Shopify - Digital Audit

Enterprise Technology Stack & Vendor Relationships

Shopify’s core cloud infrastructure runs on Google Cloud Platform, with Shopify Engineering describing Google Cloud as “the foundation for our entire platform” following a migration that began in 2016 and continues under current filings ¹². No public evidence identified of Shopify holding direct licensing or subscription relationships with major Israeli enterprise-security vendors such as Check Point, Wiz, SentinelOne, CyberArk, Nice, Verint, Claroty, or Palo Alto Networks for internal enterprise security infrastructure, based on review of vendor case studies, trade press, SEC filings, and the Shopify Engineering blog ¹².

Two Israeli-founded fraud-prevention vendors maintain active, merchant-facing integrations with Shopify. Riskified, founded in Tel Aviv in 2013 by Eido Gal and Assaf Feldman and listed on the NYSE (RSKD) on 29 July 2021, has been a Shopify partner since 2012 and expanded its integration through the Shopify Plus Certified App Program on 9 June 2021, providing real-time fraud-risk decisioning and chargeback-guarantee services within merchant checkout flows ³⁴⁵⁶. Forter, founded in Tel Aviv in 2013 by Michael Reitblat, Liron Damri and Alon Shemesh - all previously colleagues at Fraud Sciences, an Israeli online-fraud-prevention startup acquired by PayPal in 2008 - joined the Shopify Plus Certified App Program on 4 October 2023, providing identity and fraud decisioning using device fingerprinting, geolocation, and behavioral pattern analysis; company materials describe its detection approach as enhanced by Israeli military intelligence background, and its Tel Aviv headquarters hosts core R&D and product strategy ⁷⁸⁹. Both integrations are merchant-opt-in App Store/Certified-Partner products rather than mandated core Shopify infrastructure, and both remain active as of the most recent public listings with no evidence of discontinuation ³⁷.

Shopify’s cross-border commerce infrastructure depends on Global-e Online, an Israeli-founded company established in May 2013 by Amir Schlachet, Shahar Tamari and Nir Debbi ¹⁰¹¹. Shopify took a pre-IPO equity stake of $193 million (7.75 million shares) on 7 May 2021, plus warrants for an additional 11.85 million shares, making Global-e the exclusive Merchant-of-Record provider for Shopify’s cross-border and international commerce services, including currency conversion, customs/duties handling, and local payment processing ¹². On 14 May 2025, Shopify and Global-e signed a renewed three-year strategic partnership under which Global-e remains the exclusive Merchant-of-Record provider for “Shopify Managed Markets” (1P) while retaining “preferred partner” status and enhanced commercial terms even where additional providers are permitted for third-party merchants ¹³¹⁴. Global-e’s CEO, Amir Schlachet, served 11 years in Israeli military technology units, including as commander of the “Talpiot” elite technological military-academy program at the rank of Major, prior to co-founding Global-e ¹⁰¹¹.

Shopify also holds a marketing/loyalty data integration with Yotpo, a Tel Aviv-founded (2011) e-commerce marketing company. Shopify made a $30 million strategic investment in Yotpo on 9 September 2021 alongside a multi-year platform partnership ^15161718. Yotpo is described in trade coverage as “built first and foremost for Shopify,” with deep native integrations for customer review, loyalty, and SMS/email marketing data across tens of thousands of Shopify merchants ¹⁹. No public evidence identified of a named systems integrator or IT outsourcing partner engaged by Shopify that has mandated or deployed Israeli-origin cybersecurity technology as part of a Shopify enterprise technology programme.

