Retail Technology

• McDonald’s acquired Dynamic Yield in 2019, describing the company as New York- and Tel Aviv-based and its technology as a decision and personalisation platform ⁵.

• McDonald’s stated that Dynamic Yield could vary drive-through menu displays using factors including time of day, weather, restaurant traffic, trending items, and current restaurant selections ⁵.

• McDonald’s planned to integrate Dynamic Yield capabilities into kiosks and its global mobile application ⁵.

• In 2021, McDonald’s and Mastercard stated that Dynamic Yield technology had been deployed to McDonald’s drive-throughs and ordering kiosks in several markets, while McDonald’s planned further scaling and integration ⁶.

• McDonald’s retained ownership after the December 2021 sale agreement until the transaction closed on 1 April 2022. Its SEC filing records that closing date and says Dynamic Yield remained deployed in McDonald’s drive-throughs and ordering kiosks in several markets; Mastercard separately announced completion on 4 April 2022 and said McDonald’s planned to continue scaling and integrating the technology after divestiture ^{6, 7, 8}. The Israeli-origin ownership link is therefore historical after 1 April 2022, while continued use of the commercial technology does not establish a current Israeli-state or security relationship.

• RightHear, an Israel-headquartered accessibility-technology provider, reports deploying Bluetooth accessibility beacons at McDonald’s restaurants in Israel for audible wayfinding for blind, visually impaired, and other visitors with orientation challenges ⁹.

• The RightHear account describes accessibility functions rather than facial recognition or biometric identification, but it is vendor self-reporting and was not corroborated by a McDonald’s primary source in the reviewed material ⁹.

• No public evidence identified.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

• McDonald’s Google Cloud announcement does not specify a data-centre location, Israeli cloud region, data-residency arrangement, or Israeli legal-access pathway for McDonald’s data ².

• The reviewed Project Nimbus tender materials concern State of Israel cloud services and address bidder responses on matters including data-storage regions and sub-processors ¹⁰.

• Those tender materials do not identify McDonald’s as a bidder, cloud provider, subcontractor, or participant ¹⁰.

• No public evidence identified in the reviewed sources that McDonald’s operates or leases a data centre in Israel, participates in Project Nimbus, or provides sovereign-cloud or resilience-cloud services to Israeli state or military bodies.

Defence, Intelligence & Security Sector Technology Relationships

• McDonald’s announced in April 2024 that it had signed an agreement to acquire Alonyal Limited, then the owner and operator of 225 McDonald’s restaurants in Israel employing more than 5,000 people ¹¹.

• McDonald’s 2025 annual report records 2024 transaction costs associated with the acquisition of the McDonald’s business in Israel, supporting that the transaction was accounted for during 2024 ¹.

• McDonald’s SEC filing establishes that the Alonyal acquisition closed on 2 July 2024, when McDonald’s acquired 228 restaurants and began consolidating their results as company-operated sales ¹². The reviewed material does not establish the post-acquisition Israeli subsidiary name, full ownership chain, registered address, or separately reported Israel-specific financial results ^{1, 11, 12}.

• No public evidence identified in focused corporate, procurement, contract, and news searches of McDonald’s technology contracts with the IDF, Israeli Ministry of Defense, intelligence agencies, or other Israeli security bodies.

• No public evidence identified in those reviewed source classes of McDonald’s development, sale, licensing, or maintenance of offensive cyber capabilities, exploit tools, or digital weapons systems.

AI, Algorithmic & Autonomous Systems

• Dynamic Yield’s documented McDonald’s use case was commercial customer personalisation, including menu and order recommendations in restaurant channels ^{5, 6}.

• The reviewed Dynamic Yield materials do not describe provision of the technology to Israeli state, military, intelligence, or law-enforcement bodies ^{5, 6}.

• McDonald’s Google Cloud partnership includes AI technologies for restaurant operations and customer-facing platforms, but the announcement does not identify Israeli-state uses or Israeli-government customers ².

• No public evidence identified in the reviewed sources of McDonald’s AI or machine-learning provision to Israeli state bodies, training on Israeli or occupied-territory surveillance data, or autonomous target-generation, tracking, or weapons-related systems.

Technology Ecosystem & R&D Footprint

• Dynamic Yield represented a time-limited McDonald’s ownership relationship with a company described by McDonald’s as based in Tel Aviv and New York, before Mastercard’s announced 2021 acquisition ^{5, 6}.

• RightHear reports an Israel-wide McDonald’s Israel deployment of its accessibility beacons, although the reviewed materials do not confirm whether the deployment remains active, what telemetry may be retained, or where any data is processed ⁹.

• A Ynet report states that Partner Communications and McDonald’s Israel agreed to replace ADSL with fibre infrastructure at approximately 240 restaurants under a reported five-year agreement valued at approximately NIS 10 million ¹³.

• The Ynet report describes the reported fibre deployment as supporting data, security cameras, point-of-sale systems, operational-technology components, and customer Wi-Fi, but it is secondary reporting without independently verified implementation or completion in the reviewed material ¹³.

• McDonald’s acquisition announcement establishes corporate operation of the Israeli restaurant business after closing, but it does not establish a technology, defence, or state-security contract ¹¹.

• No public evidence identified in the focused sources of other McDonald’s Israeli R&D centres, innovation laboratories, startup or fund investments, or patent and co-development agreements with Israeli academic institutions.

Civil Society Scrutiny & Regulatory History

• McDonald’s was not listed in the locally reviewed full text of the 2023 OHCHR settlement-business database, which is a document-scoped result rather than a finding on all settlement-related activity ¹⁴.

• McDonald’s was not named in the locally reviewed full text of the UN Special Rapporteur’s 2025 report, including its discussion of surveillance, AI, cloud infrastructure, and Project Nimbus, which is likewise document-scoped ¹⁵.

• Associated Press reported that Alonyal’s announcement of free meals for Israeli soldiers prompted boycotts and that McDonald’s Corporation agreed to buy the Israeli restaurant operator in April 2024 ¹⁶.

• The reported free-meal controversy concerns restaurant operations and civil-society scrutiny, not evidence of McDonald’s technology provision to Israeli state or security bodies ¹⁶.

• No public evidence identified in the reviewed regulatory, legal, procurement, and news sources of export-control, sanctions, or technology-specific regulatory actions concerning McDonald’s and Israeli state entities.