TripAdvisor DIGITAL

Research date 3 November 2026. Evidence older than five years is flagged [pre-2020]. This audit presents sourced facts only and assigns no scores.

Enterprise Technology Stack & Vendor Relationships

Cloud and infrastructure. Tripadvisor’s FY2025 Form 10-K (filed February 2026) states that it relies on Amazon Web Services to operate certain aspects of its business, that part of its branded-website infrastructure is hosted on AWS in a hybrid-cloud configuration, and that parts of the infrastructure sit in a co-location facility managed by its own operations team. ¹ A July 2025 article by ScyllaDB says Tripadvisor runs hundreds of microservices on Kubernetes both on-premises and in Amazon EKS, runs a ScyllaDB cluster in its own AWS account, and uses ECS Fargate and Kinesis for visitor-platform services and event streaming. ² The dependency on AWS is therefore on core platform infrastructure, and AWS is current as of the 2025 filing and article. ^{1, 2}

Productivity suite. A SADA case study describes Tripadvisor’s 120-day migration from a hybrid of Microsoft 365, Google Drive and on-premises servers to Google Workspace, covering 92.4 TB, about 4,500 mailboxes and 459 shared drives. ³ The same case study says Tripadvisor enabled Gemini after the migration, and that Microsoft productivity licences fell by 82%. ³ The page carries no date, so the start and end dates of this migration are not established. ³

Israeli-origin vendors. No public evidence identified of licensing, subscription or integration relationships between Tripadvisor and Check Point, Wiz, SentinelOne, CyberArk, Nice, Verint, Claroty or Palo Alto Networks. ^{1, 3} The 10-K refers to cybersecurity vendors only generically, saying they are contractually obligated to notify Tripadvisor of incidents, and it names none. ¹

Integrators. SADA is the named integrator for the Google Workspace migration, and no public evidence identified that it mandated or deployed Israeli-origin technology in that engagement. ³

Third-party deployment. Google and AWS are the two winners of Israel’s Project Nimbus cloud tender, awarded 21 April 2021. ^{4, 5} Tripadvisor is documented as a customer of AWS and Google Workspace, and no public evidence identified that Tripadvisor participates in Nimbus or that its workloads run in the Israeli cloud regions. ^{1, 3, 4, 5}

Surveillance, Biometrics & Retail Technology

No public evidence identified of Tripadvisor using facial recognition, biometric, gait-analysis or retail-analytics products of Israeli origin such as Trigo, BriefCam, AnyVision/Oosto or Trax. ^{6, 7} The AFSC profile and the Who Profits profile address Tripadvisor’s listings and bookings and describe no surveillance or biometric technology. ^{6, 7}

No public evidence identified of Israeli-origin predictive policing, sentiment-analysis, social-media-monitoring or workforce-surveillance tools used by Tripadvisor. ^{1, 7}

No public evidence identified of such technologies reaching Tripadvisor indirectly through managed security services or bundled suites. ^{1, 3}

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Israeli data centres. No public evidence identified that Tripadvisor operates, leases or co-locates data-centre infrastructure in Israel. ^{1, 8} Exhibit 21.1 of the FY2025 10-K lists Tripadvisor’s subsidiaries across the US, UK, Europe, Australia, India, Japan, Singapore, Hong Kong, China and elsewhere, and none is incorporated in Israel. ⁸ The Who Profits profile likewise lists no Israeli-incorporated subsidiary. ⁷ The 10-K says that about 68% of employees are in Europe, 28% in the US and 4% in the rest of the world. ¹ The location of the co-location facility is not stated in the portions of the 10-K reviewed. ¹

Government cloud. The Project Nimbus tender (April 2021, about NIS 4 billion, or $1.2 billion per Calcalist’s headline) was won by Google and AWS, with Somekh Chaikin-KPMG winning the separate strategy tender. ^{4, 5} Calcalist reports that the winners must build local cloud sites in Israel that keep data inside Israel’s borders under strict security guidelines. ⁵ no public evidence identified that Tripadvisor is a party to Nimbus or any comparable programme. ^{4, 5}

Data-exposure principle. Tripadvisor’s core function involves collecting and processing user behavioural data, such as events streamed through Kinesis for personalisation, hosted on AWS and on-premises systems. ² no public evidence identified that any part of this pipeline is stored, routed, processed or developed in Israel, or is legally accessible under Israeli jurisdiction. ^{1, 2}

Sovereignty and resilience services. No public evidence identified that Tripadvisor provides digital-sovereignty, data-residency or resilience services to Israeli state or military bodies. ^{1, 7}

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of contracts or partnerships between Tripadvisor and the Israeli Ministry of Defence, the Israel Defence Forces or intelligence agencies. ^{6, 7, 1}

