Netlify

Key Findings

• Digital: Netlify maintains customer-selectable Wix integrations spanning content management, bookings, events, ecommerce and subscriptions; configured services can send business and personal information to Israel-based Wix.com Ltd. for initial processing, but the evidence does not show that Wix controls Netlify’s infrastructure or receives unrelated Netlify datasets.^{1, 2, 3}
• Economic: Netlify acquired Israeli-origin visual-editing company Stackbit in June 2023 and subsequently integrated its technology, but the Israeli-registered Stackbit Ltd. was later reported voluntarily dissolved, and no current Israeli Netlify office, payroll or R&D establishment was verified.^{4, 5, 6}
• Political: Netlify issued an attributable corporate statement and commercial response concerning Russia’s invasion of Ukraine, while no equivalent Israel-Palestine statement was identified; the audits found no evidence that this asymmetry was intended to legitimise Israeli policy.^{7, 8}
• Not found: No public evidence identified of Netlify supplying Israeli military or intelligence bodies, operating in settlements, participating in Project Nimbus, or providing purpose-built weapons, surveillance or targeting technology.^{9, 10, 11}

Target Profile

Key Facts:

• Netlify was founded in 2014 by Mathias Biilmann and Christian Bach.¹²
• Its November 2021 Series D raised $105 million, bringing reported cumulative funding to $212 million and valuing the company at $2 billion at that time.¹⁴
• Netlify acquired Stackbit in June 2023 and continued integrating its visual-editing technology during 2024.^{4, 15, 16}
• Netlify’s public catalogue continued to offer Wix integrations as of the October 2026 audit.¹

Executive Summary

Netlify is a privately held web-development and application-deployment platform headquartered in San Francisco. Its products include web hosting and deployment, serverless and edge functions, storage, authentication and other general-purpose application services. The audits found no evidence that Netlify’s core platform was designed as military, intelligence, surveillance or settlement infrastructure.^{12, 9}

The strongest documented nexus is digital. Netlify announced a Wix Headless partnership in May 2023 and continues to publish Wix integrations for content management, bookings, events, ecommerce and pricing plans.^{1, 2} When a developer selects and configures those services, the integration can transmit business and personal information to Wix. Wix’s processing agreement identifies Israel-based Wix.com Ltd. as the initial recipient of users-of-users information, establishing a limited Israeli corporate-processing and legal-access connection.³ The evidence does not establish that every integration dataset is physically stored in Israel, that every listed Wix subprocessor receives every dataset, or that Wix obtains unrelated information processed directly by Netlify.^{3, 17}

The main economic nexus is Netlify’s June 2023 acquisition of Stackbit, an Israeli-origin visual-editing business associated with an Israeli company registered in Tel Aviv.^{4, 5} Netlify later migrated Stackbit authentication and integrated its visual editor into the Netlify platform.^{15, 16} Mitigating evidence is substantial: Stackbit Ltd. was reported voluntarily dissolved, Netlify’s 2026 affiliate list names Stackbit, Inc. but not Stackbit Ltd., and the audits could not verify a current Israeli Netlify office, payroll entity, workforce or R&D establishment.^{5, 6, 18}

The political record supports a narrower finding. In March 2022, Netlify published an official statement condemning Russia’s invasion of Ukraine, ceased business with Russian-owned companies and described humanitarian support, while preserving access to hosted sites for ordinary Russian users.⁷ No equivalent corporate statement on Gaza, Palestinian civilian protection, occupation or settlements was identified through October 2026.⁸ This documents asymmetrical public communication, but the audit expressly found no evidence that the difference reflected endorsement or deliberate legitimation of Israeli government policy.⁸

No public evidence identified a Netlify contract with the Israeli Ministry of Defense, IDF, intelligence services, prison service or border police; participation in Project Nimbus; services to a named settlement authority; or purpose-built weapons, targeting, surveillance or offensive-cyber technology.^{10, 11, 19} Applying the fixed, human-vetted V6.6 scores, Netlify receives a BRS of 454 and Tier C (Substantial Complicity). That result is driven by the documented Wix processing relationship and Stackbit acquisition, not by a verified military or settlement contract.

