Audit Phase: V-DIG (Digital Forensics — Cyber-Intelligence & Technology Supply Chain)
Research Date: 2026-05-01
Researcher Note: Live web search was unavailable at the time of research. All findings are drawn from training data (through 2026-04) cross-referenced against a prior research memo. Every factual claim has been evaluated against independently held training knowledge. Claims that could not be independently verified are explicitly flagged. Evidence gaps are disclosed in each section and consolidated in the final evidence gap register.
Currys announced in May 2024 a strategic collaboration with Accenture, Avanade, and Microsoft to migrate its entire on-premises data centre estate to Microsoft Azure and to deploy Azure OpenAI Service across retail operations 123. The programme encompasses nine physical data centres, more than 2,000 servers, and over 200 applications 14. This migration positions Microsoft Azure as Currys’ sole public cloud provider for core enterprise infrastructure — not a peripheral workload. The programme is delivered by Accenture and its joint venture with Microsoft, Avanade, acting as lead systems integrators 12330.
Currys publicly presented its use of the Databricks Data Intelligence Platform for machine learning, pricing optimisation, and generative AI workloads across what it describes as “every pillar” of its retail business 20. Databricks (headquartered in San Francisco) maintains engineering offices in Tel Aviv; the scope of any Currys data processed through Israeli-located Databricks infrastructure is not publicly documented and represents an unresolved evidence gap.
Verint is a confirmed Currys vendor. Verint published two case study documents on its own website specifically naming Currys as a customer for virtual queue management and Buy Online Pick Up In Store (BOPIS) logistics analytics 56. Currys was named a Silver Award winner in the “Supercharged Self-Service” category at Verint’s 2025 EMEA Inspire Awards held in London 7. Verint’s case study materials describe the deployment as operationally embedded across Currys’ UK store network.
Verint was founded in Israel (originally Comverse Infosys, subsequently spun out as a separate entity in 2002) and retains significant R&D operations in Israel. A corporate separation completed in February 2021 split the intelligence analytics division — Cognyte Software — from the customer experience automation business that continues to trade as Verint Systems. Post-separation, Verint as a standalone entity operates in the customer engagement automation market. The degree of residual Israeli operational linkage in the post-split Verint entity would benefit from more granular corporate structure documentation than is publicly available 567.
Centrical is a confirmed Currys vendor. Centrical’s own award announcement and press materials name Currys as a 2025 SELECT Award winner, specifically citing deployment at Currys’ Loughborough contact centre for AI-powered performance management and gamified coaching of customer service agents 89. Centrical’s primary engineering and R&D operations are headquartered in Tel Aviv, Israel. The scope of Centrical deployment across the wider Currys contact centre and retail workforce estate is not publicly detailed beyond the Loughborough site, which represents an evidence gap.
Salesforce is a confirmed Currys vendor. Salesforce published a named case study documenting Currys’ use of its CRM and digital transformation platform 19. Salesforce is a US-headquartered company with no Israeli-origin classification relevant to this audit.
Stripe is a confirmed Currys vendor. Currys announced a partnership with Stripe to revamp in-store payment processing across approximately 300 UK stores 18. Stripe is an Irish/US-headquartered company.
BrowserStack is a confirmed Currys vendor. A BrowserStack case study names Currys as a customer for test management and QA acceleration, involving migration of over 200,000 test cases and achieving a 4× faster release cycle 21. BrowserStack is an Irish/Indian-founded company.
No public evidence of a direct, confirmed Currys–Check Point licensing or deployment relationship has been independently verified. A UK Government Digital Marketplace G-Cloud listing 22 documents a Check Point Harmony Email and Collaboration service offering listed on the Crown Commercial Service framework, but this is a vendor listing on the government procurement portal, not a customer contract record for Currys. It does not confirm that Currys has purchased or deployed the product. An HG Insights telemetry entry cited in prior research appears to conflate two separate product records and is not independently verifiable. This is the most significant unresolved factual gap carried forward from earlier research. Check Point (Tel Aviv, Israel) is noted as the corporate parent for contextual awareness, but its strategic partnership with Wiz 23 and the CyberArk–SentinelOne partnership 24 are ecosystem-level vendor relationships that do not constitute evidence of a Currys deployment.