AFSC reports that Tripadvisor acts as booking agent for some offerings, including Caliber 3, described as a “counter-terrorism boot camp” in a West Bank settlement that advertises training in Israeli Army values, weapons handling and counter-terror tactics. ⁶ This is a consumer booking listing, and the AFSC page does not describe any technology provided to a military body. ⁶

No public evidence identified of offensive cyber, zero-day or digital-weapons development, sale or maintenance by Tripadvisor. ^{1, 7}

AI, Algorithmic & Autonomous Systems

No public evidence identified of Tripadvisor providing AI, machine learning, computer vision or decision-support systems to Israeli state, military or security bodies. ^{7, 1} Documented AI use is internal: Gemini was enabled for staff after the Google Workspace migration, and machine-learning personalisation runs on its visitor platform. ^{3, 2}

No public evidence identified of Tripadvisor models being trained on civilian population data, intercepted communications or surveillance-derived datasets from Israel or the occupied territories. ^{1, 2}

No public evidence identified of autonomous target generation, threat detection or tracking systems provided by Tripadvisor. ^{7, 1}

UN reporting on tech firms. Middle East Eye and Novara summaries of A/HRC/59/23 (Albanese, July 2025) describe the report as naming Alphabet/Google, Amazon and Microsoft in connection with cloud and AI services and Project Nimbus. ^{9, 10} Neither summary mentions Tripadvisor. ^{9, 10} The primary text of the report could not be read, so those summaries are the only basis here. ^{9, 10}

Technology Ecosystem & R&D Footprint

R&D. No public evidence identified of Tripadvisor research-and-development centres, engineering offices or accelerators in Israel. ^{8, 7} Exhibit 21.1 lists technology entities in Romania (TA Innovation Services), Croatia (TA Innovations), Iceland (Bokun ehf) and India, and none in Israel. ⁸

Acquisitions and investments. No public evidence identified of acquisitions of Israeli technology companies, or of investments in Israeli startups or funds, by Tripadvisor. ^{8, 7} The subsidiaries that Exhibit 21.1 lists are US, UK, European, Australian, Latin American and Asian entities, including Owl Analytics, Bokun and SinglePlatform. ⁸

Patents and academic links. No public evidence identified of patent or co-development arrangements between Tripadvisor and Israeli entities or institutions. ^{1, 7}

Ownership and controlling principals. Liberty TripAdvisor Holdings became an indirect wholly owned subsidiary of Tripadvisor when the merger closed on 29 April 2025, and the 10-K states that Tripadvisor no longer has a controlling stockholder. ¹ Barry Diller is described in the 10-K as the former Chairman and Senior Executive. ¹ The 2026 proxy names Gregory B. Maffei as Chair, not standing for re-election, and Matt Goldberg as President and CEO since July 2022. ¹¹ The Who Profits profile lists BlackRock Advisors at 13.68%, Vanguard at 10.75% and Starboard Value at 8.13%. ⁷

Named-entity record (each name, relationship, finding).

• Tripadvisor, Inc. (the target) was searched against whoprofits.org, AFSC, OHCHR and SEC records, with the findings reported in this audit. ^{6, 1, 7}
• Liberty TripAdvisor Holdings was the former controlling holder and is now a subsidiary. Searched, no Israel technology link found in the filings reviewed. ¹
• Barry Diller was the former Chairman and Senior Executive. Searched, no Israel technology link found. ¹
• Gregory B. Maffei is the Chair, not standing for re-election. Searched, no Israel technology link found in the proxy portion reviewed. ¹¹
• Matt Goldberg is the CEO and a director nominee. Searched, no Israel technology link found in the proxy portion reviewed. ¹¹
• Stephen Kaufer was named by Amnesty as CEO in June 2020, and the proxy now names Goldberg as CEO since July 2022. ^{12, 11}
• The 2026 director nominees (Bisesto, Cates, Dichter, Fonseca, Morgan, Philips, Shineman Blake, Sparks, Wiesenthal) have bios in the proxy that show no Israeli surveillance, cyber, AI or defence directorships in the portion reviewed. ¹¹
• Starboard Value (8.13%), BlackRock Advisors (13.68%) and Vanguard (10.75%) are listed shareholders per Who Profits, and no Israel technology link was found for them in the sources reviewed. ⁷
• Viator, FlipKey and TheFork are group brands, and Who Profits and AFSC document Viator and FlipKey in connection with settlement listings. ^{6, 7}

