SodaStream DIGITAL

Digital Audit - SodaStream International

Enterprise Technology Stack & Vendor Relationships

SodaStream International Ltd. is an Israeli company and an indirect wholly owned subsidiary of PepsiCo; PepsiCo completed the acquisition in 2018, and its 2025 subsidiary list continues to identify multiple SodaStream-branded entities, including SodaStream Industries Ltd., SodaStream International Ltd., and SodaStream Israel Ltd. in Israel.^{1, 2, 3} PepsiCo identifies Eugene Willemsen, Chief Executive Officer, International Beverages, as responsible for the SodaStream business and “Beyond the Bottle” beverage options.⁴

PepsiCo announced a five-year Microsoft Azure partnership in 2020; the stated term would have reached 2025, but the reviewed evidence does not independently establish its present continuation.⁵ PepsiCo also announced an AWS collaboration in 2025 and a deeper Google Cloud artificial-intelligence relationship in 2026.^{6, 7} These are parent-group relationships, and no reviewed source establishes that SodaStream workloads use every group platform.^{5, 6, 7} PepsiCo has also worked with IBM Consulting on group-level data and artificial-intelligence transformation, including a unified data-fabric architecture.⁸

Genpact implemented SodaStream’s “SodaFlow” quality-and-safety management system on Microsoft Azure, but the case study does not identify an Azure region, deployment duration, or named security-vendor layer.⁹

PepsiCo has been identified as a Torq customer, and Torq’s AMP ecosystem identifies Check Point Security and Wiz as participating partners.¹⁰ Torq’s current Trust Center does not publicly display PepsiCo or SodaStream in its listed customer references; this omission does not disprove the earlier PepsiCo relationship, but does not independently confirm its present contractual or deployment status.¹¹ no public evidence identified of a direct SodaStream or PepsiCo licence, subscription, integration, or deployment involving Check Point, Wiz, CyberArk, SentinelOne, NICE, Verint, Claroty, Palo Alto Networks, or comparable Israeli-origin vendor technology.^{10, 11}

IBM Consulting is documented at PepsiCo group level for enterprise AI and data work, but no public evidence has been identified of a SodaStream-specific technology integrator deploying Israeli-origin technology.⁸ No public evidence has been identified of named systems integrators engaged specifically by SodaStream for technology programmes operating separately from PepsiCo’s global information-technology governance.⁸

Surveillance, Biometrics & Retail Technology

No public evidence identified of SodaStream deploying facial recognition, biometric identification, behavioural analytics, gait analysis, or comparable retail-surveillance systems at its facilities.^{1, 2, 3} No verified relationship has been identified with Israeli-origin vendors in this category, including Trigo, BriefCam, AnyVision/Oosto, Trax, or similar providers.^{10, 11}

No public evidence identified of SodaStream using Israeli-origin predictive-policing, sentiment-analysis, social-media-monitoring, or workforce-surveillance products.^{1, 2, 3} SodaStream’s operational focus in the reviewed sources is consumer beverage carbonation appliances, rather than surveillance instrumentation.^{12, 13, 14}

SodaStream’s United States and Australian privacy notices describe use of third-party hosting, marketing, payment, advertising, analytics, and other service providers, but neither identifies Israeli-origin surveillance vendors or establishes their deployment through a managed-service or bundled-software route.^{15, 16} No public evidence has been identified of indirect deployment beyond the documented Torq ecosystem connection involving PepsiCo.^{10, 11}

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

SodaStream’s United States privacy notice, last updated 20 November 2024, states that it collects identifiers, purchase and account information, payment information, device, IP and browsing data, general geolocation, customer-service recordings, and inferences.¹⁵ The notice states that data may be shared with the parent company, affiliates and subsidiaries, and service providers including hosting providers, data-enrichment vendors, chat vendors, advertisers, and parties responding to legal process; it does not identify hosting locations or Israel as a processing destination.¹⁵

SodaStream Australia’s privacy policy states that personal information may be transferred and processed outside a customer’s place of residence, including in countries such as Israel.¹⁶ It further states that intra-group transfers are governed by an intra-group agreement and that third-party transfers may involve hosting, e-marketing, and other information-and-communications-technology providers.¹⁶ This is an affirmative disclosure of potential processing or access in Israel, but it does not identify the data categories, transfer volumes, group entities, physical data centres, cloud regions, or specific providers involved.¹⁶

