Subaru DIGITAL

Enterprise Technology Stack & Vendor Relationships

Subaru’s own cybersecurity governance disclosure describes an internally-run “SUBARU Security Incident Response Team” (SBR-SIRT) and a CIO-chaired “Cybersecurity Meeting” under a Basic Cybersecurity Policy last revised in July 2024; the disclosure names no external security vendors ¹. No public evidence identified of Subaru Corporation or Subaru of America holding licensing, subscription, or integration relationships with Check Point, Wiz, SentinelOne, CyberArk, NICE, Verint, Claroty, Palo Alto Networks, or other Israeli-founded or Israeli-origin cybersecurity and enterprise-software vendors. Subaru of America’s primary disclosed cloud and IT infrastructure vendor is Oracle, whose Cloud Infrastructure (IaaS) and Cloud Platform (PaaS) offerings were selected after evaluation against Microsoft, IBM, and Amazon Web Services, with no Israeli-origin providers named in the selection process ². Centroid, an Oracle-focused systems integrator, is documented as Subaru of America’s cloud implementation partner, and no Israeli-technology mandate or dependency is documented in that relationship ². Subaru’s AI and driver-assistance research and development infrastructure, operated through “SUBARU Lab” since 2020, runs on Dell Technologies PowerScale storage hardware located in facilities in the United States and Tokyo, with no Israeli-origin infrastructure component identified ^{3, 4, 5}. Subaru’s connected-vehicle STARLINK backend runs on the subarucs.com domain family (portal.prod.subarucs.com for the STARLINK admin portal, mobileapi.prod.subarucs.com for the MySubaru mobile app API, and mys.prod.subarucs.com); independent security research documenting the application layer of this platform identifies no underlying cloud or hosting provider ⁶. Researchers Sam Curry and Shubham Shah disclosed a STARLINK admin-panel authentication flaw permitting takeover of employee accounts, retrieval of a year of vehicle location history, and remote start, stop, lock, and unlock of individual vehicles across the United States, Canada, and Japan; the flaw was reported to Subaru on November 20, 2024, patched within roughly 24 hours, and published on January 23, 2025 ^{6, 7}. Fast Company reported that the vulnerability had exposed millions of vehicles to tracking risk ⁸. Subaru’s STARLINK GEN2 connected-car platform partner is WirelessCar, a Gothenburg, Sweden-registered company founded in 1999, wholly owned by Volvo from 2007 until Volkswagen Group agreed in December 2018 to acquire a 75.1 percent majority stake (completion expected in the first half of 2019); no Israeli ownership of, or Israeli technology link to, WirelessCar was identified ^{9, 10}.

Surveillance, Biometrics & Retail Technology

No public evidence identified of Subaru dealership deployment of facial recognition, biometric identification, or Israeli-origin retail-analytics platforms such as Trigo, BriefCam, AnyVision/Oosto, or Trax. Subaru’s in-vehicle DriverFocus system does employ facial-recognition-based driver monitoring - including eye and head tracking and biometric facial measurement - to detect distraction and drowsiness and to personalize seat and mirror settings ^{11, 12}. This system has been the subject of litigation under Illinois’s Biometric Information Privacy Act (BIPA), with a court permitting the suit to proceed to trial in November 2022; the underlying reporting addresses the biometric-privacy claim itself and does not identify the technology vendor supplying DriverFocus’s facial-recognition components as Israeli-origin ¹¹. Subaru’s own vehicle privacy notice describes STARLINK and DriverFocus data handling without reference to an Israeli-origin technology supplier ¹². No public evidence identified of Israeli-origin predictive-policing, sentiment-analysis, social-media-monitoring, or workforce-surveillance tools used by Subaru, nor of indirect delivery of Israeli-origin surveillance or biometric technology to Subaru via third-party platforms or managed security services.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

No public evidence identified of Subaru operating, leasing, or co-locating data center infrastructure within Israel. No public evidence identified of Subaru participation in Project Nimbus or any comparable Israeli government cloud program; the documented participants in Project Nimbus are Google and Amazon, and Subaru does not appear among named participants in reference material on the program ¹³. Subaru’s disclosed data infrastructure vendors - Oracle for enterprise cloud services and Dell for AI/telematics compute storage - are both United States-headquartered, and no Israel-jurisdiction touchpoint in Subaru’s own data pipeline has been identified ^{2, 3, 4, 12}.

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of contracts, partnerships, or service agreements between Subaru and the Israeli Ministry of Defence, the Israel Defense Forces, Israeli intelligence agencies, or other Israeli state security bodies. As a boundary clarification, Subaru’s Israeli vehicle-importer relationship runs through Samelet, not Colmobil: the Who Profits company profile for Colmobil - Israel’s largest car importer, documented as supplying the Israeli Ministry of Defense with Mercedes Arcos trucks and Sprinter ambulances in November 2023, tractor heads for transporting Merkava Mark 4 tanks, and vehicles tied to East Jerusalem municipal transport functions - lists Mercedes-Benz, Mitsubishi, Genesis, Jaecoo, Smart, HD Hyundai, Freightliner, and King Long franchises and contains no mention of Subaru ¹⁴. No public evidence identified of Subaru’s commercially available technology being deployed for military, intelligence, or law-enforcement surveillance applications within Israel or the occupied Palestinian territories. No public evidence identified of Subaru developing, selling, licensing, or maintaining offensive cyber capabilities, zero-day exploit tools, or digital weapons systems of any kind.