Civil Society Scrutiny & Regulatory History

UN database. AFSC reports that Tripadvisor was included in the 2020 UN database of businesses active in settlements. ⁶ Al-Monitor and the Gulf Times report that Tripadvisor remained on the list in the update released on 26 September 2025, which holds 158 firms, after 68 additions and seven removals. ^{13, 14} Al-Monitor says the companies had not responded to AFP’s request for comment. ¹³ The same update therefore post-dates the 19 July 2024 ICJ advisory opinion, and Tripadvisor stayed listed. ^{13, 14}

Who Profits. The October 2017 flash report [pre-2020] says Tripadvisor, Booking.com and Airbnb misrepresent settlement properties in the West Bank, including East Jerusalem, and in the Golan as being in Israel. ¹⁵ The company profile (stated valid until 02/07/2026) classes Tripadvisor under “Services to the Settlements” and lists 8 West Bank accommodation listings, 3 East Jerusalem accommodation listings and 38 Golan listings across 13 settlements. ⁷ It also lists promoted attractions in the City of David, Susya and Gush Etzion, and Viator tours of the City of David. ⁷

Amnesty International. The January 2019 “Destination: Occupation” research [pre-2020] found at least 70 listings in 27 settlements, more than any digital tourism company except Airbnb. ¹⁶ Examples include the City of David (Elad Foundation-run, with Tripadvisor as booking agent), Hebron, Susya and Shiloh. ¹⁶ Amnesty’s July 2019 open letter [pre-2020] asked Tripadvisor staff to press for removal of the listings. ¹⁷ On 25 June 2020 (more than five years old) Amnesty delivered a petition with over 300,000 signatures to then-CEO Stephen Kaufer and said no policies had changed since 2019. ¹² The New Arab reported Amnesty’s Susya criticisms on 3 July 2019. ¹⁸

Boycott and divestment. AFSC records that in October and November 2020 the student governments at Fresno State and San Francisco State passed resolutions referencing the UN-listed companies including Tripadvisor. ⁶ The Amnesty petition and open letter are the main organised campaign actions found. ^{12, 17}

Company response. Tripadvisor said that a listing “does not represent our endorsement” of a business. ¹⁹ Its communications director Brian Hoyt said in July 2019 [pre-2020] that Tripadvisor does not remove listings for businesses that remain active and open, and that the site aims for an “apolitical, accurate and useful picture”. ²⁰ A dated 12 February 2019 response appears in the BHRRC timeline. ¹⁹ No later company response was found. ^{12, 13}

Regulatory and legal actions. No public evidence identified of regulatory inquiries, export-control actions or sanctions investigations into Tripadvisor’s technology sales to Israeli state entities. ^{1, 7} The FY2025 10-K mentions the Israel-Hamas conflict only as a travel-demand risk, in a sentence about conflicts that have impacted travel to the regions. ¹

Settlement nexus and constructive notice. The documented relationship is the listing and booking of settlement businesses on Tripadvisor’s platform, with Viator and FlipKey also acting as booking agents. ^{6, 7} The Who Profits profile, stated valid until 02/07/2026, still describes those listings, and Tripadvisor remained in the UN database on 26 September 2025. ^{7, 13} The exact dates on which individual listings were observed are not given, so continuation after 19 July 2024 is supported by the profile and the database retention rather than by dated listing captures. ^{7, 13}

Act record.

• Act: listing and promotion of settlement accommodation, attractions and tours. Acting entity: Tripadvisor, Inc. group, via its flagship site and the Viator and FlipKey brands. The exact operating legal entity for the site is not established in the sources reviewed (the subsidiaries include TripAdvisor LLC, Viator, Inc. and FlipKey, LLC). Beneficiaries: settlement businesses such as hotels, wineries and tours, and in the City of David case an Elad Foundation-run site. Channel: Tripadvisor’s own site and brands. Earliest dated observation: October 2017 (Who Profits). Latest: the profile valid to 02/07/2026 and the 26 September 2025 database retention. Status: continuing or unknown, because no public record of an exit was found and Amnesty reported no change by June 2020. ^{8, 7, 15, 12, 13, 16, 6}
• Act: public communication that listing is not an endorsement and active businesses are not removed. Acting entity: Tripadvisor (spokesperson Brian Hoyt, communications director). Channel: statements reported by Patch (July 2019) and a response dated 12 February 2019 on the BHRRC timeline. Audience: the press and Amnesty. Persistence: no later restatement was found. Status: unknown. ^{20, 19}
• Act: hosting on AWS and use of Google Workspace. Acting entity: Tripadvisor. Recipients: Amazon Web Services and Google/SADA. Channel: the 10-K (February 2026), the HackerNoon article (30 July 2025) and the undated SADA case study. Status: current as of 2025-26. ^{1, 2, 3}