INDEX / DIRECTORY / SHEIN / DIGITAL

Shein DIGITAL

DIGITAL INFRASTRUCTURE AUDIT UPDATED 2026-07-04
Digital Score 0.12 /10 E Shein - BDS-1000 46
Digital 0.12

Evidence-only forensic audit. Scoring happens downstream - see the main dossier for the composite assessment.

Forensic audits like this are reader-funded - no sponsors, no ads. Support OpenIntel →

Digital Audit - SHEIN

Domain: Digital - Digital / Technology Entity scope: SHEIN - the fast-fashion e-commerce platform (operating entity Roadget Business Pte Ltd, Singapore; founder Chris Xu / Xu Yangtian; China-rooted supply chain). SHEIN-corporate’s OWN technology is in scope (standalone group, no parent). Vendor-domicile rule applies: Riskified (Tel Aviv) = Israeli-domiciled = in scope; Israeli-founded-but-foreign-domiciled vendors (Forter NY, Yotpo NY, Nuvei Canada) flagged carefully. Compiled: 2026-06-24 Method: Live web search only

Enterprise Technology Stack & Vendor Relationships

Riskified (Israeli-domiciled - confirmed SHEIN vendor). Riskified Ltd. is incorporated in Israel and headquartered at 30 Kalischer Street, Tel Aviv (NYSE: RSKD, listed July 2021 as a foreign private issuer under Israeli Companies Law).12 SHEIN is a confirmed Riskified customer: Riskified’s own press and investor-relations materials identify “Wayfair, Booking.com and Shein” as merchants on its fraud-prevention platform, and a Riskified International Fraud Awareness Week 2024 campaign named SHEIN among “Safest Brands in Ecommerce.”34 This is a direct procurement relationship between SHEIN and an Israeli-domiciled technology vendor providing AI-based fraud-prevention/chargeback-guarantee services at the payment layer.

Payment processing (non-Israeli-domiciled). SHEIN uses Checkout.com (London, UK), Adyen (Amsterdam, Netherlands), and Nuvei (Montreal, Canada) for payments.567 Nuvei has substantial Israeli operations following its 2019 SafeCharge acquisition, but Nuvei itself is Canadian-domiciled - flagged, outside strict Israeli-domicile scope. No public evidence identified of an Israeli-domiciled payment processor (other than Riskified for fraud) engaged for core transaction processing.

Personalization / reviews / logistics - no confirmed Israeli vendor. No public evidence identified that SHEIN uses Dynamic Yield (US, Mastercard-owned), Yotpo (NY-HQ, Israeli-founded/Tel Aviv R&D - flagged, not confirmed for SHEIN), Nosto, or Bringg (Israeli logistics orchestration - not confirmed for SHEIN); SHEIN’s recommendation engine is attributed to proprietary in-house AI/ML, and its known logistics partners (iMile, Anjun) are non-Israeli.8910

Surveillance, Biometrics & Retail Technology

SHEIN’s data-collection practices have drawn significant scrutiny - principally concerning transfers of personal data to China, not any Israeli surveillance nexus. The US House Energy & Commerce Committee (Dec 2023) and the House Select Committee on the CCP (May 2023) wrote to SHEIN over data privacy and PRC-government access, and the US-China Economic and Security Review Commission published an April 2023 issue brief on SHEIN/Temu data practices.111213 No public evidence identified of SHEIN deploying Israeli-origin biometric, facial-recognition, or retail-surveillance technology; the documented surveillance risk relates to China data transfers, not Israeli vendors.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

SHEIN disclosed (in response to US national-security scrutiny) that it stores US customer data on Microsoft Azure and AWS (both US) and EU customer data in Frankfurt, Germany; neither hyperscaler is Israeli-domiciled.14 China’s Cyberspace Administration opened a security review of SHEIN (January 2024) ahead of its IPO, and Ireland’s Data Protection Commission opened a GDPR investigation (April 2026) into SHEIN Ireland’s transfers of EU/EEA data to China.1516 No public evidence identified of SHEIN using Israeli cloud infrastructure, Israeli sovereign-cloud regions, or Israeli data-centre operators.

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of any SHEIN contract, procurement relationship, or commercial tie with Israeli defence, intelligence, or security-sector technology vendors or Israeli government entities. SHEIN’s documented security posture is consumer fraud prevention (Riskified, above) and internal cybersecurity; no Israeli cyber-intelligence, border-security, or surveillance-state vendor relationship was identified.

