Digital Audit: Subaru

Enterprise Technology Stack & Vendor Relationships

Subaru’s own cybersecurity governance disclosure describes an internally-run “SBR-SIRT” incident-response function and a CIO-led “Cybersecurity Meeting,” last revised July 2024, but the disclosure names no external security vendors ¹. No public evidence identified of Subaru holding licensing, subscription, or integration relationships with Check Point, Wiz, SentinelOne, CyberArk, NICE, Verint, Claroty, or Palo Alto Networks. Subaru’s connected-vehicle STARLINK backend runs on the subarucs.com domain family (portal.prod.subarucs.com, mobileapi.prod.subarucs.com, mys.prod.subarucs.com), and independent security research conducted in January–February 2025 documents the application layer of this platform without identifying the underlying cloud or hosting provider ²³⁴. Researcher Sam Curry disclosed a STARLINK admin-panel vulnerability that allowed tracking and remote control of individual vehicles ²; SecurityWeek reported the flaw was patched within roughly 24 hours of a November 20, 2024 disclosure ³; and Fast Company reported the vulnerability had exposed millions of vehicles to tracking risk ⁴. A separate Oracle Cloud case study describes Subaru of America’s Starlink IaaS platform as having evaluated Microsoft, IBM, and AWS before selecting Oracle for backend deployment, with that engagement completed around 2017 ⁵. Subaru’s Starlink GEN2 connected-car platform partner is WirelessCar, a Gothenburg, Sweden-registered company that has been majority-owned by Volkswagen Group since 2018–2019, having previously been owned by Volvo; no Israeli ownership or technology link to WirelessCar was identified ⁶⁷. Subaru selected Hewlett Packard Enterprise (US), deploying Cray XD670 servers, to accelerate AI model training and inferencing for its next-generation EyeSight driver-assist system, per a July 2025 announcement, though no chip vendor or Israeli-origin component is specified in the available source ⁸. No public evidence identified of systems integrators or IT outsourcing partners engaged by Subaru mandating or deploying Israeli-origin technology.

Surveillance, Biometrics & Retail Technology

No public evidence identified of an Israeli-origin vendor (such as Trigo, BriefCam, AnyVision/Oosto, or Trax) supplying the facial-recognition-style driver-monitoring functions (seat/mirror memory, fatigue detection) associated with Subaru’s in-vehicle “DriverFocus” system. No public evidence identified of facial recognition, biometric identification, or video/behavioral analytics deployed in Subaru dealership showrooms tied to an Israeli-origin vendor. No public evidence identified of Israeli-origin predictive-policing, sentiment-analysis, social-media-monitoring, or workforce-surveillance tools used by Subaru. No public evidence identified of indirect delivery of any such surveillance or biometric technologies to Subaru via third-party platform providers or managed security services.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

No public evidence identified of Subaru operating, leasing, or co-locating data centre infrastructure within Israel; Subaru’s global facility listings treat Israel only as a sales/service market, not an infrastructure site. No public evidence identified of Subaru participation in Project Nimbus or any comparable Israeli state-backed cloud programme; Project Nimbus is a distinct, Israel-government-backed cloud initiative involving Google Cloud and AWS with no Subaru nexus identified in any source consulted. No public evidence identified of Subaru providing digital-sovereignty, data-residency, or infrastructure-resilience services to Israeli state institutions or military bodies. Subaru of America’s own IT-infrastructure cloud relationship documented in the available evidence is with Oracle Cloud, arranged via systems integrator Centroid, with no Israeli nexus identified ⁵.

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of contracts, partnerships, or service agreements between Subaru and the Israeli Ministry of Defence, the IDF, or Israeli intelligence agencies. As a boundary clarification, Subaru’s Israeli vehicle-importer relationship runs through Samelet Group (formerly Japanauto), not Colmobil ^9101112; Colmobil - Israel’s Mercedes-Benz, Mitsubishi, and Hyundai importer, separately documented as a supplier of vehicles to the Israeli military and to settlement-related municipal functions - has a Who Profits company profile that contains no mention of Subaru, confirming that Colmobil does not import or distribute Subaru vehicles ¹³. No public evidence identified of Subaru’s commercially available technology being deployed for military, intelligence, or law-enforcement surveillance applications within Israel or the occupied territories. No public evidence identified of Subaru developing, selling, licensing, or maintaining offensive cyber capabilities, zero-day exploit tools, or digital weapons systems, nor of any documented deployment of Subaru-originated tools by Israeli state actors.

