Royal Mail DIGITAL

Target: Royal Mail Group Limited and relevant corporate group entities

Research date: 23 October 2026

Scope: Enterprise technology, Israeli-origin technology vendors, digital infrastructure, data processing, surveillance, AI, government technology contracts, technology investment and related regulatory records.

Enterprise Technology Stack & Vendor Relationships

Israeli-origin technology - Wiliot

On 30 October 2024, Royal Mail announced a commercial technology partnership with Wiliot to introduce digital tracking across its logistics network, initially covering approximately 850,000 wheeled containers, known as Yorks, with sensors monitoring location, humidity and temperature.¹

Royal Mail’s current technology careers website continues to identify Wiliot as a technology partner and describes its deployment of tracking technology across the company’s UK logistics network.²

Wiliot’s corporate website identifies Israel as the location of its headquarters and lists additional offices internationally, including London and several United States locations.³

Wiliot describes its underlying technology as battery-free Bluetooth IoT Pixels, supported by network infrastructure and a cloud-based Physical AI platform that converts sensor signals into operational information.⁴

Wiliot’s press archive independently records the October 2024 Royal Mail deployment and its coverage of approximately 850,000 containers.⁵

Contemporaneous reporting by RCR Wireless News confirms that Royal Mail intended to use Wiliot’s technology to improve visibility of container movements, with plans to extend tracking to individual parcels and capabilities for monitoring temperature and humidity.⁶

Scale of integration

The announced Wiliot implementation covered approximately 850,000 reusable transport containers, making it a network-wide logistics asset-tracking programme rather than a small office software deployment.¹

Royal Mail’s public description identifies the operational purpose as improved parcel visibility, delivery reliability and vehicle-use efficiency.²

Wiliot’s published architecture includes cloud analytics; the consulted Royal Mail-specific material does not establish whether all the supplier’s platform components are deployed in Royal Mail’s implementation or identify the geographical location of data processing.⁴

Other confirmed enterprise platforms

In an interview published on 12 November 2025, Royal Mail’s Cyber Portfolio and Architecture Director, Martin Hardy, described an identity-governance modernisation programme involving SailPoint IdentityIQ, SailPoint Identity Security Cloud and SAP Identity Management.⁷

The programme involved integrating identity-management functions across more than 500 applications, with Microsoft Azure and Google Cloud among the major services included in the migration.⁷

The interview identifies SailPoint as an enterprise identity-management supplier but does not establish procurement of the Israeli-origin cybersecurity products named in the audit brief.⁷

Microsoft technology

Microsoft’s Royal Mail customer-series publication describes enterprise AI adoption, including an HR agent and the company’s work on governance and deployment of agent-based technologies.⁸

The publication establishes a Royal Mail-related Microsoft enterprise technology initiative but does not identify technology supplied by Royal Mail to Israeli government or military customers.⁸

Other technology suppliers and integrators

BEUMER Group announced on 30 July 2020 that Royal Mail had selected it to provide technology for the automated parcel hub at Warrington, including parcel sortation and integration with Royal Mail’s existing operational systems.⁹

International Post Corporation reported that Royal Mail reached approximately 90% parcel automation in March 2025 following investments in automated hubs, conveyors and parcel-sorting machinery.¹⁰

A joint Royal Mail and Zebra Technologies announcement dated 10 June 2015 [pre-2020] identified Zebra as the supplier of 76,000 TC75 handheld Postal Digital Assistants within a five-year technology investment programme valued at approximately £130 million.¹¹

The same announcement identified BT as the procurement and managed-services partner responsible for continuing maintenance of the handheld devices; it does not establish whether the original contract remained active after 2020.¹¹

A 2016 [pre-2020] interview with Royal Mail’s then-CIO Catherine Doran further described the BT-managed handheld-device programme and operational requirements for scanning and delivery transactions.¹²

Israeli-origin cybersecurity vendors

No public evidence identified in the consulted Royal Mail technology disclosures, named executive interview and supplier materials establishing direct Royal Mail licensing or integration of Check Point, Wiz, SentinelOne, CyberArk, NICE, Verint, Claroty or Palo Alto Networks.^{2, 7}

Indirect deployment through integrators

No public evidence identified establishing that BT, BEUMER, Microsoft or another documented Royal Mail integrator installed a named Israeli-origin cybersecurity or surveillance product as part of the Royal Mail engagements examined.^{8, 9, 11}

Wiliot’s Royal Mail case study, dated 25 March 2025 in its published case-study archive, documents an implementation covering more than 900,000 rolling cages equipped with battery-free Bluetooth IoT Pixels, exceeding the approximately 850,000 containers reported in October 2024. The case study states that Bluetooth readers were installed in 8,000 Royal Mail vehicles and that the system provided real-time inventory visibility across approximately 5,000 locations. These figures establish a larger reported deployment footprint and operational coverage than the original announcement, although the publication does not specify when the additional cages were tagged.^{13, 14}