Surveillance, Biometrics & Retail Technology

No public evidence identified of Shopify using or deploying facial recognition, biometric identification, or gait-analysis technology of Israeli origin - including from vendors such as Trigo, BriefCam, AnyVision/Oosto, or Trax - for loss prevention or store analytics. Shopify’s own biometric-adjacent features (Face ID/fingerprint authentication for the Shopify mobile admin app and age-verification document-matching) function as authentication mechanisms rather than surveillance or identification products, and no Israeli-vendor attribution was found for them. No public evidence identified of a commercial relationship between Shopify and Trax Retail, an Israeli-founded computer-vision shelf-monitoring company, following review of Trax press releases and trade press. No public evidence identified of Shopify use of Israeli-origin predictive-policing, sentiment-analysis, social-media-monitoring, or workforce-surveillance tools.

Israeli-origin behavioral-analytics and fraud-decisioning technology does reach Shopify merchants indirectly, however, through the Riskified and Forter App Store integrations described above, which analyze device fingerprints, geolocation data, and behavioral transaction patterns as part of fraud-scoring workflows applied to merchant checkout traffic ³⁷.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

No public evidence identified that Shopify operates, leases, or co-locates data-center infrastructure within Israel. Shopify’s primary data-center and control-room operations are described as based in Ottawa, Canada, with global reach delivered via Google Cloud and Fastly CDN infrastructure ¹². No public evidence identified of Shopify participation in Project Nimbus or any comparable Israeli government or state-backed cloud programme, based on review of Project Nimbus public documentation, trade press, and the Shopify Engineering blog. No public evidence identified of Shopify providing data-sovereignty, residency, or infrastructure-resilience services explicitly marketed or contracted to Israeli state institutions or military bodies.

Shopify’s principal cloud vendor, Google Cloud, operates a public-availability Israel region (me-west1, Tel Aviv) that opened in 2023; this region is separate from, and not officially linked in public sourcing to, Google’s Project Nimbus contract ²⁰. No public evidence identified that Shopify workloads are routed through this specific region.

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of any contract, partnership, or service agreement between Shopify and the Israeli Ministry of Defence, the IDF, or Israeli intelligence/security bodies, based on review of Israeli MOD procurement records and press pages, Israeli defense trade press, and general news search. No public evidence identified of Shopify’s commercially available technology being reported, confirmed, or documented as deployed for military, intelligence, or law-enforcement surveillance applications within Israel or the occupied Palestinian territories. No public evidence identified of Shopify developing, selling, licensing, or maintaining offensive cyber capabilities, zero-day tools, or digital-weapons systems, or of such tools being deployed by Israeli state actors.

The closest proximate relationships to the defence/intelligence sector run through Shopify’s fraud-prevention app partners: Forter’s founding team previously worked at Fraud Sciences prior to its 2008 acquisition by PayPal, and coverage describes Forter’s fraud-detection approach as informed by IDF intelligence-unit experience, though the specific IDF unit is not named in available sourcing ⁸⁹.

AI, Algorithmic & Autonomous Systems

No public evidence identified of Shopify providing AI/ML, computer-vision, or autonomous decision-support systems to Israeli state, military, or security bodies. No public evidence identified that Shopify’s AI products (such as Shopify Magic/Sidekick) have been trained on or given access to civilian population data, intercepted communications, or surveillance-derived datasets originating from Israel or the occupied Palestinian territories. No public evidence identified of Shopify providing autonomous target-generation, automated threat-detection, or autonomous tracking systems to Israeli military or security forces.

Shopify’s acquired visual-search AI, originally developed by Donde Search (see Technology Ecosystem & R&D Footprint), is a consumer fashion product-image-matching tool for retailers with no reported military or targeting application; it is treated as general-purpose commerce technology rather than a defence-relevant AI system ²¹²²²³.

Technology Ecosystem & R&D Footprint

Shopify acquired Israeli retail-tech company Donde Search in October 2021, reported at a value of approximately $50.7 million, and subsequently established a Shopify Israel R&D & Innovation Center; job postings show ongoing technical roles - Full Stack Engineers, Data Engineers - based in Kfar Saba and Tel Aviv-Yafo, Israel, with no evidence of subsequent closure ²¹²²²³. Donde Search’s visual-search/AI product was used by fashion retailers to match product images across catalogs ²¹. Donde’s founder and CEO, Liat Zakay, previously served as a software engineer and R&D team manager in the Israeli intelligence unit known as 8200 before founding Donde, and two other co-founders are also reported to have Israeli military-intelligence technical backgrounds ²¹²³.

