PepsiCo DIGITAL

Enterprise Technology Stack & Vendor Relationships

• PepsiCo announced a multi-year collaboration with Google Cloud in April 2026, describing a migration to Google Cloud infrastructure within a wider multi-cloud strategy.¹

• PepsiCo states that the collaboration will use Gemini Enterprise for data, analytics, supply-chain, go-to-market, and workforce workflows across its global operations.¹

• The reviewed announcement does not identify Israeli data hosting, routing, state customers, or Israeli government-facing workloads.¹

• No public evidence identified of PepsiCo licensing or integrating a verified Israeli-origin enterprise-security provider in the reviewed disclosures, supplier materials, targeted relationship searches, and supplied UN-report library.^{1, 2, 3}

• No public evidence identified of a publicly documented systems-integrator engagement deploying Israeli-origin technology for PepsiCo.^{1, 2}

• An Israeli issuer filing reports that PepsiCo ordered 5,000 electronic units for smart caps and related services from Water.io/impacX in November 2020 for $172,500, and states that delivery was completed during the reporting period.⁴

• The same filing reports that PepsiCo entered a two-year commercial agreement in February 2022, scheduled through 31 December 2023, for hundreds of thousands of electronic units for smart beverage bottles; it describes an initial $765,000 amount expanded to approximately $3.45 million and approximately $2.385 million of electronic units supplied in the first quarter of 2023.⁴

• No public evidence identified in the bounded review of renewal, deployment, data processing, or support for the Water.io/impacX relationship after 31 December 2023, including after 19 July 2024 or November 2024.^{4, 5}

Surveillance, Biometrics & Retail Technology

• FORM identifies PepsiCo as a user of its machine-learning and computer-vision image-recognition software for shelf-share, retail-compliance, pricing, and retail-execution measurement.⁶

• FORM’s PepsiCo-related product material describes retail-product and shelf analysis rather than facial recognition, biometric identification, gait analysis, or predictive-policing functionality.⁶

• PepsiCo’s PEPIRiS Turkey Google Play listing describes a field-sales application that photographs shelves, coolers, and displays; stitches images; and applies on-device product recognition and object detection for planogram compliance.⁷

• The PEPIRiS Turkey listing states that inference is performed on the device and can operate without internet connectivity.⁷

• Water.io/impacX’s filing describes sensors in smart bottles or caps that monitor use and consumption, send data to an app, and provide an associated cloud dashboard; it does not describe facial recognition, biometrics, or retail loss-prevention.⁴

• No public evidence identified that the reviewed FORM or PEPIRiS retail-image-recognition deployments are Israeli-origin, or that PepsiCo uses Israeli-origin facial-recognition, biometric, behavioural, sentiment-monitoring, or workforce-surveillance technology.^{6, 7}

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

• PepsiCo’s Google Cloud announcement describes a global infrastructure migration and digital-capability programme but does not disclose cloud-region locations, data-residency commitments, Israeli jurisdictional access, or whether PepsiCo workloads use infrastructure in Israel.¹

• PepsiCo’s 2025 annual-report materials describe broad technology, analytics, e-commerce, and innovation activity without publishing a cloud-region or processor/subprocessor inventory for Israel.²

• The Water.io/impacX filing states that PepsiCo agreed to develop or expand the smart-bottle app and regulate use of data collected from PepsiCo customers using it.⁴

• A separate 10 June 2022 Water.io/impacX agreement gave PepsiCo access to a cloud-managed SaaS smart-drinking platform that the filing says processes, stores, and manages data collected by smart bottles.⁴

• The filing describes a per-bottle annual subscription model, says the agreement also governed use of data produced by smart bottles sold by PepsiCo, and reports approximately $309,000 in agreement value as of the filing date after approximately $168,000 in 2022.⁴

• The available filing identifies impacX’s Rehovot, Israel address and states that its operations are concentrated in Israel and the United States, but does not identify the cloud provider, cloud region, physical storage or processing location, subprocessor list, cross-border routing, access controls, or Israeli legal accessibility of PepsiCo or consumer data.⁴

• No public evidence identified that PepsiCo participates in Project Nimbus or another Israeli government cloud programme, or provides digital-sovereignty or resilience services to Israeli state or military bodies.³

• The reviewed UN report discusses Project Nimbus in connection with other companies, while the supplied document review recorded no PepsiCo mention in that report.³

Defence, Intelligence & Security Sector Technology Relationships

• No public evidence identified of PepsiCo technology contracts, service agreements, or partnerships with the Israeli Ministry of Defence, IDF, intelligence agencies, police, or other security bodies in the reviewed PepsiCo, SEC, issuer, UN, and NGO materials.^{1, 3, 8, 4}

