SanDisk DIGITAL

Research cutoff: 20 October 2026

Sandisk Corporation is treated here as the independent post-separation flash-storage company. Its 2026 10-K states that the separation from Western Digital was completed on 21 February 2025 and that SNDK shares began regular-way Nasdaq trading on 24 February 2025; Western Digital activity before that date is attributed to current Sandisk only where continuity of the flash business, subsidiary or facility is separately evidenced.¹ Sandisk’s 2026 subsidiary exhibit lists Sandisk Israel Ltd., while the November 2024 SpinCo schedule listed Western Digital Israel Ltd. and the 2025 Sandisk exhibit then listed Sandisk Israel Ltd.; this supports continuity of an Israeli entity within the flash-business perimeter without establishing every intermediate legal step.^{2, 3, 4}

Enterprise Technology Stack & Vendor Relationships

• Israeli-Origin Software & Services: no public evidence identified of current Sandisk licensing or deploying Check Point, Wiz, SentinelOne, CyberArk, NICE, Verint, Claroty, Palo Alto Networks or another specifically identified Israeli-origin cybersecurity/analytics platform. [pre-2020] A Sandisk product-security advisory credits CyberArk Labs researchers with reporting a 2020 SSD Dashboard vulnerability, and Claroty researched vulnerabilities affecting legacy WDC cloud-connected products including SanDisk ibi; neither source establishes a procurement relationship.^{5, 6}
• Scale of Dependency: no public evidence identified for dependency on a named Israeli-origin enterprise-software platform. Galil Software’s currently published case study describes a dedicated development site serving SanDisk with more than 20 engineers across software-tools development, validation tools, integration and DevOps, with initial training at SanDisk’s Kfar Saba and Tefen facilities; the page does not provide a clear publication/update date, so the relationship’s exact 2026 status and spend are unconfirmed.⁷
• Procurement & Integrator Relationships: The Galil Software case study is verified evidence of an Israeli software-development/outsourcing relationship connected to the flash-storage business.⁷ no public evidence identified that Galil mandated or deployed a named Israeli-origin cybersecurity, surveillance or analytics product for Sandisk.⁷

Surveillance, Biometrics & Retail Technology

• Facial Recognition & Biometrics: no public evidence identified that current Sandisk uses or supplies Israeli-origin facial-recognition, biometric-identification, gait-analysis or frictionless-retail technology. The current 10-K describes Sandisk as a flash-storage company serving Datacenter, Edge and Consumer markets, and the Israel facilities as Flash R&D sites.¹
• Predictive Analytics & Monitoring: no public evidence identified of Sandisk use or provision of Israeli-origin predictive-policing, sentiment-analysis, social-media-monitoring or workforce-surveillance tools.¹
• Third-Party Deployment: no public evidence identified that such surveillance/biometric tools reach Sandisk through a managed service or bundled enterprise suite. The reviewed third-party security hits concern vulnerability research rather than technology deployment.^{5, 6}

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

• Data Centre Operations in Israel: Sandisk’s 2026 10-K lists three Israeli properties - Kfar Saba (owned, about 204,000 sq ft), Tefen (owned, about 58,000 sq ft) and Omer (leased, about 39,000 sq ft) - and describes all three as Flash R&D; Sandisk’s current office-location page lists the same cities.^{1, 8} no public evidence identified that Sandisk operates, leases or co-locates an Israeli data centre.
• Government Cloud Contracts: no public evidence identified of current Sandisk participation in Project Nimbus or another Israeli government cloud programme. The 2026 10-K says Sandisk sells enterprise SSDs into datacenter, cloud-service-provider and private-cloud markets, but it does not identify Sandisk as a cloud-service operator or Nimbus contractor.¹
• Data Sovereignty & Resilience Services: no public evidence identified of services marketed or contracted by Sandisk to provide Israeli state/military data sovereignty or sovereign-cloud resilience.¹
• Data-Exposure Principle: Current public filings describe Sandisk’s principal offering as flash-storage hardware and related firmware/software, including SSDs and removable/embedded storage.¹ The reviewed sources do not establish that current Sandisk operates an Israel-based service that centrally collects, routes or processes end-user data. A 2022 WDC advisory and Claroty research document cloud connectivity for the legacy SanDisk ibi product, but those records predate the February 2025 separation and therefore are not evidence of a current Sandisk-operated Israeli data pipeline.^{5, 9}

Defence, Intelligence & Security Sector Technology Relationships

• Military & Intelligence Contracts: no public evidence identified of a current Sandisk contract, partnership or service agreement with the Israeli Ministry of Defense, IDF or Israeli intelligence services. The current subsidiary list includes Sandisk Federal, LLC, but the filing supplies no Israeli customer or mission link for that entity.²
• Dual-Use Technology Provision: no public evidence identified that current Sandisk commercial storage products have been specifically documented as deployed for Israeli military, intelligence or law-enforcement surveillance in Israel or occupied territories. General-purpose storage capability is not treated as proof of such deployment.¹
• Offensive Cyber & Weapons Technology: no public evidence identified of Sandisk developing, selling or maintaining offensive-cyber exploits, digital weapons or purpose-built weapons software for Israeli state actors.^{1, 6}
• Constructive-notice dates: Sandisk’s Israeli R&D footprint is documented after 19 July 2024 and after November 2024 through the SpinCo schedule, post-separation subsidiary filings, the 2026 10-K and current office listings.^{1, 2, 3, 4, 8} Those sources characterize the activity as flash-storage R&D; no public evidence identified that the post-date activity included verified technology provision to Israeli military/security bodies or settlements.^{1, 10}

