INDEX / DIRECTORY / SENTINELONE / DIGITAL

SentinelOne DIGITAL

DIGITAL INFRASTRUCTURE AUDIT UPDATED 2026-09-29
Digital Score 0.00 /10 B SentinelOne - BDS-1000 651
Digital 0.00

Evidence-only forensic audit. Scoring happens downstream - see the main dossier for the composite assessment.

Forensic audits like this are reader-funded - no sponsors, no ads. Support OpenIntel →

Request ID: 7333da13-1ff8-480a-81e2-f15e86a17d02 Research date: 29 September 2026

SentinelOne, Inc. is a Delaware corporation and the parent used in its consolidated SEC reporting; its 2026 subsidiary exhibit lists Sentinel Labs Israel Ltd and Prompt Security Ltd as wholly owned Israeli subsidiaries alongside US and other international entities.1, 2 The 2026 Form 10-K describes the Singularity Platform as an AI-powered security platform spanning endpoints, cloud workloads and identities, and says the company’s R&D employees are primarily located in Israel, India, the Czech Republic and remotely.1 These group and product facts define the scope of this digital audit.

Enterprise Technology Stack & Vendor Relationships

SentinelOne’s current subprocessor disclosure identifies Amazon Web Services and Google affiliates for hosting/storage and Microsoft Azure affiliates for LLM hosting, with processing location dependent on customer configuration for the listed cloud services.3 The same disclosure lists Monday.com Ltd, Tel Aviv, for account management with Israel as the processing country, and separately lists Sentinel Labs Israel Ltd as an Israeli SentinelOne affiliate subprocessor.3 SentinelOne’s Data Protection Addendum says SentinelOne may process Customer Data on a customer’s behalf and defines Customer Data to include data ingested from customer endpoints or otherwise provided through the Solutions, while excluding data that remains on customer premises or in a customer-selected third-party environment.4

The disclosures establish named cloud and business-service processors and an Israeli affiliate in the disclosed processing chain, but they do not state that every customer, every product, or every telemetry category is processed in Israel.3, 4 no public evidence identified in the reviewed material of SentinelOne procuring Check Point, Wiz, CyberArk, NICE, Verint, Claroty or another named Israeli-origin security product as a critical internal enterprise dependency. No public evidence identified of a systems integrator mandating or deploying such an Israeli-origin product for SentinelOne.

Surveillance, Biometrics & Retail Technology

SentinelOne’s core public product scope is cybersecurity monitoring, detection, investigation and response across endpoints, identities, cloud workloads and related security data.1 Its 2025 agreement to acquire Prompt Security described controls for enterprise generative-AI use, including visibility into AI-tool use and data sharing, policy enforcement, prompt inspection and prevention of sensitive-data leakage across browsers, desktop applications and APIs.5 This is documented enterprise security monitoring and data-loss prevention; the source does not describe facial recognition, biometric identification, gait analysis, retail loss-prevention cameras or predictive policing.5

No public evidence identified of SentinelOne itself deploying facial recognition, biometric identification, gait analysis, Israeli-origin retail analytics, predictive-policing tools, sentiment analysis, social-media monitoring or workforce-surveillance products. No public evidence identified that those technologies reach SentinelOne indirectly through a managed-security or bundled-platform deployment.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

SentinelOne’s July 2026 DPA states that SentinelOne acts as a processor for Customer Data in SentinelOne-controlled environments and may use listed subprocessors; it excludes data that remains on customer premises or in a customer-selected third-party environment.4 The May 2026 subprocessor list includes Sentinel Labs Israel Ltd as an affiliate subprocessor and Monday.com Ltd in Tel Aviv for account management with Israel as the processing country.3 The list does not disclose which products, customer populations, telemetry fields or volumes are handled by Sentinel Labs Israel Ltd, so the precise data exposure to Israeli jurisdiction for any particular customer remains unresolved.3

A 2026 Google Cloud collaboration announcement says Singularity is available across Google Cloud regions in North America, Frankfurt and Saudi Arabia for customers seeking in-country data residency.6 A 2024 European cloud-security announcement separately identifies a SentinelOne Frankfurt availability zone for European data-residency and GDPR requirements.7 SentinelOne’s US federal page describes AWS GovCloud US as foundational architecture and also advertises on-premises and air-gapped deployments.8 no public evidence identified in the reviewed official material of a SentinelOne-operated customer data-residency region in Israel or SentinelOne participation in Project Nimbus.