• No public evidence identified of PepsiCo developing, licensing, maintaining, or supplying offensive-cyber capabilities or digital-weapons systems for Israeli state actors.^{1, 2, 3}

• PepsiCo’s 2018 merger agreement identifies Saturn Merger Sub Ltd. as an Israeli-organized wholly owned merger subsidiary and SodaStream International Ltd. as an Israeli-organized company.⁸

• The same agreement provides that SodaStream would become a wholly owned subsidiary after closing and continue under Israeli law with a registered Israeli office, but it does not evidence technology provision to Israeli state, military, intelligence, settlement, cloud, or surveillance customers.⁸

• PepsiCo’s 2025 Form 10-K identifies an owned “IB Franchise” manufacturing plant in Lehavim, Israel, without identifying the operating legal entity in the cited property table.⁹

• No public evidence identified of state-security, Project Nimbus, IDF, intelligence, or police contracts involving PepsiCo, SodaStream, Water.io/impacX, or the JVP Play activity.^{1, 3, 8, 4}

AI, Algorithmic & Autonomous Systems

• PepsiCo reports investments in AI and data analytics for consumer insights and research, while its Google Cloud collaboration extends AI-enabled work to supply-chain and go-to-market decision support.^{1, 2}

• Neither reviewed record identifies Israeli state, military, intelligence, or law-enforcement customers for these AI and analytics activities.^{1, 2}

• JVP announced on 26 March 2018 that PepsiCo, Tesco, and Barclays would collaborate with ten selected startups addressing AI and deep-learning challenges in retail and finance; JVP stated that the corporate participants would provide senior experts, market knowledge, and real-world testing.¹⁰

• JVP identified PepsiCo’s ESSA Venturing & Innovation head, David Schwartz, as describing PepsiCo’s participation as identifying opportunities for international startups.¹⁰

• Startup Nation Central’s 2018 report describes JVP Play as a four-to-six-month programme in which multinational corporations would work with qualifying startups to define requirements and test, validate, and augment solutions through proofs of concept or pilots.¹¹

• The report states that programme outcomes could include adoption, product commercialisation, or an equity stake, but neither it nor the JVP announcement states that PepsiCo achieved any of those outcomes.^{10, 11}

• JVP’s selected-startup list included retail technologies such as Oriient’s indoor location technology, video analytics for frictionless checkout from an unnamed stealth startup, CB4’s retail machine learning, Water.IO connected packaging, and cnvrg.io’s data-science platform; the announcement does not state which, if any, PepsiCo tested or adopted.¹⁰

• No public evidence identified of a PepsiCo investment amount, budget commitment, equity purchase, contractual minimum, payment to a JVP Play startup, technology licence, procurement award, executed proof of concept, or completed deployment arising from JVP Play.^{10, 11}

• JVP framed adoption as subject to proof-of-concept viability and as an option for corporate participants to become customers or design partners, rather than a confirmed PepsiCo implementation.¹⁰

• A later Water.io/impacX filing documents commercial activity involving PepsiCo smart-bottle technology, but neither that filing nor JVP’s announcement expressly attributes the relationship to JVP Play; the shared Water.io name alone does not establish that the later relationship resulted from the 2018 platform.^{10, 4}

• No public evidence identified of PepsiCo AI or machine-learning systems being trained on Israeli or occupied-territory civilian, communications, or surveillance-derived data.^{1, 2, 3}

• No public evidence identified of PepsiCo providing autonomous targeting, target-generation, autonomous tracking, or comparable military AI systems.^{1, 2, 3}

Technology Ecosystem & R&D Footprint

• PepsiCo’s 2025 Form 10-K defines PepsiCo as PepsiCo, Inc. and its consolidated subsidiaries and reports operations involving authorized bottlers, contract manufacturers, and other third parties in more than 200 countries and territories.⁹

• PepsiCo reports six operating segments: PepsiCo Foods North America, PepsiCo Beverages North America, International Beverages Franchise, Europe Middle East and Africa, Latin America Foods, and Asia Pacific Foods.⁹

• PepsiCo’s 2025 subsidiary exhibit lists So Spark Ltd., SodaStream Industries Ltd., SodaStream International Ltd., and SodaStream Israel Ltd. as Israeli-jurisdiction entities, but identifies jurisdiction only and does not disclose ownership percentages, reporting chains, directors, operations, or digital/R&D functions.¹²

• In September 2018 merger materials, PepsiCo Ventures B.V. was described as a wholly owned PepsiCo subsidiary, Saturn Merger Sub Ltd. as its direct wholly owned Israeli subsidiary, and SodaStream as becoming a direct wholly owned subsidiary of PepsiCo Ventures B.V. after the transaction.¹³