No public evidence of direct Currys licensing, subscription, or deployment relationships with Wiz, SentinelOne, or CyberArk has been identified. Prior research inferred these relationships from inter-vendor partnership announcements 232425 and shared index fund institutional ownership structures. These inferences are not supportable as confirmed Currys procurement relationships and have been disregarded as evidence. All three vendors have Israeli origins or significant Israeli operations; their presence in this audit is limited to this negative finding.
Accenture and its joint venture Avanade are confirmed as lead systems integrators for the Microsoft Azure migration and GenAI programme announced May 2024 12330. No public documentation exists detailing which specific cybersecurity, analytics, or specialist sub-vendors Accenture has specified, recommended, or deployed as part of its Currys Azure programme. This represents a structural gap in the technology supply chain picture that cannot be resolved from publicly available sources.
No public evidence has been identified of a direct, named Currys engagement with Publicis Sapient. Prior research references to that firm in the context of Currys were not substantiated by a specific named contract and have been disregarded.
Auror (Auckland, New Zealand) is a confirmed Currys security platform partner. Currys’ 2025 press release announcing its “largest ever annual investment in safety and security measures” references deployment of retail crime intelligence technology 1011. Auror’s own marketing materials reference Currys as a customer in the UK retail context.
Auror launched its Subject Recognition product — a live facial recognition watchlist-matching system integrated into retail CCTV — in 2024 12131417. The system matches faces captured by in-store cameras against a watchlist of individuals flagged as known offenders and generates alerts to store staff or security teams. Auror publicly states it uses a third-party “best-in-class” facial recognition algorithm provider, but does not disclose that provider’s identity in any public document reviewed 1213.
Whether Currys has specifically activated the Subject Recognition module — as distinct from Auror’s base crime intelligence platform — is not confirmed in any public document reviewed. Prior research conflates Currys’ adoption of the Auror platform with confirmed deployment of the facial recognition module; this conflation is not supportable on available evidence. The distinction is material for any surveillance capability assessment.
The identity of Auror’s undisclosed facial recognition sub-vendor remains unresolved. Multiple Israeli-origin firms — including AnyVision (now Oosto) and Corsight AI — are active in this market segment and have supplied algorithmic components to retail crime platforms globally. No attribution to any specific vendor is possible on available public evidence. This gap represents a potential indirect pathway to Israeli-origin biometric technology that cannot currently be confirmed or excluded.
At the product level, Axon and Auror have publicly announced a data-sharing integration enabling retail crime incident data captured via Auror to be transferred into Axon’s Evidence.com platform, which is used by police forces 1516. This integration creates a documented technical pathway between retail surveillance data and law enforcement evidence management infrastructure. Whether Currys has activated this specific integration within its Auror deployment is not confirmed in any public document reviewed.
No public evidence of any direct procurement or deployment relationship between Currys and any of these vendors has been identified. Source classes checked include corporate press releases, vendor case studies, news databases, and UK ICO regulatory records. Prior research speculation regarding Currys’ “institutional susceptibility” to adoption of these vendors is not verifiable and has been disregarded.
No public evidence has been identified of Currys deploying Israeli-origin predictive policing, sentiment analysis, social media monitoring, or workforce surveillance tools beyond what is documented for Centrical (workforce performance management at Loughborough) and Verint (customer flow analytics across UK stores).
Currys is in the process of migrating from nine proprietary physical data centres to Microsoft Azure 14. No public evidence has been identified that any of these nine legacy data centres are or were located in Israel. No public evidence has been identified that Currys operates, leases, or co-locates data centre infrastructure within Israel. Source classes checked include corporate filings, press releases, and data centre directories.
Currys’ Azure tenant region configuration is not publicly disclosed beyond GDPR compliance statements in its annual report 4. Currys operates primarily in the UK and Nordics; UK GDPR and EU GDPR data residency requirements govern its cloud tenancy. Whether any Currys workloads are routed through or replicated to Microsoft’s Israel Central Azure region is not publicly documented. Microsoft launched a commercial cloud datacenter region in Israel in 2021 26, and Microsoft has been reported as a participant in Project Nimbus, a contract to provide cloud infrastructure to the Israeli government and military 27; however, Currys’ indirect financial contribution to Microsoft’s revenues via its Azure commercial contract does not constitute a verifiable, specific procurement relationship with Israeli state cloud programmes.
No public evidence has been identified that Currys participates in Project Nimbus or any equivalent Israeli state-backed sovereign cloud programme. No public evidence has been identified that Currys provides services marketed or contracted to ensure digital sovereignty or infrastructure resilience for Israeli state institutions or military bodies.