Timeline of Relevant Events

Corporate Overview

Netlify, Inc. is a private, venture-backed software company offering infrastructure for web and application development. Its platform provides deployment, serverless functions, edge execution, authentication, storage and access to third-party services. These are documented as general-purpose developer capabilities rather than military-specific products.^{12, 9}

Netlify’s April 2026 privacy statement identifies Stackbit, Inc., Gatsby, Inc., Netlify Canada Limited, Netlify EMEA Limited and Netlify UK Limited as affiliates.⁶ It does not identify a currently operating Israeli affiliate. The company’s public Trust Center lists AWS as an infrastructure subprocessor and distinguishes contracted infrastructure providers from integrations selected by customers.²¹

The principal acquired Israeli-origin business is Stackbit. Netlify announced the acquisition in June 2023, describing Stackbit as visual-editing technology for websites and applications.⁴ Third-party company information links Stackbit to Tel Aviv and identifies Stackbit Ltd., company number 516051745, as an Israeli company founded in 2019.^{5, 18} Later records report that Israeli company as inactive or voluntarily dissolved. The exact dissolution date and the legal transaction path between Stackbit Ltd., Stackbit, Inc. and Netlify were not established.^{5, 6}

Netlify continued developing Stackbit’s technology after acquisition, including authentication migration and platform integration in 2024.^{15, 16} These product developments demonstrate continuity of the acquired technology, not continuity of an Israeli legal entity or workplace. Netlify’s remote-work disclosures and a 2026 management interview describe a globally distributed workforce but provide no verified Israel-specific staffing figure.^{22, 23}

Wix is not identified as a Netlify subsidiary or infrastructure controller. It is a supported, customer-selected integration provider. A developer can connect a Netlify-deployed frontend to Wix services, creating a data route governed in part by Wix’s own processing terms.^{1, 2, 3}

Domain Summaries

Military: Military

Mechanism of Involvement

No qualifying military mechanism was established. Netlify supplies general-purpose web application infrastructure, including serverless and edge functions, but the audited records do not identify a tactical, ruggedised, weapons-integrated or military-specified variant supplied to an Israeli customer.^{9, 24}

No public evidence identified an executed contract, procurement award, memorandum, export licence or military end-user certificate involving Netlify and the Israeli Ministry of Defense, IDF, Israel Prison Service or Border Police.^{10, 25} The audits likewise found no evidence that Netlify supplies weapons, munitions, critical weapons subsystems, military logistics, construction equipment or settlement infrastructure.

Netlify’s global network and application services could technically support many civilian or institutional uses, but capability alone does not identify a military end user or prove operational sustainment. A third-party technology-detection list reports Netlify technology on websites associated with Israel, but it does not establish payment, procurement, military use or deployment at a particular installation.¹⁹

Counter-Arguments and Evidence Limits

Netlify’s strongest defence is that its documented business is civilian, general-purpose software. No named Israeli military customer, defence procurement record, military-specific product or weapons workflow was identified.^{12, 9, 10}

Public defence directories and tender pages are not complete records of private procurement, undisclosed subcontracting or every end user of commercial software.^{25, 26} The absence of a public record therefore cannot conclusively exclude all undisclosed use. It does, however, prevent attributing military involvement on the evidence reviewed.

Martin Casado’s biography records historical US defence and intelligence-related work before his Netlify board role, but it does not establish a Netlify contract with Israel or an Israeli weapons programme.²⁷ Portfolio-company activities and individual professional histories are not treated as transitive evidence against Netlify.

Named Entities and Evidence Map

Digital: Digital

Mechanism of Involvement

Netlify’s most substantial documented nexus is its Wix integration ecosystem. The company announced support for Wix Headless in May 2023 and maintains templates for content management, bookings, events, ecommerce and subscriptions.^{1, 2} The workflow allows a user to authorise access to Wix site and business information and connect Wix services to a frontend deployed through Netlify.²

Depending on implementation, relevant data can include customer or subscriber contact details, payment-related information, appointments, staff and client information, transaction records, IP addresses, usage records and website content.^{3, 28} Wix’s processing agreement states that users-of-users information is initially transferred to Wix.com Ltd. in Israel. This establishes an Israeli corporate processor and corresponding legal-access nexus for data deliberately routed through configured Wix services.³

Wix’s law-enforcement policy provides a formal route for legally valid government requests and identifies categories of information that may be disclosed. Wix states that it evaluates legal authority, limits disclosure to what is legally required, ordinarily provides notice where permitted and does not voluntarily give governments direct surveillance access.²⁸ No named Israeli authority request or confirmed disclosure involving a Netlify-connected Wix application was identified.