PepsiCo’s 2025 subsidiary list identifies SodaStream Industries Ltd., SodaStream International Ltd., and SodaStream Israel Ltd. as Israeli subsidiaries as of 27 December 2025, but does not describe their systems, data-centre operations, cloud-region use, or government customers.³

Microsoft Azure Israel Central launched in 2023, and AWS launched its Israel Region in August 2023.^{17, 18} no public evidence identified that SodaStream or PepsiCo uses Azure Israel Central, AWS Israel, or Google Cloud Israel for its workloads.^{5, 6, 7, 17, 18} no public evidence identified that SodaStream or PepsiCo is a Project Nimbus contractor, subcontractor, marketplace supplier, or recipient of Nimbus services.^{18, 19, 20}

Project Nimbus concerns Google and AWS services for Israeli state infrastructure, including Ministry of Defence-related infrastructure, but those sources do not identify SodaStream or PepsiCo as participants.^{19, 20} PepsiCo’s separate global relationship with Google Cloud does not establish a connection to Project Nimbus, Israeli state workloads, Israeli cloud regions, or defence data.^{7, 19, 20}

No public evidence identified that SodaStream provides data-residency, resilience, cloud, digital-sovereignty, or related services to Israeli state or military institutions.^{1, 2, 3}

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of SodaStream holding contracts, partnerships, or service agreements for information technology, cloud, communications, analytics, cyber, or other technology with the Israeli Ministry of Defence, Israel Defense Forces, Mossad, Shin Bet, police, or another state-security body.^{1, 2, 3}

No public evidence identified that SodaStream develops, sells, licenses, or maintains surveillance tools, offensive-cyber capabilities, exploit tools, digital weapons systems, or products deployed for military, intelligence, or law-enforcement surveillance purposes.^{12, 13, 1, 2, 3} SodaStream’s documented business is the manufacture and sale of consumer home-carbonation appliances.^{12, 13}

Daniel Birnbaum served as SodaStream’s Chief Executive Officer from 2007 to 2019 and joined Massivit 3D Printing’s advisory board in January 2026.²¹ Massivit has described an expansion into defence and aerospace and collaborations with Israeli defence-sector manufacturers, including Kanfit, which produces components for Israel Aerospace Industries, Elbit Systems, and Rafael Advanced Defense Systems.^{22, 23} Reporting has also described Massivit’s defence-sector activity and Israeli military drone-component production.^{24, 25} Birnbaum’s Massivit role is a post-SodaStream external advisory role; no reviewed corporate record identifies it as part of SodaStream or PepsiCo governance, and no evidence connects it to SodaStream’s current operations.^{21, 1, 2, 3}

No public evidence identified in the reviewed entity, annual-report, and proxy records that a current SodaStream executive, PepsiCo director, PepsiCo executive officer, Vanguard, or BlackRock holds a disclosed corporate investment in an Israeli surveillance, cyber, SIGINT, AI, or military-technology company.^{3, 26} This is records-scoped and does not establish that no such investment exists.^{3, 26} PepsiCo’s 2026 proxy identifies Ramon L. Laguarta as Chairman and Chief Executive Officer; it identifies The Vanguard Group and BlackRock, Inc. as the only disclosed holders above 5% as of 26 February 2026, while directors and executive officers as a group held less than 1%.²⁶

AI, Algorithmic & Autonomous Systems

No public evidence identified of SodaStream providing artificial intelligence, machine learning, computer vision, autonomous decision-support, data-analysis, or tracking systems to Israeli state, military, security, or law-enforcement bodies.^{1, 2, 3}

At parent-company level, PepsiCo’s documented AI and data activity concerns internal enterprise transformation, supply-chain optimisation, demand forecasting, consumer and business analytics, and cloud-enabled operations.^{6, 7, 8} No reviewed source identifies a PepsiCo or SodaStream artificial-intelligence capability supplied to or used by Israeli state, military, or security entities.^{6, 7, 8}