AI, Algorithmic & Autonomous Systems

Subaru’s EyeSight advanced driver-assistance stereo-camera system is developed with Hitachi for camera hardware and, per a July 2025 announcement, draws on Hewlett Packard Enterprise (US) infrastructure for AI model training ⁸; no evidence was found linking EyeSight to Mobileye, the Israel-headquartered, Intel-owned ADAS and computer-vision firm - available sources returned only comparative or competitor context, not a vendor relationship. No public evidence identified of Subaru’s AI or machine-learning systems being provided to Israeli state, military, or security bodies. No public evidence identified of Subaru AI models being trained on or given access to civilian population data, intercepted communications, or surveillance-derived datasets originating from Israel or the occupied territories. No public evidence identified of Subaru providing autonomous target-generation, automated threat-detection, or autonomous-tracking systems to Israeli military or security forces.

Technology Ecosystem & R&D Footprint

No public evidence identified of Subaru operating R&D facilities, engineering offices, innovation labs, or accelerator programmes within Israel; Subaru’s confirmed AI/software R&D hub is located in Tokyo (the Shibuya-based “Subaru Lab,” opened February 2025), with no second or international AI lab in Israel identified ¹⁴. Subaru is a member, alongside Honda, Mazda, Nissan, Toyota, and Renesas, of the “Advanced SoC Research for Automotive” (ASRA) consortium formed on December 28, 2023 for automotive chiplet system-on-chip R&D - a Japan-domestic industry consortium with no Israeli participant identified ¹⁵. No public evidence identified of Subaru acquisitions of Israeli-origin technology companies or strategic investments in Israeli startups or venture funds. No public evidence identified of patent portfolios, licensing agreements, or co-development arrangements between Subaru and Israeli-domiciled entities or research institutions such as Technion, Hebrew University, or the Weizmann Institute.

Civil Society Scrutiny & Regulatory History

Subaru does not appear among the companies named in the Al Jazeera summary of UN Special Rapporteur Francesca Albanese’s report A/HRC/59/23 (Microsoft, Alphabet/Google, Amazon, IBM, Palantir, Lockheed Martin, Leonardo, FANUC, Elbit Systems, Caterpillar, Rada Electronic Industries, HD Hyundai, Volvo Group, Booking, Airbnb, Drummond, Glencore, Bright Dairy, Tnuva, Netafim, Orbia, BNP Paribas, Barclays, BlackRock, Vanguard, Allianz, AXA, and Chevron) ¹⁶, and a direct full-text keyword search of the A/HRC/59/23 PDF returned no “Subaru,” “Samelet,” or “Japanauto” mentions ¹⁷. The OHCHR’s September 2025 update to its database of businesses involved in Israeli settlements was also checked and yielded no Subaru-related entry ¹⁸. No public evidence identified of Subaru appearing in the Who Profits company database under “Subaru,” “Samelet,” or “Japanauto.” Two historical, non-technology controversies were identified: a 2012 Subaru-Israel advertisement using “price tag” wordplay evoking settler-violence graffiti, criticized by +972 Magazine ¹⁹; and a 2019 Facebook advertisement circulated on a “Subaru-Israel” page depicting a Subaru driven by a settler striking Palestinian children in East Jerusalem, which the Palestinian Authority’s Fatah movement condemned and which Subaru’s Israeli spokesperson denied producing ²⁰. Neither incident concerns technology provision, both predate the audit’s 2020 threshold, and no evidence of recurrence in 2024–2026 sources was found. No public evidence identified of organized boycott, divestment, or sanctions campaigns targeting Subaru specifically for technology provision to Israel. No public evidence identified of regulatory inquiries, export-control actions, or sanctions-related investigations involving Subaru’s technology sales or services to Israeli state entities. As market-history context, Subaru entered the Israeli market in 1968 via the “Japanauto” importer, defying the Arab League boycott while other Japanese automakers observed it, which gave Subaru a two-decade market monopoly and enduring cultural prominence in Israel ⁹. Japanauto was acquired in 2012 by Jerusalem Subaru dealer Shimon Barzilay ¹⁰ and then in 2013 by the Levi family-owned Samelet Group, which also imports Fiat, Jeep/Stellantis, Ferrari, and Maserati in Israel ¹¹¹². No dedicated Who Profits or OHCHR dossier on Samelet or Japanauto was located, and no evidence was found of a Samelet/Subaru dealership located inside a West Bank, East Jerusalem, or Golan Heights settlement; a third-party “OpenIntel” dossier references Samelet’s role as Subaru’s Israeli distributor but is a crowd-authored, unverified advocacy source rather than a primary document, and it itself reports no settlement-located Subaru retail presence ²¹.

End Notes