Netlify also lists Snyk as an available vulnerability-monitoring integration.²⁹ The listing establishes a customer-facing integration but does not establish mandatory use or internal procurement by Netlify. No biometric, predictive-policing, offensive-cyber or Israeli surveillance deployment was identified.

Counter-Arguments and Evidence Limits

The Wix relationship is optional and customer-configured; it is not shown to be a dependency for every Netlify deployment.^{1, 2} Wix does not control Netlify’s general infrastructure, and the audits found no evidence that it receives unrelated Netlify customer datasets.³

An Israeli processor is not equivalent to physical storage of every request in Israel. Wix identifies principal data-centre locations in the United States and Ireland and permits onward transfers under its processing terms.^{3, 30} The evidence does not establish that every request is executed or persistently stored in Israel, that every Wix subprocessor receives every integration dataset, or that an Israeli authority accessed any particular dataset.

For Netlify’s direct processing, the public subprocessor register lists AWS and other providers with US processing locations and does not identify an Israeli-controlled infrastructure provider or privileged Israeli access arrangement.²¹ Undisclosed support access or contracts outside the public register cannot be conclusively excluded, but none was verified.

No public evidence identified Netlify as a Project Nimbus contractor, subcontractor or marketplace supplier. Israeli procurement records name AWS and Google as selected cloud suppliers; Netlify’s separate use of AWS does not make Netlify a Nimbus participant.^{11, 21}

Named Entities and Evidence Map

Economic: Economic

Mechanism of Involvement

The principal economic nexus is Netlify’s acquisition of Stackbit in June 2023. Netlify described the acquired business as providing visual website-editing capabilities, while third-party records identify Stackbit as Israeli-origin and connect Stackbit Ltd. to a Tel Aviv registration.^{4, 5, 18}

Netlify continued commercial development of the acquired technology. It migrated Stackbit users to Netlify authentication in January 2024 and announced fuller integration of the visual editor in June 2024.^{15, 16} Its April 2026 privacy statement continued to identify Stackbit, Inc. as an affiliate.⁶

The transaction value, payment structure and allocation of proceeds between US and Israeli entities or individuals were not disclosed.⁴ No public evidence identified the amount received by Israeli-resident shareholders or employees, post-acquisition Israeli capital expenditure, Israeli tax payments, current Israel-attributable revenue or intercompany transfers to an Israeli entity.

The audit found no verified Netlify facility in an Israeli settlement, no identifiable settlement revenue and no attributable Netlify or Stackbit entry in the reviewed OHCHR-derived settlement database material.^{31, 32}

Counter-Arguments and Evidence Limits

The strongest mitigating evidence is corporate exit and uncertainty about continuing local operations. Stackbit Ltd. was reported inactive and voluntarily dissolved, while Netlify’s current affiliate disclosure names Stackbit, Inc. but not the Israeli company.^{5, 6} The precise dissolution date and any merger, succession or restructuring mechanism remain unresolved.

No current Israeli Netlify office, separate R&D establishment, payroll entity, verified employee roster or Israel-specific workforce total was established.^{22, 23} Third-party personnel directories and an internally inconsistent Stackbit profile are insufficient to prove continuing employment or a current workplace.

The acquired technology remains commercially active, but continued use of intellectual property is not proof that an Israeli legal entity remains operational or that current revenues flow to Israel. No military manufacturing, defence production or settlement infrastructure was linked to Stackbit.^{4, 5}

Named Entities and Evidence Map

Political: Political

Mechanism of Involvement

The political score rests primarily on documented corporate communications rather than an Israeli state partnership. On 23 March 2022, CEO Mathias Biilmann published an official Netlify statement condemning Russia’s invasion of Ukraine, announcing cessation of business with Russian-owned companies and describing humanitarian donations and support.⁷ The statement simultaneously distinguished the Russian government from ordinary users and defended continued access to hosted applications from Russia.

No equivalent official Netlify statement addressing Gaza, Palestinian civilian protection, settlements, occupation, the July 2024 ICJ advisory opinion or the November 2024 ICC warrants was identified through the research cut-off.⁸ This supports a finding of asymmetrical documented corporate communications.