Shopify’s two verified strategic investments in Israeli companies are Yotpo - a $30 million strategic investment in September 2021 with an accompanying multi-year platform partnership ^15161718 - and Global-e Online, a $193 million pre-IPO equity stake taken in May 2021 that grew to a reported ~12% ownership stake, underpinning a renewed exclusive commercial partnership running through at least 2028 under the three-year term signed 14 May 2025 ¹²¹³¹⁴. Shopify’s board includes Jeremy Levine of Bessemer Venture Partners, a firm whose regional practice describes more than 50 Israeli portfolio companies including cybersecurity firms ²⁴²⁵²⁶. No public evidence identified of a formal patent-sharing, licensing, or co-development arrangement between Shopify and Technion, Hebrew University, or the Weizmann Institute.

Civil Society Scrutiny & Regulatory History

No public evidence identified of Shopify, its subsidiaries, or named controlling principals appearing in the OHCHR settlement-business database maintained under Human Rights Council resolutions 31/36, 53/25, and its most recent update (A/HRC/60/19), or in Special Rapporteur Francesca Albanese’s A/HRC/59/23 report (“From economy of occupation to economy of genocide”) ²⁷²⁸. No public evidence identified of a Shopify entry in the Who Profits company database or the AFSC Investigate fund-search tool as of this research session ²⁹³⁰.

Shopify has been the subject of boycott and divestment activity grounded primarily in executive speech rather than documented technology provision. In March 2025, Dubai-based media outlet Smashi (owned by Augustus Media) launched a boycott campaign against Shopify targeting president Harley Finkelstein over an 18 March 2025 social-media post endorsing criticism of a news article’s use of Hamas casualty figures, urging its roughly 28 million followers and Shopify’s approximately 25,000 Middle East merchants to switch to one of six named competing platforms ³¹. The American Jewish Congress publicly condemned the campaign as antisemitic ³². Separately, the BDS-affiliated “Boycat” consumer app, in partnership with the BDS Movement, has publicly called on users to “cut ties” with Shopify, characterizing it as funding “apartheid,” though the specific evidentiary basis for Shopify’s inclusion was not fully accessible in this research session ³³³⁴. Counter-evidence exists: at least one BDS-tracking resource, masjidalaqsa.com, explicitly lists Shopify as “Boycott Safe,” stating it found “no verified evidence of any ties to Israel” ³⁵. A merchant-authored blog post from Taita Leila Ltd alleges Shopify automatically waived subscription fees for Israel-based merchants without public announcement; this claim could not be independently confirmed via direct page retrieval and should be treated as unverified ³⁶.

Shopify president Harley Finkelstein made repeated public statements in support of Israel following 7 October 2023, including an initial statement on 8 October 2023 citing Holocaust-survivor grandparents and condemning Hamas’s actions as “horrific and barbaric” ³⁷, and further remarks in July 2024 describing Jewish pride in the aftermath of October 7 ³⁸. No public evidence identified of comparable Shopify executive statements regarding Ukraine, Syria, or other named conflict zones for direct comparison.

A “We Stand with Israel” merchant-storefront icon app was present in the Shopify App Store and was recorded as removed as of 27 February 2026 by an app-tracking aggregator; No public evidence identified of the specific removal rationale, and No public evidence identified regarding any Palestine-themed app or content-moderation action on the Shopify platform ³⁹. No public evidence identified of regulatory inquiries, export-control actions, or sanctions-related investigations involving Shopify’s technology sales or services to Israeli state entities. No public evidence identified of a specific Shopify Israel office reservist-pay or military-leave salary-subsidy policy, nor of a Shopify corporate charitable-matching program benefiting Israel-linked organizations such as FIDF.

End Notes