AI, Algorithmic & Autonomous Systems

Subaru’s disclosed artificial intelligence development activity centers on EyeSight and DriverFocus driver-assistance systems, developed through SUBARU Lab using Dell PowerScale infrastructure hosted in the United States and Tokyo - a consumer-automotive application with no Israel nexus identified ^{3, 4, 5}. In an announcement dated July 28, 2025, Subaru additionally selected Hewlett Packard Enterprise (United States) HPE Cray XD670 servers, powered by NVIDIA (United States) H200 GPUs with NVLink, to optimise AI algorithms and train and run inference models for the next-generation EyeSight driver-assist system; no Israeli-origin vendor or component appears in that announcement ¹⁵. No public evidence identified of Subaru providing AI/ML, computer vision, or autonomous decision-support systems to Israeli state, military, or security bodies. No public evidence identified that Subaru’s AI models have been trained on, or given access to, civilian population data, intercepted communications, or surveillance-derived datasets originating from Israel or the occupied territories. No public evidence identified of Subaru providing autonomous target-generation, automated threat-detection, or autonomous-tracking systems to Israeli military or security forces.

Technology Ecosystem & R&D Footprint

No public evidence identified of Subaru operating research and development facilities, engineering offices, innovation labs, or accelerator programs within Israel; comparable automaker R&D presences in Israel documented elsewhere involve GM, Porsche, SAIC/Harman, Ford, Honda, BMW, the Renault-Nissan Alliance’s Tel Aviv innovation lab, Volkswagen, Volvo, and Hyundai, none of which include Subaru. No public evidence identified of Subaru acquiring an Israeli-origin technology company or making strategic investments in Israeli technology startups or venture funds. Subaru is one of twelve founding members - alongside Toyota, Honda, Nissan, Mazda, Denso, Panasonic Automotive Systems, Renesas, Socionext, and the US EDA firms Cadence and Synopsys - of the “Advanced SoC Research for Automotive” (ASRA) association, established in December 2023 and announced on December 28, 2023 to develop automotive chiplet system-on-chip technology by 2028 for mass-produced vehicles from 2030; no Israeli participant is named in the founding membership ¹⁶. Subaru’s EyeSight driver-assistance system is disclosed as relying on ON Semiconductor image sensors and Infineon Technologies microcontrollers - neither an Israeli company - and No public evidence identified of a technology partnership between EyeSight and Mobileye, the Israeli advanced-driver-assistance-systems firm active in this same technology space. No public evidence identified of patent portfolios, licensing agreements, or co-development arrangements between Subaru and Technion, Hebrew University, the Weizmann Institute, or other Israeli-domiciled research institutions.

Civil Society Scrutiny & Regulatory History

Subaru does not appear in the UN OHCHR settlement-related business database as mirrored by OpenSanctions ¹⁷, nor in the Who Profits company database maintained by the Who Profits Research Center ¹⁸, nor in the September 2025 update to the OHCHR list of firms tied to Israeli settlements as reported by Al Jazeera ¹⁹, nor in the Wikipedia-compiled list of companies operating in West Bank settlements ²⁰. Subaru is likewise not named among the companies cited in UN Special Rapporteur Francesca Albanese’s July 2025 report A/HRC/59/23, “From economy of occupation to economy of genocide”; automotive and heavy-machinery companies named in that report and in secondary commentary on it are HD Hyundai/Doosan and the Volvo Group (via Merkavim Transportation Technologies), not Subaru ^{21, 22}. A direct full-text keyword search of the OHCHR advance version of the A/HRC/59/23 PDF returned no occurrence of “Subaru,” “Samelet,” or “Japanauto” ²³.

A historical, non-technology controversy is noted for completeness. In April 2011 the Palestinian Authority publicly condemned an advertisement circulating in Israel that depicted a Subaru vehicle appearing to strike Palestinian children, referencing an actual October 2010 incident in which two Palestinian children in Jerusalem were struck by a Subaru vehicle driven by the director-general of the Elad settler organization; Subaru-Israel’s spokesperson denied producing or authorizing the advertisement and stated it had appeared only briefly on a Facebook page before removal ²⁴. A separate February 2012 advertisement using “price tag” settler-violence imagery for a trade-in promotion drew criticism from +972 Magazine, though that reporting does not confirm Subaru or its agency as the campaign’s confirmed creator ²⁵. This item is a marketing and reputational controversy rather than a documented technology-provision relationship and falls outside this domain’s digital-supply-chain scope; it is flagged here only per civil-society-scrutiny reporting practice.

Subaru’s commercial history in Israel includes being the first Japanese automaker to sell into the Israeli market, in 1968, in defiance of the Arab League boycott - a market-entry fact rather than a technology-transfer fact ²⁶. Subaru has been distributed in Israel since 2013 by Samelet (Mediterranean Car Agency), headquartered in Petah Tikva ^{27, 28, 29}. The importer previously traded as Japanauto: Globes reported in December 2012 that the sale of Japanauto Holdings Ltd., parent of the Subaru importer, had been completed to Shimon Barzilay, owner of the Jerusalem Subaru dealership, with the deal structured around assuming Gad Zeevi’s debts to Michael Cherney ³⁰. Samelet, controlled by the Levy family, holds the Israeli franchises for Subaru alongside Fiat, Alfa Romeo, Jeep, Ram, Dodge, Chrysler, Maserati, Ferrari, Leapmotor, and Hongqi ³¹. No public evidence identified of an organized boycott, divestment, or sanctions campaign specifically targeting Subaru’s technology provision to Israel, nor of regulatory inquiries, legal challenges, export-control actions, or sanctions-related investigations involving Subaru’s technology sales or services to Israeli state entities.