AI, Algorithmic & Autonomous Systems

SHEIN’s AI is documented as proprietary/in-house - ML for real-time demand forecasting, trend detection, and recommendation, with a small-batch test-and-reorder model and up to ~10,000 new items daily attributed to internal systems rather than third-party AI platforms.1718 The European Commission’s February 2026 Digital Services Act proceedings targeted SHEIN’s recommender-system transparency and the absence of a non-profiling option.19 No public evidence identified that SHEIN uses Israeli-developed AI/autonomous-systems vendors; Riskified (Israeli-domiciled, confirmed customer) operates an AI fraud-decision engine - the sole identified AI relationship with an Israeli-domiciled entity.

Technology Ecosystem & R&D Footprint

SHEIN Technology LLC (Los Angeles) is its US technology subsidiary; its main engineering/supply-chain technology operations remain in Guangzhou, China, with corporate HQ in Singapore and offices in Mexico City, Istanbul, and Dubai.2021 No R&D facility, engineering lab, or joint venture in Israel was identified. Cybersecurity experts cited by CNBC (July 2024) flagged that SHEIN’s planned supply-chain-software licensing could expose third-party manufacturers’ trade data under PRC law - a China-espionage risk framing, with no Israeli-technology dimension.22

Civil Society Scrutiny & Regulatory History

SHEIN’s regulatory history is data/labour-focused: a 2022 New York Attorney General $1.9m penalty against then-parent Zoetop over a 2018 breach (39m SHEIN + 7m Romwe accounts) and inadequate notification; 2023 US congressional scrutiny; the USCC 2023 brief; EU DSA formal proceedings (Feb 2026, including recommender opacity and illegal-product concerns) after VLOP designation (April 2024); the Ireland DPC GDPR investigation (2026); and China’s CAC security review (2024).23111213191615 No public evidence identified of civil-society or regulatory action specifically targeting SHEIN’s relationships with Israeli technology vendors.

End Notes

Footnotes

  1. https://www.dnb.com/business-directory/company-profiles.riskified_ltd.7b0833cff0373d3c4e6f035bc40aac68.html ↩

  2. https://www.sec.gov/Archives/edgar/data/1851112/000162828021013981/riskifiedf-1a1.htm ↩

  3. https://www.riskified.com/press/riskified-takes-a-stand-against-fraud-as-a-leading-supporter-of-international-fraud-awareness-week-2024/ ↩

  4. https://ir.riskified.com/news-releases/news-release-details/riskified-takes-stand-against-fraud-leading-supporter ↩

  5. https://www.checkout.com/case-studies/local-payments-expertise-power-shein-s-global-expansion ↩

  6. https://www.adyen.com/knowledge-hub/shein-four-payments-strategies-for-global-expansion ↩

  7. https://www.nuvei.com/posts/nuvei-partners-with-global-e-retailer-shein-as-payment-provider ↩

  8. https://agentiveaiq.com/blog/how-shein-uses-ai-to-dominate-e-commerce-and-how-you-can-too ↩

  9. https://www.dynamicyield.com/clients/ ↩

  10. https://chinesellers.substack.com/p/sheins-logistics-partners ↩

  11. https://www.cnbc.com/2023/12/20/shein-grilled-on-china-relationship-data-privacy-ahead-of-ipo.html ↩ ↩2

  12. https://chinaselectcommittee.house.gov/sites/evo-subsites/selectcommitteeontheccp.house.gov/files/evo-media-document/05.02.2023-letter-to-shein-china-select.pdf ↩ ↩2

  13. https://www.uscc.gov/sites/default/files/2023-04/Issue_Brief-Shein_Temu_and_Chinese_E-Commerce.pdf ↩ ↩2

  14. https://www.supplychainbrain.com/articles/40004-cybersecurity-experts-fear-risks-from-sheins-supply-chain-technology ↩

  15. https://www.cnbc.com/2024/01/17/china-launches-security-review-of-shein-ahead-of-ipo.html ↩ ↩2

  16. https://www.retail-insight-network.com/news/ireland-dpc-investigates-shein/ ↩ ↩2

  17. https://monetate.com/resource/5-ways-shein-ecommerce-is-leading-the-evolution-of-fast-fashion/ ↩

  18. https://agentiveaiq.com/blog/how-shein-uses-ai-to-dominate-e-commerce-and-how-you-can-too ↩

  19. https://ec.europa.eu/commission/presscorner/detail/en/ip_26_420 ↩ ↩2

  20. https://plannet.com/shein/ ↩

  21. https://www.clay.com/dossier/shein-headquarters-office-locations ↩

  22. https://www.cnbc.com/2024/07/08/shein-to-build-supply-chain-giant-fear-china-cyber-spy.html ↩

  23. https://ag.ny.gov/press-release/2022/attorney-general-james-secures-19-million-e-commerce-shein-and-romwe-owner-zoetop ↩