Data flow varies by product. Singularity Cloud Data Security states that object-storage and NAS scanning occurs locally and that data does not leave the customer’s cloud account or storage environment for that product.9 By contrast, Binary Vault states that malicious and benign executable samples can be uploaded automatically to secure cloud storage for forensic analysis.10 These product statements do not support a blanket claim that all SentinelOne customer telemetry either remains local or leaves the customer’s environment.9, 10

No public evidence identified of SentinelOne providing a named Israeli-state sovereign-cloud, data-residency or resilience contract.

Defence, Intelligence & Security Sector Technology Relationships

SentinelOne markets a US federal offering for civilian, defense and national-security users and describes AWS GovCloud US, on-premises and air-gapped deployment models.8 In September 2024 it announced FedRAMP High authorization for the Singularity Platform and Singularity Data Lake, and in May 2025 announced FedRAMP High authorization for Purple AI, Cloud Security and Hyperautomation.11, 12 In July 2024 SentinelOne announced a relationship with the US Cybersecurity and Infrastructure Security Agency under the Persistent Access Capability supporting CISA’s Continuous Diagnostics and Mitigation mission.13 In January 2026 it also announced GovRAMP High authorization for US state, local and education-sector use.14 These sources establish US public-sector and defense-market availability; they do not establish an Israeli military or intelligence customer.8, 11, 12, 13, 14

An Israeli Emek Yezreel Academic College tender published as tender 05/25 requests supply, implementation and maintenance of SentinelOne endpoint and server protection.15 That source establishes procurement by an Israeli academic institution, not by the Israeli Ministry of Defense, IDF, intelligence services or police.15

No public evidence identified in the reviewed sources of a direct SentinelOne contract with the Israeli Ministry of Defense, IDF, Mossad, Shin Bet, Israeli police or another Israeli security body. No public evidence identified of a SentinelOne deployment tied to an Israeli settlement or occupied-territory end user. No public evidence identified of SentinelOne developing, selling or maintaining offensive exploit tooling, zero-day weaponization or other digital weapons for Israeli state actors.

SentinelOne’s Israeli R&D, subsidiary and disclosed subprocessing footprint continued after July and November 2024, as confirmed by 2026 filings and current legal disclosures.1, 2, 16, 3 Those facts do not by themselves establish post-2024 technology provision to an Israeli state, military or settlement end user; no such end-user link was verified in this audit.

AI, Algorithmic & Autonomous Systems

SentinelOne’s 2026 Form 10-K describes Singularity as AI-powered, and the company’s 2025 FedRAMP announcement states that Purple AI, Cloud Security and Hyperautomation became available at FedRAMP High for US government use.1, 12 The Prompt Security acquisition announcement describes technology that discovers and governs enterprise AI use, analyzes prompts and data flows, enforces policies and blocks sensitive-data leakage.5 These are general-purpose cybersecurity and AI-security capabilities rather than purpose-built kinetic targeting systems in the cited sources.12, 5

No public evidence identified of SentinelOne providing AI/ML, computer-vision or autonomous decision-support systems to Israeli state, military or security bodies. No public evidence identified that SentinelOne models were trained on civilian population surveillance data, intercepted communications or surveillance-derived datasets from Israel or occupied territory. No public evidence identified of autonomous target generation, fire-control, lethal autonomous tracking or other purpose-built kinetic targeting provision by SentinelOne.

Technology Ecosystem & R&D Footprint

SentinelOne has a documented Israeli engineering and IP footprint. Its 2026 Form 10-K says R&D employees are primarily located in Israel, India, the Czech Republic and remotely.1 The 2026 subsidiary exhibit lists Sentinel Labs Israel Ltd and Prompt Security Ltd as wholly owned Israeli subsidiaries.2 A January 2026 Form 8-K says SentinelOne entered an agreement with the Israeli Tax Authority covering transfer pricing and intercompany transactions with Sentinel Labs Israel Ltd and the valuation and taxation of the intergroup utilization of the Israeli subsidiary’s intellectual property for fiscal years 2021-2025.16 This provides current primary evidence of Israeli subsidiary IP being used within the group.16

[pre-2020] A January 2018 SentinelOne announcement stated that its newly appointed R&D leader would lead R&D operations in Israel and build new product features.17 The current 2026 SEC disclosures supersede reliance on that older source for the continuing existence of Israeli R&D.1, 2

SentinelOne agreed to acquire Prompt Security in August 2025 for generative-AI and agent-security capabilities and completed the transaction in September 2025; the current subsidiary exhibit lists Prompt Security Ltd in Israel.5, 18, 2 Other reviewed acquisitions include Scalyr for cloud-native data analytics and XDR in 2021, Attivo Networks for identity security in 2022, PingSafe for cloud-native application protection in 2024 and Observo AI for telemetry pipelines and AI-SIEM data operations in 2025.19, 20, 21, 22 These acquisition sources establish technology-domain expansion; they do not establish Israeli-state use of the acquired products.19, 20, 21, 22

