River Island DIGITAL

Enterprise Technology Stack & Vendor Relationships

Israeli-origin software and services (checked by name)

• Cloudinary, media and digital asset management: a release dated 20 June 2022 says River Island selected Cloudinary’s Media Experience Cloud and Digital Asset Management platform, replacing Adobe Scene7, with an AI-based fashion detection add-on that identifies attributes such as material, fastenings and pockets ^{1, 2}. Cloudinary’s own About page lists offices in Petah Tikva and Ramat Yishay in Israel and in San Jose in the US, and says three developers started the company in 2012 ³. Cloudinary’s own customer page for River Island, retrieved on 3 November 2026 with a 2026 copyright notice, describes the Cloudinary DAM as “at the heart” of River Island’s MACH-based stack, with auto-tagging, image recognition, automated product attribution and multi-CDN delivery ⁴. The earliest dated observation is 20 June 2022 and the latest dated observation is the undated customer page seen on 3 November 2026 ^{1, 4}. Whether the relationship is continuing is unknown, because the customer page carries no project dates and no source states an end or a renewal ⁴. The channels were a republished vendor release on a trade-marketing site, a trade-press article on another party’s site, and Cloudinary’s own site ^{1, 2, 4}. None of these sources states where River Island’s media assets are stored or processed ^{2, 4}.
• Global-e, cross-border checkout and seller-of-record: River Island’s own US terms and conditions page, marked “Last Updated: October 2026”, says “For some International sales We have partnered with Global-e, a third party service acting as Your seller-on-record”, that the payment method is charged by Global-e, and that the purchase is subject to Global-e’s terms and privacy policy shown at checkout ⁵. Global-e’s FY2023 Form 20-F cover page records incorporation in the State of Israel and principal executive offices at 9 HaPsagot Street, Petah Tikva ⁶. The same filing’s risk-factor summary cites “risks related to the ongoing war and related hostilities” tied to the company’s Israeli location ⁶. Global-e describes its Shopify offering as covering localisation in more than 200 markets, local payment methods, guaranteed final cost including tax and duty, import processing, tax compliance, fraud and currency risk management, and returns, and that page does not mention River Island ⁷. The acting entity on the River Island side is River Island, whose exact legal entity name was not confirmed from an opened source ⁵. The recipient is the international online customer whose order Global-e processes ⁵. The status is continuing as at the October 2026 terms page ⁵. The earliest observation in retrieved sources is an undated Tryzens project page that names Global-e among the platforms for the first-phase international rollout, and its banner image was uploaded in December 2025 ^{8, 5}. Where Global-e stores or processes River Island customer data is not stated in the retrieved sources ^{5, 6}.
• Check Point, Wiz, SentinelOne, CyberArk, Nice, Verint, Claroty, Palo Alto Networks: no public evidence identified. River Island’s information security officer spoke at Infosecurity Europe on 3 June 2025 and the coverage names no security vendors ⁹. The Claranet managed-network case study names no technology vendors ¹⁰.

Scale of dependency

• Cloudinary is described as the platform that automates new media asset publishing across River Island’s online channels, and Cloudinary’s own page calls it the central piece of the new media topology ^{2, 4}. Global-e is used for “some” international sales rather than all sales ⁵. No retrieved source describes either as core network security or as the primary cloud platform ^{2, 5, 4}.

Procurement and integrator relationships

• Tryzens Global was selected as River Island’s digital transformation partner to simplify the commerce stack, with a first phase “leveraging the Shopify, Global-e, and Akeneo platforms” for international operations ⁸. The same page does not say who mandated Global-e ⁸.
• Cabiri was the system integrator for Mercaux’s RFID self-checkout deployment in River Island stores, announced 28 February 2023, with commercetools, Talon.One and Stripe named as ISV partners ¹¹.
• Cloudreach helped migrate River Island’s website to Amazon Web Services, per a 12 December 2018 article ¹². This evidence is [pre-2020] and its current status is unknown ¹².
• Akeneo Product Cloud was selected as the core PIM solution, reported 16 December 2025. No integrator was named in that article ¹³.
• Talon.One runs promotions across stores and e-commerce, and River Island moved from a monolithic commerce platform to a MACH architecture ¹⁴.
• Claranet designed and manages an MPLS-based network for stores, offices and delivery centres. The page is undated ¹⁰.
• Samsung Galaxy XCover Pro handhelds replaced Zebra MC14 devices, reported 6 June 2023. Microsoft Teams is mentioned for staff communication ¹⁵.
• No retrieved source shows these integrators mandating or recommending Israeli-origin technology other than the Tryzens reference to Global-e ⁸.

