Digital Audit: Nando’s

Digital Audit - Nando’s

Enterprise Technology Stack & Vendor Relationships

Nando’s South African network infrastructure runs on Cradlepoint AER2100 routers and NetCloud Manager, delivered via reseller/integrator Infoprotect and first deployed around 2015, with Nando’s own technology leadership quoted describing the setup as “the most secure and best product” ¹. Cradlepoint is a US-headquartered company (an Ericsson subsidiary since 2020), and no Israeli ownership or origin was identified for this vendor or its reseller. Nando’s expanded a venue-analytics and WiFi-analytics data deal with Australian firm Skyfii to roughly 520 restaurants globally - approximately 40% of Skyfii’s total venue network at the time - under a three-year contract reported in 2016 ². Nando’s technology leadership has publicly discussed a broader cloud-first digital strategy intended to “digitally disrupt its own business,” and separate trade coverage has profiled the company’s technology-driven internal culture ³⁴. Restroworks (an India-headquartered restaurant-technology/POS platform, formerly Posist) lists Nando’s as a customer, with point-of-sale integration to third-party delivery aggregators including Zomato, Talabat, Deliveroo, and Careem ⁵; no Israeli-origin subsystem was identified within this integration. Nando’s uses Adyen, a Dutch payment platform, for unified commerce spanning in-store, online, and app channels across more than 200 restaurants in Australia and New Zealand ⁶. Nando’s privacy policies for the UK and India confirm the use of Amazon Web Services (AWS) for central data storage, though neither policy discloses the specific AWS region(s) used ⁷⁸. No public evidence identified of any licensing, subscription, or integration relationship between Nando’s and Check Point, Wiz, SentinelOne, CyberArk, NICE, Verint, Claroty, or Palo Alto Networks. No public evidence identified of an Israeli-origin payment processor (such as Rapyd) in use by Nando’s. No public evidence identified of named systems integrators or digital-transformation consultancies for Nando’s mandating or recommending Israeli-origin technology; the only integrator identified in the available record is Infoprotect, a South African Cradlepoint reseller with no Israeli-technology nexus found ¹.

Surveillance, Biometrics & Retail Technology

No public evidence identified of Nando’s using facial recognition, biometric identification, or gait-analysis technology from any vendor, whether Israeli-origin (e.g., Trigo, BriefCam, AnyVision/Oosto, Trax) or otherwise. No public evidence identified of Israeli-origin predictive-policing, sentiment-analysis, social-media-monitoring, or workforce-surveillance tools in use at Nando’s. Nando’s does deploy WiFi-based visitor analytics via its vendor Skyfii, which passively collects device MAC addresses for foot-traffic and dwell-time analytics at venues, per the methodology described in the deal reporting and Skyfii’s own privacy documentation ²⁹. Skyfii is Australian-headquartered, and no Israeli ownership, technology licensing, or data-routing-through-Israel link was identified in the available sources for this vendor. No public evidence identified of any Israeli-origin biometric or surveillance technology reaching Nando’s indirectly through a bundled third-party retail-technology platform.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

No public evidence identified that Nando’s operates, leases, or co-locates data centre infrastructure within Israel. Nando’s privacy policies for the UK and India markets confirm use of AWS for central data storage, but neither specifies which AWS region(s) host that data ⁷⁸. No public evidence identified of Nando’s participation in Project Nimbus or any comparable Israeli government- or state-backed cloud programme; background research into Project Nimbus confirms it as a Google/Amazon cloud-services arrangement with the Israeli government and did not surface any Nando’s connection ¹⁰. Nando’s functions in the available record as a technology customer and consumer of commercial cloud services rather than as a cloud, AI, or infrastructure vendor to any government. No public evidence identified of Nando’s providing data-sovereignty, data-residency, or infrastructure-resilience services to Israeli state or military bodies.