• PepsiCo’s 2025 annual-report materials and its 2026 Google Cloud announcement continue to identify SodaStream within PepsiCo’s portfolio, supporting the conclusion that the brand remains within the group.^{1, 2}

• SodaStream’s current support material states that Pepsi-branded, bubly, and SodaStream Classic flavours are produced at its Ashkelon, Israel factory.¹⁴

• PepsiCo’s 2025 annual report describes global R&D across food, packaging, merchandising, dispensing equipment, SodaStream innovation, AI/data analytics, and e-commerce, while its listed research-centre countries do not include Israel.²

• The absence of Israel from that listed research-centre country set does not establish the absence of other PepsiCo or SodaStream technical operations in Israel.²

• A PepsiCo job posting lists Kefar Sava, Israel among possible locations for a SodaStream Digital Growth & Analytics Senior Director role, describing responsibility for global data analytics and measurement, digital marketing and media execution, loyalty, subscription, and data-driven growth; the posting evidences a recruitment location and role description, not a disclosed data centre, R&D centre, or processor location.¹⁵

• PepsiCo announced a partnership with Israeli-headquartered N-Drip in March 2022 to support adoption of gravity-powered irrigation technology across 10,000 hectares by 2025, and PepsiCo’s water page continued to describe the partnership when accessed in September 2026.^{16, 17}

• The reviewed PepsiCo sources characterise N-Drip’s product as physical gravity-powered irrigation technology rather than software, cloud, analytics, cyber, surveillance, biometrics, or data-processing services.^{16, 17}

• No public evidence identified that the N-Drip partnership involved PepsiCo equity investment, Israeli state customers, data processing in Israel, or an Israeli digital-technology deployment.^{16, 17}

• The Water.io/impacX smart-packaging, app, cloud-SaaS, and data-dashboard relationship is a documented Israeli-origin digital-technology relationship, but the reviewed records do not disclose a PepsiCo equity investment in impacX/Water.io.^{4, 5}

• Beyond the documented Water.io/impacX relationship and JVP Play participation, no additional PepsiCo-group investment, partnership, or deployment involving an Israeli-origin digital-technology company was verified in the bounded research; N-Drip is separately identified as physical irrigation technology, and the SodaStream acquisition is separately documented.^{18, 8, 16, 4, 12}

• No public evidence identified in the reviewed records of PepsiCo acquiring another Israeli-origin digital-technology company, investing in Israeli cyber or AI firms or funds, or entering a documented digital-technology co-development, patent, or research-institution arrangement.^{2, 8, 4}

• PepsiCo’s 2025 Form 10-K states that it acquired Strauss Group’s remaining 50% interest in Sabra Dipping Company LLC in December 2024, making Sabra wholly owned; the filing characterises Sabra as a refrigerated-dips-and-spreads business and does not identify an Israeli digital-technology relationship.⁹

• PepsiCo’s 2026 proxy identifies Ramon L. Laguarta as CEO and director since 2018 and Board Chair since 2019.¹⁹

• PepsiCo’s board page lists Laguarta and 12 independent directors, while the 2026 proxy reports Vanguard Group at 10.1% beneficial ownership and BlackRock at 8.2% as of 26 February 2026.^{19, 20, 21}

• No public evidence identified in the bounded review of personal or family-office investments, governance roles, or controlling interests held by PepsiCo directors, the CEO, Vanguard, BlackRock, or other named major shareholders in Israeli surveillance, cyber, AI, SIGINT, military-technology, settlement, or state-security entities; this is a bounded research finding, not a representation that such interests cannot exist.^{19, 20, 21}

• No public evidence identified that the current Israeli PepsiCo/SodaStream entities operate a data centre, cloud region, cybersecurity operation, AI lab, or other digital R&D facility.¹²

Civil Society Scrutiny & Regulatory History

• The supplied document-scoped review recorded no PepsiCo mention in UN Human Rights Council report A/HRC/59/23 or the 2023 OHCHR settlement-business database update, and this finding does not establish database-wide or entity-wide absence.^{3, 22}

• No public evidence identified in the checked BDS priority-target material of a campaign specifically grounded in PepsiCo technology provision to Israeli state bodies or occupied-territory operations.²³

• No public evidence identified in the bounded searches and supplied canonical-library review of a regulatory inquiry, court case, export-control action, sanctions investigation, or parliamentary proceeding concerning PepsiCo technology sales or services to Israeli state-security bodies or in occupied territory.^{1, 2, 3, 22}

• The reviewed materials do not establish that PepsiCo’s Lehavim or Ashkelon facilities are located in internationally recognized occupied territory.^{9, 14}