Wiliot’s March 2025 case study explicitly describes Royal Mail as having implemented the Wiliot Intelligence Platform. Its reported operational results include locating more than 180,000 previously unaccounted rolling cages valued at over £20 million, avoiding millions of pounds in unnecessary replacement purchases, improving vehicle utilisation and reducing fuel consumption. These are supplier-reported implementation outcomes rather than projected benefits, confirming operational use of the platform. The publication does not provide independent verification of the financial savings.¹³

Surveillance, Biometrics & Retail Technology

Facial recognition and biometrics

No public evidence identified in the examined operational technology disclosures establishing Royal Mail procurement or use of Israeli-origin facial-recognition, biometric identification, gait-analysis or retail surveillance products supplied by Trigo, BriefCam, AnyVision/Oosto, Trax or comparable providers.^{2, 7}

The historical Zebra handheld-device programme supported barcode scanning and customer signature capture, but its supplier announcement did not identify facial recognition or Israeli-origin biometric processing.¹¹

Operational location monitoring

Royal Mail’s Wiliot deployment involves tracking the location and environmental conditions of transport containers within the delivery network.¹

Wiliot’s product documentation describes sensor-data collection and cloud-based interpretation of physical asset information.⁴

The cited deployment materials do not establish that the tracking system is designed to identify individuals, monitor employees’ personal movements or collect biometric information.^{1, 6}

Predictive analytics and workforce monitoring

Royal Mail’s published technology recruitment material describes extensive use of operational data, AI and automation, including approximately 650 million daily data points across its technology environment.²

No public evidence identified in the examined technology disclosures of Israeli-origin predictive policing, employee sentiment monitoring, social-media surveillance or comparable monitoring software deployed by Royal Mail.^{2, 7}

Indirect surveillance technology

No public evidence identified that Israeli-origin facial-recognition or behavioural surveillance capabilities are deployed through the Royal Mail suppliers and programmes verified in this audit.^{7, 9, 11}

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Enterprise cloud infrastructure

Royal Mail’s 2025 identity-management programme explicitly included Microsoft Azure and Google Cloud among the enterprise services being integrated into its identity-governance environment.⁷

Microsoft’s Royal Mail publication separately documents enterprise AI adoption involving an HR agent and agent-based technologies.⁸

Israeli cloud infrastructure

Wiliot’s company profile places its headquarters in Israel, while its technical documentation describes a cloud-connected operational intelligence platform.^{3, 4}

The public material examined does not specify the hosting region, processing jurisdiction, disaster-recovery location or support-access arrangements for Royal Mail data handled by Wiliot.^{1, 4}

No public evidence identified establishing that Royal Mail operates, leases or maintains data-centre infrastructure in Israel.^{2, 7}

Data processing and exposure

Royal Mail’s Wiliot project documents location, humidity and temperature information associated with wheeled logistics containers.¹

Wiliot states that its technology sends sensor information through connectivity infrastructure to its cloud-based Physical AI platform.⁴

The examined sources do not establish that Royal Mail customer names, addresses, payment information or other directly identifying personal data are included in the information transferred to Wiliot.^{1, 4}

No public evidence identified establishing storage of Royal Mail customer data in Israel, routine access to that data by Israeli-based personnel or processing under Israeli jurisdiction.^{1, 3, 4}

Government cloud initiatives

No public evidence identified in the examined Royal Mail enterprise technology and ownership disclosures establishing Royal Mail participation in Project Nimbus or a comparable Israeli government cloud infrastructure contract.^{7, 8, 15}

Sovereign cloud and resilience

No public evidence identified in the examined supplier and corporate disclosures of Royal Mail marketing or delivering data-sovereignty, sovereign-cloud or digital-resilience technology to Israeli government, military or intelligence organisations.^{2, 15}

Corporate-group context

EP Group identifies International Distribution Services, Royal Mail and GLS within its logistics portfolio.¹⁵

Royal Mail Pension Plan’s corporate update confirms EP Group’s acquisition of IDS in 2025.¹⁶

The examined group-level materials do not establish a shared Royal Mail, IDS or GLS technology platform hosted in Israel.^{15, 16}