No public evidence identified of SodaStream model-development or training pipelines, including models trained on Israeli or occupied-territory civilian data, intercepted communications, or surveillance datasets.^{1, 2, 3} no public evidence identified of SodaStream provision of autonomous target generation, threat detection, weapons-effect, or autonomous tracking systems for Israeli military or security forces.^{1, 2, 3}

Technology Ecosystem & R&D Footprint

SodaStream operated manufacturing and research-and-development facilities at the Mishor Adumim industrial zone in the West Bank from 1996 until 2015.^{12, 13} The documented Mishor Adumim operation ended in 2015, with relocation to Idan HaNegev Industrial Park near Rahat and Beer Sheva reported in 2015.^{12, 13, 14} The retained sources describe physical product and carbonation-related research and development, including appliance design and carbon-dioxide cylinder systems, rather than a software, cloud, cybersecurity, or artificial-intelligence research operation.^{12, 14} The reviewed public sources do not independently establish the current scale or functional scope of SodaStream’s R&D operations.^{14, 3}

PepsiCo’s 2025 Form 10-K lists an owned manufacturing plant at Lehavim, Israel, in its international-beverages facilities listing.³ The cited plant table does not identify the product line or legal entity operating the facility and should not be treated as proof that a particular SodaStream entity operates it.³

No public evidence identified of SodaStream acquiring an Israeli-origin software, cyber, or AI company, or making a strategic investment in an Israeli technology startup or venture fund.^{27, 1, 2, 3} PepsiCo acquired SodaStream in 2018 for approximately $3.2 billion.^{27, 1, 2, 28}

SodaStream’s retained patent information concerns carbonation technology, beverage-dispensing mechanisms, and carbon-dioxide cylinder design, consistent with its consumer-product manufacturing identity.¹² no public evidence identified of material SodaStream licensing, patent co-development, or formal technology collaboration with Technion, Hebrew University, Weizmann Institute, or another Israeli research institution.^{12, 1, 2, 3}

Civil Society Scrutiny & Regulatory History

The American Friends Service Committee Investigate database and Who Profits document SodaStream’s historical Mishor Adumim operations.^{12, 13} SodaStream was not identified in the reviewed 2023 or 2025 OHCHR settlement-business database updates, and neither SodaStream nor PepsiCo was identified in the reviewed text of the United Nations Special Rapporteur’s A/HRC/59/23 report of 2 July 2025.^{29, 30, 31} These are document-scoped findings and do not establish absence from every historical OHCHR database iteration.^{29, 30, 31}

The Boycott, Divestment, and Sanctions campaign prominently targeted SodaStream between 2012 and 2018 in connection with the Mishor Adumim manufacturing location and associated labour-practice concerns.^{12, 13} The historical facility closure and PepsiCo acquisition occurred in 2015 and 2018 respectively.^{12, 13, 27} The research memo further verified that Al-Haq discussed SodaStream as a historical Mishor Adumim case study in a 2024 report and that a BDS guide published in November 2024 named SodaStream; these publications are context only, because the reviewed material did not independently verify a primary-source chain for additional claims beyond the documented historical operations.^{12, 13}

The International Centre of Justice for Palestinians sent warning letters to major United Kingdom retailers in November 2025 concerning potential legal exposure from stocking SodaStream products due to settlement-enterprise connections.³² The reviewed evidence concerns retailers stocking SodaStream products rather than verified SodaStream technology provision.³²

No public evidence identified of SodaStream resuming manufacturing or other operations at Mishor Adumim after 19 July 2024, or of an occupied-territory digital-service operation by SodaStream or PepsiCo.^{12, 13, 14, 30, 31} SodaStream Australia’s continuing disclosure that data may be transferred and processed in Israel does not identify a settlement, state-security, military, or occupied-territory endpoint.¹⁶

No public evidence identified of regulatory inquiries, export-control proceedings, sanctions-related investigations, procurement challenges, privacy-regulator decisions, or other regulatory or legal proceedings specifically involving SodaStream technology sales or services to Israeli state entities.^{33, 34, 35, 3} PepsiCo’s Form 10-K filings do not disclose specific technology-vendor country-of-origin requirements or Israeli technology-procurement requirements, and PepsiCo’s Global Code of Conduct addresses labour, environmental, ethics, and anti-corruption matters without disclosing technology-vendor origin requirements.^{33, 34, 35, 3}