The further proposition that this asymmetry legitimised Israeli policy was not substantiated. The Ukraine statement does not mention Israel or Palestine, and no evidence showed Netlify encouraging support for Israeli military action or using its silence to endorse state policy.^{7, 8}

No public evidence identified Netlify lobbying for settlement expansion, anti-BDS legislation or Israeli military policy; donating to Israeli military-welfare or settlement organisations; sanctioning employees for Palestinian solidarity; or selectively suppressing Palestinian websites.^{33, 34}

Counter-Arguments and Evidence Limits

Netlify can argue that silence is not an affirmative political endorsement. The audits identified no evidence explaining why the company addressed Ukraine but not Israel-Palestine, and no evidence of its private position.⁸ The documented difference should therefore remain an asymmetry finding, not be hardened into a claim of deliberate legitimation.

The Ukraine donation-matching campaign was completed, and the public record did not verify continuous enforcement of the announced Russian-company restriction through October 2026.^{7, 35} Historical publication and continued accessibility of the statement do not prove uninterrupted operational implementation.

An independent Palestine-solidarity campaign later suggested Netlify as a migration destination for developers leaving competitor Vercel.³⁶ That recommendation is contextual and does not constitute Netlify’s endorsement of the campaign or establish a corporate pro-Palestinian position.

Named Entities and Evidence Map

Counter-Arguments

Netlify’s strongest overall defence is that it is a civilian web-development platform with no verified Israeli military, intelligence, settlement or government-cloud customer. The audits found no purpose-built weapons, targeting, biometric-surveillance or offensive-cyber product; no defence procurement award; and no named operational deployment for Israeli security forces.^{9, 10, 11}

The digital nexus is bounded by user choice. Developers elect whether to connect a Netlify frontend to Wix services, and the resulting data categories depend on implementation.^{1, 2, 3} Wix’s Israeli processing role does not establish control over Netlify’s platform, blanket access to Netlify customers or government access in a specific case. Wix also publishes procedural safeguards governing official requests.²⁸

The economic nexus has been materially mitigated by the reported dissolution of Stackbit Ltd. and the absence of verified continuing Israeli operations.^{5, 6} Netlify’s continued use of Stackbit technology supports acquisition continuity but does not by itself prove a current Israeli subsidiary, workforce, tax contribution or settlement connection.

Finally, the political evidence establishes unequal public attention, not an affirmative Israel-related policy. No causal evidence tied Netlify’s Ukraine advocacy or its silence on Palestine to support for Israeli state conduct.⁸ The fixed scores preserve these distinctions: Military is zero, and the non-zero political and economic values do not convert unresolved inferences into documented facts.

Complicity Index Score

Method: V6.6

• V_MAX: 5.10 Avg_OTHERS: 1.77
• BRS Score: 454 Tier: C (Substantial Complicity)

Digital supplies the V_MAX because the Wix integrations are current, operationally documented and capable of routing relevant customer-selected data to an Israel-based processor. Economic reflects the Stackbit acquisition but is moderated by the Israeli entity’s reported dissolution and the absence of verified current operations; Political reflects asymmetrical communications without treating silence as proven endorsement, while Military remains zero.

The V6.6 method is scale-free, evidence-only and human-vetted. The BRS of 454 and Tier C (Substantial Complicity) are the fixed final results and do not imply a military or settlement finding.

Methodology Note

• The dossier uses only facts established in the four supplied domain audits; unresolved propositions are qualified or excluded.
• Impact (I) measures the type of activity rather than company size; Magnitude (M) measures documented scale; Proximity (P) measures the directness of the attributable relationship.
• The temporal rule mitigates divested, dissolved or exited operations. Stackbit’s continuing technology integration is distinguished from the unverified continuation of Stackbit Ltd. or an Israeli workplace.
• Entity attribution is non-transitive: investor portfolios, board members’ prior careers, cloud suppliers’ separate government contracts and customer conduct are not automatically attributed to Netlify.
• A verified settlement operation would count in both Economic and Political, but no Netlify settlement operation was identified in these audits.
• “No public evidence identified” denotes that the specified checks did not produce supporting evidence; it is not framed as proof that undisclosed activity is impossible.