Shein DIGITAL

Domain: Digital - Digital / Technology Entity scope: SHEIN - the fast-fashion e-commerce platform (operating entity Roadget Business Pte Ltd, Singapore; founder Chris Xu / Xu Yangtian; China-rooted supply chain). SHEIN-corporate’s OWN technology is in scope (standalone group, no parent). Vendor-domicile rule applies: Riskified (Tel Aviv) = Israeli-domiciled = in scope; Israeli-founded-but-foreign-domiciled vendors (Forter NY, Yotpo NY, Nuvei Canada) flagged carefully. Compiled: 2026-06-24 Method: Live web search only

Enterprise Technology Stack & Vendor Relationships

Riskified (Israeli-domiciled - confirmed SHEIN vendor). Riskified Ltd. is incorporated in Israel and headquartered at 30 Kalischer Street, Tel Aviv (NYSE: RSKD, listed July 2021 as a foreign private issuer under Israeli Companies Law).^{1, 2} SHEIN is a confirmed Riskified customer: Riskified’s own press and investor-relations materials identify “Wayfair, Booking.com and Shein” as merchants on its fraud-prevention platform, and a Riskified International Fraud Awareness Week 2024 campaign named SHEIN among “Safest Brands in Ecommerce.”^{3, 4} This is a direct procurement relationship between SHEIN and an Israeli-domiciled technology vendor providing AI-based fraud-prevention/chargeback-guarantee services at the payment layer.

Payment processing (non-Israeli-domiciled). SHEIN uses Checkout.com (London, UK), Adyen (Amsterdam, Netherlands), and Nuvei (Montreal, Canada) for payments.^{5, 6, 7} Nuvei has substantial Israeli operations following its 2019 SafeCharge acquisition, but Nuvei itself is Canadian-domiciled - flagged, outside strict Israeli-domicile scope. No public evidence identified of an Israeli-domiciled payment processor (other than Riskified for fraud) engaged for core transaction processing.

Personalization / reviews / logistics - no confirmed Israeli vendor. No public evidence identified that SHEIN uses Dynamic Yield (US, Mastercard-owned), Yotpo (NY-HQ, Israeli-founded/Tel Aviv R&D - flagged, not confirmed for SHEIN), Nosto, or Bringg (Israeli logistics orchestration - not confirmed for SHEIN); SHEIN’s recommendation engine is attributed to proprietary in-house AI/ML, and its known logistics partners (iMile, Anjun) are non-Israeli.^{8, 9}

Riskified, vendor-stated merchant relationship (17 July 2024): Riskified’s own press release on its CNBC fintech-list placement says its risk intelligence platform provides real-time decisions that help merchants such as “Wayfair, Booking.com and Shein to win more customers.” The statement comes from the vendor, not from Shein or the press. It is a marketing mention in a vendor press release. No contract, order form, or Shein-side confirmation was located. The release was read through a republished copy on a financial-news aggregator, because Riskified’s own pages returned HTTP 403 and web.archive.org could not be fetched in this session.¹⁰

Riskified, campaign list (18 November 2024): the Riskified release on International Fraud Awareness Week says its Times Square billboard and webpage feature the “Safest Brands in Ecommerce.” The brand list reads “Macy’s, Allbirds, Prada, AirEuropa, BJ’s Wholesale Club, TickPick, Shein, Hotelogical,” followed by further names. The page does not say whether each listed brand is a Riskified client, so on its own wording this is a campaign or marketing listing and not documentary proof of a contract. The July 2024 sentence above is the clearer vendor-side statement.¹¹

Riskified, third-party listing (undated): a financial-data aggregator profile of Riskified states, “Its merchants include some of the ecommerce brands including Wayfair, Lastminute.com, SHEIN, and Macy’s.” This is a secondary listing with no date or sourcing. It most likely repeats Riskified’s marketing and is not independent corroboration.¹²

Forter, a second Israel-linked fraud-prevention vendor (press statements, May and September 2021): three press reports name Shein as a Forter client. NoCamels, republished by KrASIA on 26 May 2021, states: “The company works with clients such as Farfetch, ASOS, Shein, and Prime Trust.”¹³ Walla (Israel, finance section, last updated 25 May 2021) lists “PrimeTrust, ASOS, Farfetch ו-Shein” among Forter’s leading global clients.¹⁴ CTech (Calcalist), by Sophie Shulman on 28 September 2021, states that “anyone who buys on Asos or Shein, the most popular sites in Israel, goes through the Forter screening process.”¹⁵ These are press descriptions of a customer relationship. Neither Forter nor Shein is quoted confirming it, no contract was found, and nothing retrievable shows whether the relationship continues after 2021. A separate CTech article of 25 May 2021 on the same funding round lists Farfetch, Sephora, Nordstrom, Instacart, Adobe and Priceline as clients and does not name Shein, so the three reports are not uniform.¹⁶ On domicile, the Wikipedia infobox for Forter lists both “Tel Aviv, Israel” and “New York City, United States” as headquarters. The Walla article places Forter’s development center in Tel Aviv. The Forter domicile flag in the existing audit therefore rests on a dual-headquarters description.^{17, 14}