Surveillance, Biometrics & Retail Technology

• Facial recognition, biometrics, behavioural analytics and gait analysis (Trigo, BriefCam, AnyVision/Oosto, Trax or comparable): no public evidence identified. Retrieved sources describe RFID self-checkout built on Mercaux, with shoppers dropping items into an RFID bucket reader ¹¹. They also describe Snowflake holding RFID product data from smart changing rooms showing items tried on but not bought ¹⁶.
• Predictive analytics, sentiment analysis, social media monitoring and workforce surveillance tools of Israeli origin: no public evidence identified. River Island’s Snowflake platform, in use since 2018 and described on 16 May 2023, hosts machine learning models and third-party datasets such as weather and footfall. The article does not state any Israeli origin ¹⁶.
• Indirect deployment via third-party platforms: the only indirect Israeli-incorporated providers documented are Global-e, which handles payment and personal data for some international sales under its own terms and privacy policy, and Cloudinary, which holds image and video assets ^{5, 6, 4}. No surveillance or biometric function is documented for Global-e, and Cloudinary’s image recognition is described as product-attribute tagging of fashion images ^{7, 1, 4}.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

• Data centres in Israel: no public evidence identified that River Island operates, leases or co-locates data centre infrastructure in Israel. Its documented primary cloud provider is AWS: it became main partner about three years before December 2018 ¹². No public evidence identified for the date, scale or status of any later server migration. The AWS relationship is [pre-2020] in origin, and no source retrieved establishes its current status ¹². The retrieved article does not state which AWS region or country stores River Island data ¹².
• Project Nimbus context: Google and AWS won Israel’s roughly NIS 4 billion (about $1.2 billion) cloud tender, reported 21 April 2021, with the sites to “keep information within Israel’s borders under strict security guidelines” ¹⁷. The Finance Ministry described the goal as an all-encompassing cloud solution for the government, the defence establishment and others ¹⁸. Together, these are facts about the vendor AWS. No retrieved source states that River Island participates in, supplies, or is a subcontractor on Nimbus, and the target’s use of AWS as a customer does not establish any such participation ^{12, 17, 18}.
• Data sovereignty and resilience services for Israeli state institutions: no public evidence identified for River Island ¹⁹.

Defence, Intelligence & Security Sector Technology Relationships

• Contracts or partnerships with the Israeli Ministry of Defence, IDF, intelligence agencies or other state security bodies: no public evidence identified. The Wikipedia entry on River Island does not mention Israel ¹⁹.
• Dual-use technology reported as deployed for military or law-enforcement surveillance in Israel or occupied territories: no public evidence identified for River Island technology ¹⁹.
• Offensive cyber and weapons technology: no public evidence identified ¹⁹.

AI, Algorithmic & Autonomous Systems

• AI and machine learning provided to Israeli state, military or security bodies: no public evidence identified. River Island’s documented AI use is internal: machine learning for stock replenishment and allocation on AWS as of 2018 [pre-2020], and machine learning models built on Snowflake as of 2023 ^{12, 16}.
• Training data and model development using population or surveillance-derived data from Israel or occupied territories: no public evidence identified ¹⁶.
• Autonomous target generation or tracking systems: no public evidence identified. This category would belong to Military in any case ¹⁹.

