Digital Audit - Superdrug

Domain: Digital - Digital / Technology Entity scope: Superdrug Stores plc - the UK health & beauty retailer, owned by A.S. Watson Group (CK Hutchison). Superdrug-corporate’s OWN technology is in scope; A.S. Watson group-level/shared and sibling-brand tech is documented and attributed at group/sibling level unless Superdrug-brand-specific. Vendor-domicile rule applies: only genuinely Israeli-domiciled vendors counted in scope (Israeli-founded-but-foreign-domiciled flagged carefully). Compiled: 2026-06-25 Method: Live web search only

Enterprise Technology Stack & Vendor Relationships

Superdrug’s e-commerce runs on SAP Commerce Cloud, with a third-party online marketplace (launched late 2022, the first by a UK high-street health & beauty retailer) built on Mirakl (Paris, France / Boston) and integrated by KPS (an SAP Gold Partner near Munich, Germany).¹²³⁴ Superdrug uses Movable Ink (New York, US) for omni-channel personalised marketing, and Superdrug Online Doctor (operated by Health Bridge Ltd, which also runs Zava) is hosted on AWS (EU-region) with a stack including Cloudflare (US), Vue.js, New Relic, Segment, Monetate/Kibo, and SiteSpect (Boston, US).^5678910 Pharmacy delivery uses Gophr (UK).¹¹ Israeli-vendor scan: no public evidence identified of any Israeli-domiciled vendor in Superdrug’s own brand-floor technology stack - all confirmed vendors carry US, French, German, UK, or Finnish domiciles.

A.S. Watson parent/group attribution (group-level unless Superdrug-brand-specific): A.S. Watson runs pan-group digital operations through an internal unit, eLab, with hubs the company lists as Hong Kong, London, and Milan; a LinkedIn showcase page for eLab resolves to an Israeli country-domain URL (il.linkedin.com), which appears to be a LinkedIn showcase/recruitment artefact rather than a confirmed operational Israel office - treated as unresolved/anomalous, not as confirmed evidence, and group-level rather than Superdrug-brand in any case.¹²¹³ No Israeli-domiciled vendor was identified in A.S. Watson’s public technology-partnership listings.¹⁴

Surveillance, Biometrics & Retail Technology

Superdrug is deploying ~500 digital advertising screens across its UK estate (Retail Media Network “Optimo”), with CMS by NowSignage (UK; distinct from the unrelated Israeli signage vendor NoviSign, with which no Superdrug relationship was identified) and integration by Aura Futures (UK).¹⁵¹⁶¹⁷ No public evidence identified of facial recognition, biometric identification, or behavioural analytics on these screens. Superdrug uses Revieve’s AI Skincare Advisor (computer-vision/facial analysis of selfie images against 120+ skin metrics) on its e-commerce; Revieve is Helsinki, Finland-domiciled (offices Chicago/Valencia/Seoul), and was deployed via an A.S. Watson group agreement encompassing Superdrug, ICI PARIS XL, and Marionnaud.^18192021 No public evidence identified of CCTV-based facial recognition, loss-prevention biometrics, or any Israeli surveillance vendor in Superdrug’s in-store security stack.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Superdrug Online Doctor (Health Bridge Ltd) hosts patient data on AWS EU-region infrastructure (ISO27001/SOC2; CQC-regulated), with Cloudflare (US) as CDN.⁷⁸ No public disclosure was found of the cloud-hosting/data-residency arrangements for the main superdrug.com (SAP Commerce Cloud) or the Health & Beautycard loyalty platform, and no public evidence identified of participation in any Israeli or Israeli-affiliated sovereign-cloud programme.

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of any technology relationship between Superdrug and Israeli defence, intelligence, or security-sector technology companies. Superdrug suffered a 2018 credential-stuffing/account-takeover incident (~386 accounts verifiably compromised), reported to UK law enforcement; a Manchester-based bot-protection firm (Netacea, UK) referenced the incident in public content, though no formal active Superdrug–Netacea contract was publicly confirmed.²²²³²⁴ No Superdrug technology contracts with defence- or intelligence-adjacent vendors were identified.

AI, Algorithmic & Autonomous Systems

Superdrug’s confirmed AI deployments are commercial and non-Israeli-sourced: Revieve AI skincare analysis (Finland); the Optimo Retail Media Network’s algorithmic in-store ad targeting (underlying audience-data source undisclosed); Movable Ink AI-driven personalised content in email/push; and AI photo-booth experiential installations via UK event-tech vendors.^1815525 No public evidence identified of Superdrug using AI systems sourced from Israeli-domiciled vendors.

Technology Ecosystem & R&D Footprint

Superdrug has no independently identified R&D footprint or technology-development presence in Israel; its digital development sits within A.S. Watson’s eLab programme (hubs listed as London, Milan, Hong Kong), and no independently confirmed Israeli eLab office or Israel-based development function for the Superdrug brand was identified (the il.linkedin.com showcase anomaly above remains unresolved and is not treated as evidence).¹² Superdrug’s current primary commercial-technology investment is the Optimo Retail Media Network (launched late 2023), and no patents, joint R&D agreements, or Israeli academic/technology-ecosystem partnerships specific to Superdrug were identified.²⁶

Civil Society Scrutiny & Regulatory History

The UK ICO was notified of the 2018 account-takeover incident; no ICO enforcement action, fine, or formal investigation conclusion against Superdrug arising from it was identified, and a separate cited mis-sent-data incident has appeared in data-breach-claim contexts without a confirmed ICO sanction.²²²⁷ Superdrug’s privacy policy acknowledges AI-technology data use.²⁸ No civil-society organisation, BDS campaign, or activist group was identified as specifically targeting Superdrug for technology relationships with Israeli companies; Superdrug appears in some activist contexts as a recommended alternative purchase destination rather than a boycott target, and no NGO, parliamentary, or regulatory scrutiny specific to Israeli technology relationships with Superdrug was identified.²⁹

End Notes