On 31 March 2026, Wiliot announced a strategic partnership with Databricks and stated that its Physical AI platform and supply-chain solutions run on Databricks infrastructure. The announcement describes the use of Databricks lakehouse architecture, computing, storage and data-processing capabilities to ingest and analyse real-time information generated by Wiliot IoT Pixels. It also explicitly identifies Royal Mail among enterprises using Wiliot’s Physical AI platform. This establishes a documented supplier-level infrastructure relationship and confirms Royal Mail’s use of the relevant platform, but does not independently establish the precise infrastructure configuration, data-processing arrangements or migration status of Royal Mail’s deployment.¹⁷

March–October 2026 - no public evidence identified: the examined Wiliot Royal Mail case study and Wiliot–Databricks partnership announcement do not explicitly confirm that Royal Mail’s operational tracking records are processed or stored through Databricks infrastructure. The announcement does not identify a Royal Mail-specific Databricks workspace, tenant, deployment configuration, hosting region, data-residency arrangement or processing jurisdiction. Royal Mail’s identification as a Wiliot customer, combined with Wiliot’s general Databricks platform architecture, supports a plausible indirect infrastructure dependency but is insufficient to verify the processing location or infrastructure used for Royal Mail’s particular datasets.^{13, 17}

Defence, Intelligence & Security Sector Technology Relationships

Israeli military and intelligence contracts

No public evidence identified in the examined Royal Mail corporate disclosures, technology supplier announcements and ownership materials establishing technology contracts between Royal Mail and the Israel Defence Forces, Israeli Ministry of Defence or Israeli intelligence agencies.^{1, 2, 15}

Dual-use technology

The documented Wiliot relationship concerns asset location tracking, environmental monitoring and commercial supply-chain optimisation.^{1, 4}

The underlying Wiliot technology includes general-purpose sensors and cloud-based processing capabilities that can be applied to physical asset monitoring.⁴

No public evidence identified in the reviewed Royal Mail deployment announcements establishing use of Royal Mail’s Wiliot deployment for Israeli military intelligence, surveillance or security operations.^{1, 6}

Offensive cybersecurity

No public evidence identified in the examined Royal Mail technology and cybersecurity materials of Royal Mail developing, licensing, selling or maintaining offensive cyber tools, exploit platforms or digital weapons systems for Israeli state entities.^{2, 7}

Royal Mail cybersecurity incident

On 11 January 2023, the United Kingdom’s National Cyber Security Centre confirmed that it was working with Royal Mail and the National Crime Agency to investigate an incident affecting the company.¹⁸

The NCSC statement does not identify an Israeli state actor, Israeli technology supplier or Israeli defence institution as involved in the incident.¹⁸

Historical operational technology

Royal Mail’s 2015 [pre-2020] handheld-device programme was designed for parcel scanning, signature capture and delivery-process efficiency.¹¹

The supplier announcement does not identify military or intelligence applications of those devices within Israel or occupied territories.¹¹

AI, Algorithmic & Autonomous Systems

Enterprise AI initiatives

Microsoft’s published Royal Mail customer programme describes the company’s work on an HR agent, enterprise AI adoption and governance of agent-based technology.⁸

The material identifies business-process and organisational applications rather than military or intelligence functions.⁸

Supply-chain AI

Wiliot’s technology platform uses AI-driven services to interpret sensor signals and support decisions concerning physical assets and supply-chain operations.⁴

Royal Mail’s announced Wiliot deployment focuses on improving asset visibility, parcel journeys, operational reliability and transport efficiency.¹

Automated logistics

Royal Mail’s Warrington hub programme incorporated automated parcel handling and sortation integrated with the company’s existing operational systems.⁹

Industry reporting in March 2025 recorded that Royal Mail had achieved approximately 90% parcel automation across its operations.¹⁰

These programmes concern commercial parcel-processing and logistics operations.^{9, 10}

AI provision to Israeli government bodies

No public evidence identified in the examined Royal Mail, Microsoft and Wiliot materials establishing Royal Mail provision of AI or machine-learning systems to Israeli state, military or security bodies.^{1, 4, 8}

Training data and surveillance-derived datasets

No public evidence identified in the examined Royal Mail AI and supplier materials that Royal Mail trains AI models using intercepted communications or surveillance-derived datasets originating in Israel or occupied Palestinian territories.^{4, 8}

Autonomous targeting and military applications

No public evidence identified in the reviewed Royal Mail technology programmes of Royal Mail developing or supplying autonomous targeting, target-generation, fire-control or lethal decision-support systems.^{2, 8}

Technology Ecosystem & R&D Footprint

Israeli technology supplier presence

Wiliot’s corporate website explicitly identifies Israel as its headquarters location.³

The company’s technology activities include IoT sensor hardware, network connectivity, cloud-based physical intelligence and AI-enabled supply-chain applications.⁴