Technology Ecosystem & R&D Footprint

• Israeli R&D centres, innovation labs or accelerators operated by River Island: no public evidence identified. River Island’s franchise page names only the Middle East, Europe and the Far East as franchise regions and does not mention Israel ²⁰.
• Acquisitions of, or investments in, Israeli technology firms by River Island: no public evidence identified ¹⁹.
• Patents or co-development with Israeli institutions (Technion, Hebrew University, Weizmann): no public evidence identified. No dedicated patent-database search was run, and this is recorded as a gap ¹⁹.
• Franchise, supplier and settlement-nexus checks: Gulf News reported on 27 November 2025 that River Island would close all its Middle East stores, operating under Kuwait-based Alshaya Group, and named the UAE, Kuwait and Qatar without mentioning Israel ²¹. River Island’s supplier page lists Israel only as an option in two country dropdowns, and does not mention occupied territories ²². No digital product or service provided in or to settlements was identified ^{20, 22, 21}.

Civil Society Scrutiny & Regulatory History

Ownership and controlling principals

• River Island is privately owned by the Lewis family through the Lewis Trust Group ^{19, 23}. Bernard Lewis, the founder, died in February 2026 aged 100 ^{19, 23}.
• The Lewis family controls Isrotel, an Israeli hotel company. On 29 June 2025 Globes reported a sale of a 4.4% stake for about NIS 210 million at NIS 88.30 per share, reducing the family holding from 74% to 69.6% ²⁴. Isrotel is a hospitality business and no technology function is documented for it in the retrieved sources ²⁴.
• David Lewis, River Island’s co-founder, was also a founder of Isrotel (JTA obituary; the retrieved text gives his death as 9 August at age 87 and no year) ²⁵.

UN OHCHR database of business enterprises (HRC resolutions 31/36 and 53/25)

• The most recent update found was released on 25 September 2026. It lists 214 enterprises from 11 countries, after screening 126 of the 381 remaining companies, adding 61 and removing 5 ^{26, 27, 28, 29}. Opodo and eDreams were among those dropped after reassessment requests ^{26, 28}. WAFA reports that 200 of the 214 were found to be contributing to adverse impacts on self-determination and 14 to be directly linked ²⁹.
• The preceding update, A/HRC/60/19, was released on 26 September 2025 and presented to the Human Rights Council on 29 September 2025. It lists 158 enterprises from 11 countries, found out of 215 assessed from 596 enterprises named in submissions, with 68 added and 7 removed ^{30, 31, 32, 33}. The 2023 update listed 97 companies, according to a 27 September 2025 news report ³⁴. Al-Haq describes the June 2023 update as the one before the 2025 release ³³. The 158 listed in 2025 plus 61 added and minus 5 removed gives the 214 reported in 2026 ^{27, 29}.
• This confirms the existing statement that the database was updated on 30 June 2023 and again in September 2025 ^{35, 36}. It corrects any reading of A/HRC/60/19 as the latest update, because it was superseded on 25 September 2026 by an update listing 214 enterprises ^{26, 27}.
• Whether River Island, the Lewis Trust Group, LFH International or Isrotel appear in the 2023, 2025 or 2026 lists could not be confirmed from the retrieved text, and no retrieved report on the 2025 or 2026 updates names them. The news reports name Israeli food, energy and real-estate firms among the 2026 additions and name no fashion retailer or Lewis-linked entity ³⁷. The OpenSanctions dataset of the list shows 426 entities, last changed 30 September 2026, and its visible 14 most recent additions do not include these names. This does not establish absence from the full dataset ³⁸. No public evidence identified that any of these names is listed.

NGO, academic and UN material

• Powerbase, a campaign wiki last edited 3 April 2024, argues for a boycott of River Island and lists Lewis family charitable trust donations and the Isrotel link. It gives no dates or sources for the donation figures, and its labels are its own characterisations ³⁹. It states, without a cited source, that the family owns Isrotel through LFH International, the parent of the Lewis Trust Group ³⁹.
• A Substack episode first broadcast on 3 September 2024 (post dated 11 June 2025) calls for a River Island boycott, cites only “Palestine Declassified”, and makes no technology claims ⁴⁰.
• The Albanese report A/HRC/59/23 is dated 2 July 2025 ^{41, 42}. No retrieved source ties River Island to it, so no public evidence identified ^{41, 42}.
• The retrieved portion of the Who Profits company list (20 entries of an A-Z listing across 24 pages) showed neither name, and this does not establish absence from the full list ⁴³.