AI, Algorithmic & Autonomous Systems

• AI/ML Provision to State Bodies: Sandisk’s 2026 reporting discusses AI-driven demand for high-performance flash storage and identifies Datacenter/Edge use cases, but it does not establish provision of AI/ML models, computer vision or autonomous decision-support systems to Israeli state, military or security bodies.¹ no public evidence identified of such provision.
• Training Data & Model Development: no public evidence identified that Sandisk trains AI models on Israeli/Palestinian civilian data, intercepted communications or surveillance-derived datasets.¹
• Autonomous Systems & Lethality: no public evidence identified of Sandisk providing autonomous target generation, automated threat detection for weapons use, target tracking or other purpose-built lethal-autonomy systems to Israeli forces.¹

Technology Ecosystem & R&D Footprint

• Israeli R&D Centres: Current Sandisk maintains an Israeli subsidiary, Sandisk Israel Ltd., and three Flash R&D locations at Kfar Saba, Tefen and Omer.^{1, 2, 8} CTech reported on 24 August 2026 that Sandisk’s Israeli development operation employed about 700 people and focused on core flash-memory technologies including chip design, error-correction algorithms and storage systems.¹⁰ Sandisk’s own corporate site continues to list all three Israeli locations.⁸
• Corporate continuity: The November 2024 SpinCo subsidiary schedule included Western Digital Israel Ltd.; post-separation Sandisk subsidiary lists for 2025 and 2026 list Sandisk Israel Ltd.^{2, 3, 4} Historical [pre-2020] SanDisk subsidiary filings separately listed SanDisk Israel (Tefen) Ltd. and SanDisk IL Ltd. (formerly msystems Ltd.), showing a much older Israeli corporate lineage.¹¹
• Acquisitions & Investments: [pre-2020] SanDisk announced its agreement to acquire Israeli flash-storage company msystems on 30 July 2006; the merger completed on 19 November 2006, and SanDisk’s January 2007 results release described the all-stock transaction as worth about $1.5 billion.^{12, 13, 14, 15} This acquisition is historical lineage evidence; no public evidence identified of a new post-separation Sandisk acquisition or strategic investment in an Israeli surveillance, cyber, AI or military-tech company.
• Patent & Intellectual Property: The 2026 10-K reports roughly 8,000 granted patents and about 3,000 pending applications worldwide.¹ no public evidence identified in this audit of a current Sandisk patent-licensing or co-development agreement with Technion, Hebrew University or Weizmann Institute.
• Israeli development outsourcing: Galil Software’s case study describes a dedicated team working on software tools, validation, integration and DevOps for SanDisk, with training at Kfar Saba/Tefen and continuity through the Western Digital acquisition; because the page lacks a clear current-date stamp, continued 2026 operation is unconfirmed.⁷
• Controlling principals: Sandisk’s 2026 proxy lists Vanguard Capital Management (7.6%), BlackRock (6.1%), FMR (5.4%) and Jane Street Group (5.1%) as the disclosed holders above 5%; no disclosed holder reaches 10%.¹⁶ Current corporate biographies identify David Goeckeler as Chair/CEO and list the current executive team and directors.¹⁷ no public evidence identified in the reviewed proxy, biographies and targeted searches of a controlling-principal equity stake or board role in a named Israeli surveillance, cyber, SIGINT, AI or military-tech company.^{16, 17}

Civil Society Scrutiny & Regulatory History

• NGO & Academic Reports: Targeted searches were run against OHCHR settlement material, A/HRC/59/23, Who Profits, AFSC Investigate, Don’t Buy Into Occupation and BDS-related sources. No target-specific positive record was established in the returned material. This is recorded as no public evidence identified, not as proof that Sandisk is absent from every underlying database.

• Boycott & Divestment Campaigns: no public evidence identified of an organised boycott/divestment campaign specifically based on current Sandisk technology provision to Israeli state or settlement actors. Sandisk’s current Israel-localized distributor page establishes ordinary commercial availability in Israel, but not the alleged grounds required for this sub-category.¹⁸

• Regulatory & Legal Actions: Sandisk’s 2026 10-K states that there were no material legal proceedings other than ordinary routine litigation incidental to the company at the filing date.¹ no public evidence identified of an Israel-specific export-control, sanctions, procurement or technology-sales enforcement action against current Sandisk.

• Settlement Nexus: no public evidence identified of a verified Sandisk digital product/service deployment in an Israeli settlement or internationally recognized occupied territory. The current corporate sources establish operations in Kfar Saba, Tefen and Omer and general Israel distribution, but do not establish a settlement deployment.^{1, 8, 18}

• Authoritative clarification on ¹⁸: Independently retrieving the current Israel-localized Sandisk distributor page on 20 October 2026 showed a distributor lookup interface with Region, Country/Area and Brand selectors, but no named Israel distributor/reseller and no populated Israel result record in the retrieved page.¹⁸ Accordingly, the preceding inference that ¹⁸ “establishes ordinary commercial availability in Israel” and the Settlement Nexus reference to “general Israel distribution” are withdrawn as unsupported by this source. The page establishes only that Sandisk publishes an Israel-localized distributor lookup interface. This does not establish absence of distribution in Israel and does not establish any named relationship. Separately verified Israeli R&D operations at Kfar Saba, Tefen and Omer remain supported by the existing sources.^{1, 2, 8, 10}