Calcalist reported on 27 July 2021 that Wiliot had raised $200 million in a financing round led by SoftBank Vision Fund 2, documenting its position within the Israeli technology investment ecosystem.¹⁹

The 2021 financing report concerns Wiliot itself and does not establish that Royal Mail participated in the financing.¹⁹

Royal Mail R&D in Israel

No public evidence identified in the examined Royal Mail technology and corporate group disclosures establishing a Royal Mail-owned research centre, engineering office, accelerator or innovation laboratory in Israel.^{2, 15}

Acquisitions and strategic investments

No public evidence identified in the examined Royal Mail and EP Group materials establishing Royal Mail’s acquisition of an Israeli technology company or direct strategic investment in an Israeli technology startup or venture capital fund.^{15, 16}

Controlling principals

EP Group’s published corporate information identifies IDS and Royal Mail as part of its logistics portfolio.¹⁵

No public evidence identified in the examined corporate ownership disclosures establishing a personal investment by a Royal Mail or EP Group controlling principal in NSO Group, Cellebrite, Carbyne, Oosto, Wiz, Check Point, Verint or other named Israeli surveillance or intelligence technology suppliers.^{15, 16}

Patent and intellectual-property relationships

No public evidence identified in the examined Royal Mail technology disclosures of patent licensing or technology co-development agreements with Technion, Hebrew University, Weizmann Institute or other Israeli research institutions.^{2, 15}

Other technology investment

BEUMER’s 2020 Warrington hub announcement and the 2025 parcel automation reporting document Royal Mail investment in physical logistics automation technology.^{9, 10}

The examined BEUMER materials do not attribute those systems to an Israeli technology supplier.⁹

Civil Society Scrutiny & Regulatory History

International regulatory context

The United Kingdom’s published Investigatory Powers Act notices-regime code of practice includes provisions covering certain obligations of postal operators, including technical capabilities, security safeguards and reporting procedures.²⁰

The general regulatory framework does not establish that Royal Mail received a particular technical capability notice or supplied surveillance technology to any Israeli agency.²⁰

Royal Mail-specific NGO investigations

No public evidence identified in the examined Royal Mail corporate, supplier and technology materials of an NGO investigation specifically documenting Royal Mail provision of surveillance or other digital technology to Israeli military or government authorities.^{1, 2, 15}

Settlement-related technology

No public evidence identified in the reviewed Royal Mail supplier announcements or group disclosures establishing provision of Royal Mail-owned technology, surveillance systems or digital infrastructure to Israeli settlements in the occupied Palestinian territories.^{1, 9, 15}

Boycott and divestment campaigns

No public evidence identified in the examined corporate and technology supplier materials of an organised boycott campaign specifically targeting Royal Mail’s Wiliot deployment or alleged provision of digital technology to Israeli state security organisations.^{1, 5, 15}

Post-July 2024 technology relationship

Royal Mail publicly announced its Wiliot partnership on 30 October 2024, following the International Court of Justice’s advisory opinion of 19 July 2024 concerning Israel’s policies and practices in the occupied Palestinian territory.¹

Royal Mail’s technology careers website continued to describe the Wiliot deployment when reviewed in October 2026.²

The available material does not establish the precise contract execution date, duration, renewal provisions or whether new commercial commitments were made after the International Criminal Court’s November 2024 arrest warrants.^{1, 2}

Cybersecurity regulation

The NCSC confirmed its involvement in investigating Royal Mail’s January 2023 cybersecurity incident.¹⁸

The statement provides no evidence connecting that incident to technology provision to Israeli state institutions.¹⁸

Related group and pension technology

Capita announced on 2 July 2024 that it had renewed its contract with the Cabinet Office to administer the Royal Mail Statutory Pension Scheme, with arrangements involving Microsoft Dynamics and its Hartlink platform.²¹

That contract concerns the statutory pension scheme and does not independently establish direct Royal Mail Group procurement of those technologies.²¹

Public technology governance

Royal Mail Pension Plan published updates in 2025 confirming the acquisition of IDS by EP Group and the continuation of pension trustee oversight.²²

The available Royal Mail corporate and Microsoft materials document enterprise technology modernisation, including identity governance, cloud services and internal AI adoption.^{7, 8}

Current technology transformation

A Royal Mail job advertisement available during October 2026 described an active CRM transformation programme involving Salesforce and customer experience platforms.²³

The advertised programme concerns customer-facing enterprise technology; the job description does not identify an Israeli-origin software provider or Israeli government end user.²³

Israel-related regulatory action

No public evidence identified in the examined UK cybersecurity, company and supplier records of export-control enforcement, sanctions proceedings or regulatory investigations concerning Royal Mail’s provision of technology to Israeli military, intelligence or settlement institutions.^{15, 18, 20}