SentinelOne launched S Ventures in 2022 as a $100 million fund and named Torq and Laminar among portfolio companies.23 Corporate venture investment establishes a direct group-level financial and technology-ecosystem relationship; the cited source does not establish that those portfolio companies are SentinelOne suppliers or that they provide services to Israeli state bodies on SentinelOne’s behalf.23

The 2026 proxy identifies co-founder Tomer Weingarten as President, CEO and Chairman and reports 29.18% total voting power as of 30 April 2026.24 no public evidence identified in this bounded research of a separate personal or family-office investment by Weingarten in an Israeli surveillance, offensive-cyber or military-technology company. No public evidence identified of a SentinelOne patent-licensing or co-development arrangement with Technion, Hebrew University or Weizmann Institute; the separate intergroup use of Sentinel Labs Israel Ltd intellectual property is documented in the January 2026 Form 8-K.16

Civil Society Scrutiny & Regulatory History

The text of UN Special Rapporteur report A/HRC/59/23 dated 2 July 2025 contains no occurrence of SentinelOne or Sentinel One, and the 2025 OHCHR settlement-company database report A/HRC/60/19 likewise contains no occurrence of those names.25, 26 This is limited to those documents and is not evidence of universal absence from civil-society reporting.25, 26

No public evidence identified in the reviewed material of a SentinelOne-specific boycott/divestment campaign concerning Israeli technology provision, or of an Israel-related export-control, sanctions or technology-sales enforcement action against SentinelOne. The January 2026 Israeli Tax Authority agreement concerns transfer pricing, intercompany transactions and Israeli-subsidiary IP taxation; it is not described in the filing as an export-control, sanctions or human-rights action.16

Unresolved limits

The strongest verified Israel-related digital findings are the current Israeli R&D presence, wholly owned Israeli subsidiaries, intergroup use of Israeli-subsidiary IP, an Israeli affiliate subprocessor, Israel-based account-management processing through Monday.com, an Israeli academic tender, and corporate venture activity in cybersecurity startups.1, 2, 16, 3, 15, 23 The public documents reviewed do not disclose the categories or volumes of Customer Data processed by Sentinel Labs Israel Ltd, so a customer-specific Israeli-jurisdiction data path cannot be established from the available disclosures.3, 4 No direct Israeli military/intelligence customer, settlement deployment, Project Nimbus role, facial-recognition/biometric deployment, offensive-cyber sale, or autonomous-targeting provision was verified in this research.

Footnotes

  1. SentinelOne, Inc., Form 10-K for fiscal year ended 31 January 2026, filed 2026. https://www.sec.gov/Archives/edgar/data/1583708/000158370826000020/s-20260131.htm ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8

  2. SentinelOne, Inc., Exhibit 21.1, Subsidiaries of the Registrant, 2026. https://www.sec.gov/Archives/edgar/data/1583708/000158370826000020/exhibit211_fy2026.htm ↩ ↩2 ↩3 ↩4 ↩5 ↩6

  3. SentinelOne, Subprocessors, current page updated 20 May 2026. https://www.sentinelone.com/legal/sentinelone-sub-processors/ ↩ ↩2 ↩3 ↩4 ↩5 ↩6 ↩7 ↩8

  4. SentinelOne, Data Protection Addendum, current page updated 20 July 2026. https://www.sentinelone.com/legal/data-protection-addendum/ ↩ ↩2 ↩3 ↩4

  5. SentinelOne, “SentinelOne to Acquire Prompt Security to Advance GenAI Security and Agent Security Strategy,” 5 August 2025. https://investors.sentinelone.com/press-releases/news-details/2025/SentinelOne-to-Acquire-Prompt-Security-to-Advance-GenAI-Security-and-Agent-Security-Strategy/default.aspx ↩ ↩2 ↩3 ↩4 ↩5

  6. SentinelOne, “Expands Strategic Collaboration with Google Cloud to Deliver Autonomous AI-Powered Security at Global Scale,” 2026. https://investors.sentinelone.com/press-releases/news-details/2026/SentinelOne-Expands-Strategic-Collaboration-with-Google-Cloud-to-Deliver-Autonomous-AI-Powered-Security-at-Global-Scale/default.aspx ↩

  7. SentinelOne, “Transforms Cloud Security in Europe with Singularity Cloud Native Security,” 16 July 2024. https://www.sentinelone.com/press/sentinelone-transforms-cloud-security-in-europe-with-singularity-cloud-native-security/ ↩

  8. SentinelOne, Federal Government security platform page. https://www.sentinelone.com/platform/federal-government/ ↩ ↩2 ↩3