Surveillance, Biometrics & Retail Technology

SHEIN’s data-collection practices have drawn significant scrutiny - principally concerning transfers of personal data to China, not any Israeli surveillance nexus. The US House Energy & Commerce Committee (Dec 2023) and the House Select Committee on the CCP (May 2023) wrote to SHEIN over data privacy and PRC-government access, and the US-China Economic and Security Review Commission published an April 2023 issue brief on SHEIN/Temu data practices.^{18, 19, 20} no public evidence identified of SHEIN deploying Israeli-origin biometric, facial-recognition, or retail-surveillance technology; the documented surveillance risk relates to China data transfers, not Israeli vendors.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

SHEIN disclosed (in response to US national-security scrutiny) that it stores US customer data on Microsoft Azure and AWS (both US) and EU customer data in Frankfurt, Germany; neither hyperscaler is Israeli-domiciled.²¹ China’s Cyberspace Administration opened a security review of SHEIN (January 2024) ahead of its IPO, and Ireland’s Data Protection Commission opened a GDPR investigation (April 2026) into SHEIN Ireland’s transfers of EU/EEA data to China.^{22, 23} no public evidence identified of SHEIN using Israeli cloud infrastructure, Israeli sovereign-cloud regions, or Israeli data-centre operators.

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of any SHEIN contract, procurement relationship, or commercial tie with Israeli defence, intelligence, or security-sector technology vendors or Israeli government entities. SHEIN’s documented security posture is consumer fraud prevention (Riskified, above) and internal cybersecurity; no Israeli cyber-intelligence, border-security, or surveillance-state vendor relationship was identified.

AI, Algorithmic & Autonomous Systems

SHEIN’s AI is documented as proprietary/in-house - ML for real-time demand forecasting, trend detection, and recommendation, with a small-batch test-and-reorder model and up to ~10,000 new items daily attributed to internal systems rather than third-party AI platforms.^{24, 25} The European Commission’s February 2026 Digital Services Act proceedings targeted SHEIN’s recommender-system transparency and the absence of a non-profiling option.²⁶ no public evidence identified that SHEIN uses Israeli-developed AI/autonomous-systems vendors; Riskified (Israeli-domiciled, confirmed customer) operates an AI fraud-decision engine - the sole identified AI relationship with an Israeli-domiciled entity.

Technology Ecosystem & R&D Footprint

SHEIN Technology LLC (Los Angeles) is its US technology subsidiary; its main engineering/supply-chain technology operations remain in Guangzhou, China, with corporate HQ in Singapore and offices in Mexico City, Istanbul, and Dubai.^{27, 28} No R&D facility, engineering lab, or joint venture in Israel was identified. Cybersecurity experts cited by CNBC (July 2024) flagged that SHEIN’s planned supply-chain-software licensing could expose third-party manufacturers’ trade data under PRC law - a China-espionage risk framing, with no Israeli-technology dimension.²⁹

Other Israel-linked digital relationships, researched absence: no public evidence identified of any further Shein relationship with an Israel-linked vendor, partner or data flow beyond the fraud-prevention listings above. Searches covered Shein with Israeli ad-tech and marketing vendors (AppsFlyer, Taboola, Outbrain, Similarweb, Wix), Shein with Israeli logistics or local-delivery partners, Hebrew-language queries on Shein and Israeli technology partnerships, and Riskified’s annual reports for named customers. The 20-F results identify customers only as anonymous “Customer A/B/C”, though the full filings were not opened. No source named Shein with any of these vendors. The only Israel-related items about Shein are consumer-traffic reporting that uses Similarweb data, which does not make Similarweb a Shein vendor, and Israeli shipping-forwarder pages, which do not show a Shein partnership. The CTech article of 25 May 2021 checked for the Forter customer list did not name Shein.¹⁶

Civil Society Scrutiny & Regulatory History

SHEIN’s regulatory history is data/labour-focused: a 2022 New York Attorney General $1.9m penalty against then-parent Zoetop over a 2018 breach (39m SHEIN + 7m Romwe accounts) and inadequate notification; 2023 US congressional scrutiny; the USCC 2023 brief; EU DSA formal proceedings (Feb 2026, including recommender opacity and illegal-product concerns) after VLOP designation (April 2024); the Ireland DPC GDPR investigation (2026); and China’s CAC security review (2024).^{30, 18, 19, 20, 26, 23, 22} no public evidence identified of civil-society or regulatory action specifically targeting SHEIN’s relationships with Israeli technology vendors.