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of any contract, partnership, or service agreement between Nando’s and the Israeli Ministry of Defence, the IDF, Israeli intelligence agencies, or other state security bodies. Direct database checks support this finding: the Who Profits company database returned no matching entry for Nando’s ¹¹, and the AFSC Investigate database’s full company listing, reviewed in its entirety, contained no restaurant or food-service entry matching Nando’s, with its food-related listings limited to Israel-domiciled or China-based dairy/grocery firms ¹²¹³. No public evidence identified of Nando’s commercial technology - restaurant POS, WiFi analytics, or demand-forecasting systems - being deployed for military, intelligence, or law-enforcement surveillance applications in Israel or the occupied Palestinian territories. No public evidence identified of Nando’s developing, selling, licensing, or maintaining offensive cyber capabilities, zero-day tools, or digital-weapons systems; Nando’s core restaurant-chain business model shows no offensive-cyber product line in any source reviewed.

AI, Algorithmic & Autonomous Systems

Nando’s own disclosed use of artificial intelligence is limited to consumer-facing and operational tooling: an AI-driven demand-forecasting platform from Predictive Insights, used for stock ordering and staff scheduling and piloted across 20 South African stores ¹⁴¹⁵. Predictive Insights is identified as a South Africa-headquartered firm, and no Israeli ownership or origin was found for it. No public evidence identified of Nando’s providing AI/ML, computer-vision, or autonomous decision-support systems to any Israeli state, military, or security body. No public evidence identified of Nando’s AI models being trained on, or granted access to, civilian population data, intercepted communications, or surveillance-derived datasets originating from Israel or the occupied territories. No public evidence identified of Nando’s providing autonomous target-generation, automated threat-detection, or autonomous-tracking systems to any military or security force; this technology category does not correspond to any identified Nando’s product line.

Technology Ecosystem & R&D Footprint

No public evidence identified of Nando’s operating any R&D facility, engineering office, innovation lab, or accelerator programme in Israel. Nando’s parent investment vehicle, Yellowwoods, is controlled by the Enthoven family, majority owners since founder Dick Enthoven’s era, with Adrian Enthoven now serving as chairman; profiles of the family’s holdings show a portfolio concentrated in African restaurant, insurance (Hollard), and hospitality/wine businesses, with no Israeli technology investment identified ¹⁶¹⁷. Nando’s Group CEO is Rob Papps, per an organisational-chart profile that lists no defence-industry or Israeli-technology affiliations ¹⁸. No public evidence identified of Nando’s acquiring any Israeli-origin technology company or making strategic investments in Israeli technology startups or venture funds. No public evidence identified of patent portfolios, licensing agreements, or co-development arrangements between Nando’s and Israeli-domiciled entities or research institutions such as Technion, Hebrew University, or the Weizmann Institute.

Civil Society Scrutiny & Regulatory History

Direct checks of NGO and multilateral databases found no Nando’s-specific listing: the Who Profits company database returned no entry ¹¹; the AFSC Investigate database’s full 288-company list, reviewed directly, contained no matching restaurant/food-service entry ¹²¹³; and the “Don’t Buy Into Occupation” 2024 coalition report’s available company examples (Airbnb, Carrefour, Cisco, IBM, Puma, Siemens, Volvo) did not include Nando’s ¹⁹. Nando’s is named as a target of a general consumer boycott campaign associated with the Boycott, Divestment and Sanctions (BDS) movement; the campaign’s stated grounds are Nando’s historical operation of restaurants in Israel and a perceived ongoing “presence” among some activists, alongside separate labour-practice and environmental/meat-industry concerns cited by the same campaign sources ²⁰. No public evidence identified of a boycott or divestment campaign specifically targeting Nando’s technology provision, vendor relationships, or data practices, as distinct from the general consumer campaign. Historically, Nando’s operated a licensed franchise in Israel from July 1992, co-owned 50/50 by the international company and local relatives of founder Robert Brozin, reaching up to 17 restaurants at its peak; the franchise was sold in 2005 amid financial difficulties, the new owner’s license expired in February 2006, Nando’s International filed suit in August 2007, and closure was ordered and completed by December 2007 ²¹. No public evidence identified of any current Nando’s restaurant operations in Israel or the occupied Palestinian territories. On the regulatory front, No public evidence identified of any regulatory inquiry, legal challenge, export-control action, or sanctions-related investigation involving Nando’s technology sales or services to Israeli state entities; the only regulatory-adjacent matter identified in the record is an October 2020 credential-stuffing data-breach affecting customer accounts, which triggered refunds and additional detection/prevention investment, but which is a general cybersecurity incident with no Israel nexus ²²²³²⁴.

End Notes