  9. SentinelOne, Singularity Cloud Data Security product page. https://www.sentinelone.com/platform/singularity-cloud-data-security/ ↩ ↩2

  10. SentinelOne, Singularity Binary Vault product page. https://www.sentinelone.com/platform/singularity-binary-vault/ ↩ ↩2

  11. SentinelOne, “Achieves FedRAMP High Authorization for Singularity Platform and Singularity Data Lake,” 12 September 2024. https://www.sentinelone.com/press/sentinelone-achieves-fedramp-high-authorization-for-singularity-platform-and-singularity-data-lake/ ↩ ↩2

  12. SentinelOne, “Achieves FedRAMP High Authorization for Purple AI, CNAPP, and Hyperautomation Solutions,” 15 May 2025. https://www.sentinelone.com/press/sentinelone-achieves-fedramp-high-authorization-for-purple-ai-cnapp-and-hyperautomation-solutions/ ↩ ↩2 ↩3 ↩4

  13. SentinelOne, “Partners with CISA to Enable Government-Wide Cyber Defense,” 16 July 2024. https://www.sentinelone.com/press/sentinelone-partners-with-cisa-to-enable-government-wide-cyber-defense/ ↩ ↩2

  14. SentinelOne, “Achieves GovRAMP Authorization at the High Impact Level,” 8 January 2026. https://www.sentinelone.com/press/sentinelone-achieves-govramp-authorization-at-the-high-impact-level/ ↩ ↩2

  15. Emek Yezreel Academic College, Tender 05/25, supply, implementation and maintenance of SentinelOne endpoint/server protection, 2025. https://www.yvc.ac.il/tender/sentinelone-%D7%90%D7%A1%D7%A4%D7%A7%D7%94-%D7%94%D7%98%D7%9E%D7%A2%D7%94-%D7%95%D7%AA%D7%97%D7%96%D7%95%D7%A7%D7%94-%D7%A9%D7%9C-%D7%A4%D7%AA%D7%A8%D7%95%D7%A0%D7%95%D7%AA-%D7%94%D7%92%D7%A0%D7%AA/ ↩ ↩2 ↩3

  16. SentinelOne, Inc., Form 8-K, 8 January 2026, Israeli Tax Authority agreement and Prompt Security matters. https://www.sec.gov/Archives/edgar/data/1583708/000158370826000003/s-20260108.htm ↩ ↩2 ↩3 ↩4 ↩5 ↩6

  17. SentinelOne, “SentinelOne Appoints David Ginat as New R&D Leader,” 10 January 2018. https://www.sentinelone.com/press/sentinelone-david-ginat-new-r-d-leader/ ↩

  18. SentinelOne, Inc., Form 8-K reporting completion of Prompt Security acquisition, September 2025. https://www.sec.gov/Archives/edgar/data/1583708/000110465925088079/tm2525181d1_8k.htm ↩

  19. SentinelOne, “Acquires Scalyr to Revolutionize XDR and Security Analytics,” 9 February 2021. https://www.sentinelone.com/press/sentinelone-acquires-scalyr-to-revolutionize-xdr-and-security-analytics/ ↩ ↩2

  20. SentinelOne, “Completes Acquisition of Attivo Networks,” 4 May 2022. https://www.sentinelone.com/press/sentinelone-completes-acquisition-of-attivo-networks/ ↩ ↩2

  21. SentinelOne, “Completes Acquisition of PingSafe,” 5 February 2024. https://www.sentinelone.com/press/sentinelone-completes-acquisition-of-pingsafe/ ↩ ↩2

  22. SentinelOne, “SentinelOne to Acquire Observo AI to Revolutionize SIEM and Security Operations,” 8 September 2025. https://www.sentinelone.com/press/sentinelone-to-acquire-observo-ai-to-revolutionize-siem-and-security-operations/ ↩ ↩2

  23. SentinelOne, “Launches S Ventures Fund,” 21 September 2022. https://www.sentinelone.com/press/sentinelone-launches-s-ventures-fund/ ↩ ↩2 ↩3

  24. SentinelOne, Inc., 2026 Proxy Statement, beneficial ownership and management. https://www.sec.gov/Archives/edgar/data/1583708/000158370826000031/s-20260513.htm ↩

  25. United Nations Human Rights Council, A/HRC/59/23, “From economy of occupation to economy of genocide,” 2 July 2025. https://documents.un.org/api/symbol/access?l=en&s=A%2FHRC%2F59%2F23&t=pdf ↩ ↩2

  26. United Nations Human Rights Council/OHCHR, A/HRC/60/19, database of business enterprises involved in listed settlement activities, 26 September 2025. https://documents.un.org/api/symbol/access?l=en&s=A%2FHRC%2F60%2F19&t=pdf ↩ ↩2