Boycott campaigns, regulatory and legal actions

• Boycott or divestment campaigns specifically about River Island technology provision: no public evidence identified. The only boycott material found is the advocacy content above, which concerns family philanthropy and Israeli business interests ^{39, 40}. A further search for a 2025 or 2026 River Island or Lewis family response found none, so no River Island response to these campaigns was identified ^{39, 40}.
• Regulatory inquiries, legal challenges, export-control or sanctions actions involving technology sales to Israeli state entities: no public evidence identified ¹⁹.

Constructive notice and temporal position

• After the ICJ advisory opinion of 19 July 2024 and the ICC warrants of November 2024, the documented relationships with an Israeli-incorporated provider are Global-e and Cloudinary ^{6, 3}. Global-e appears on River Island’s terms dated October 2026 and in a Tryzens page from about December 2025 ^{8, 5}. Cloudinary’s last dated observation is June 2022, but its customer page about River Island was still published on 3 November 2026, so current status is unknown ^{1, 2, 4}. No retrieved source documents a notice given to River Island or any River Island response ⁵.

Named-entity record

• River Island (target): searched on technology vendors, Israeli state contracts, biometrics, cloud, boycott response and the UN OHCHR lists; findings are set out in the sections above ^{19, 26, 31}.
• Lewis Trust Group (parent): searched with Isrotel and the OHCHR and Who Profits lists; findings are Lewis family control of River Island and Isrotel, with no technology activity and no listing found ^{19, 23, 24, 38}.
• LFH International (described by Powerbase as parent of the Lewis Trust Group): searched with the OHCHR and Isrotel; the only finding is the unsourced Powerbase ownership statement, searched, none found elsewhere ³⁹.
• Bernard Lewis (founder, died February 2026): searched through the ownership and obituary sources; none found on technology or defence ²³.
• David Lewis (co-founder, Isrotel founder): searched via the JTA obituary; the finding is the Isrotel founding role and no technology role ²⁵.
• Isrotel (Lewis family-controlled Israeli hotel company): searched on the stake sale and on the Who Profits and settlement lists; the finding is the 74% to 69.6% holding change on 29 June 2025, no technology function, and no listing found ^{24, 38}.
• Clive Lewis (Deputy Chairman), Leonard Lewis (Non-Executive), Ben Lewis (Non-Executive per Wikipedia), Vanessa Lewis (Creative Director), Will Kernan (listed as CEO in Wikipedia’s infobox, reported to step down in 2023), Richard Bradbury (a former CEO per FashionUnited): the roles are listed in the cited sources, and no separate name-level technology or defence search was run, so none found in the retrieved sources ^{19, 23}.

Act record (summary)

• Cloudinary DAM selection: acting entity River Island (legal name not confirmed), recipient Cloudinary, channels a vendor release on a marketing site, trade press, and Cloudinary’s own customer page, earliest observation 20 June 2022, latest observation 3 November 2026 (undated page), status unknown ^{1, 2, 4}.
• Global-e seller-of-record arrangement: acting entity River Island (legal name not confirmed), recipient Global-e Online Ltd, channel River Island’s own US terms page plus Tryzens’ own project page, earliest dated observation December 2025 (banner upload on the undated Tryzens page), latest October 2026, continuing as at that date ^{8, 5, 6}.
• AWS hosting: acting entity River Island (legal name not confirmed), recipient Amazon Web Services, channel a trade-press article on diginomica (December 2018), no end date found so status is unknown from sources ¹².
• Isrotel stake sale: acting entities described only as “the Lewis family”, buyers not named, channel Globes (29 June 2025), the Lewis family remaining the controlling holder at 69.6% ²⁴.
• OHCHR database updates (acts of the UN Human Rights Office, not of River Island): 30 June 2023, 26 September 2025 and 25 September 2026, each published through OHCHR and reported by news and NGO sites, with the 2026 update the latest known at the research date ^{35, 31, 26}.