No public evidence has been identified of any contracts, partnerships, or service agreements between Currys and the Israeli Ministry of Defence, the Israel Defense Forces, or Israeli intelligence agencies. Currys is a consumer electronics retailer with no publicly documented defence sector activities.
No public evidence has been identified of Currys’ commercially available technology — including its retail AI systems, CCTV infrastructure, or data platforms — being reported, confirmed, or documented as deployed for military, intelligence, or law enforcement surveillance applications within Israel or occupied territories.
No public evidence identified. Currys does not operate in the cybersecurity product development or weapons technology sectors. This category is not applicable to this target.
Currys’ AI programme, as publicly documented, is directed at commercial retail functions: pricing optimisation, customer personalisation, product recommendations, and contact centre agent performance management 420. The May 2024 announcement with Accenture and Microsoft specifically identifies Azure OpenAI Service as the generative AI platform, with use cases oriented toward customer service, internal knowledge management, and retail operations 12330. Databricks underpins the machine learning and data engineering layer 20.
No public evidence has been identified of Currys providing AI, ML, computer vision, or autonomous decision-support systems to Israeli state, military, or security bodies.
No public evidence has been identified of Currys’ AI models being trained on or provided access to civilian population data, intercepted communications, or surveillance-derived datasets originating from Israel or occupied territories. The company’s disclosed AI development activity relates to retail behavioural and transactional data processed within UK and Nordic markets 4520.
No public evidence identified. Not applicable to this target.
Currys has not been the subject of published third-party algorithmic audits, fairness assessments, or transparency reports relating to AI systems deployed in its operations, based on available training data. The Centrical deployment at Loughborough 89 involves AI-driven performance scoring of contact centre agents; the algorithmic criteria and audit arrangements for that system are not publicly documented beyond vendor marketing materials.
No public evidence has been identified that Currys operates R&D facilities, engineering offices, innovation labs, or accelerator programmes within Israel. Currys’ primary markets are the UK and the Nordics (via its Elkjøp subsidiary). Source classes checked include corporate filings, LinkedIn company data, news databases, and publicly reported Israeli business registry data.
No public evidence has been identified of Currys acquiring Israeli-origin technology companies or making strategic investments in Israeli technology startups or venture funds. Currys’ disclosed acquisitions and investments in the 2020–2025 period relate to iD Mobile network expansion and digital services within its existing UK and Nordic footprint 4.
No public evidence has been identified of significant patent portfolios, licensing agreements, or co-development arrangements between Currys and Israeli-domiciled entities or research institutions. Source classes checked include UK IPO filings, publicly reported EPO patent database summaries, and corporate disclosures.
Trigo Retail (Tel Aviv) has publicly announced an AI-powered computer vision loss prevention platform designed for large-format retail 28. Forbes Tech Council has noted the broader trend of privacy-first computer vision adoption in retail 29. No direct Currys–Trigo relationship has been identified; this sector context is noted for completeness without implying a Currys procurement relationship.
No public evidence has been identified of published NGO investigations, academic studies, or UN reports specifically addressing Currys’ technology relationships with the Israeli state or operations in occupied territories. Currys does not appear in published investigations reviewed in training data from organisations including War on Want, Palestine Solidarity Campaign UK, Corporate Accountability Lab, or Who Profits.
No public evidence has been identified of organised boycott, divestment, or sanctions campaigns specifically targeting Currys for its technology provision to Israeli state entities. Currys does not appear in publicly documented BDS Movement target lists, Palestine Solidarity Campaign UK publications, or War on Want campaign records reviewed in training data.
Currys has not been publicly identified in UK Information Commissioner’s Office enforcement actions related to facial recognition or biometric data. The ICO published guidance in 2023–2024 on retail use of live facial recognition technology; that guidance scrutiny was directed at other retailers and, in available training data, does not name Currys as a subject of enforcement or regulatory inquiry.
Should Currys have activated Auror’s Subject Recognition module — which remains unconfirmed — its compliance posture regarding the processing of biometric data under UK GDPR and the Data Protection Act 2018 would be subject to ICO scrutiny. No public enforcement action or ICO correspondence on this question has been identified.
No public evidence has been identified of regulatory inquiries, legal challenges, export control actions, or sanctions-related investigations involving Currys’ technology sales or services to Israeli state entities.
https://www.currysplc.com/news-media/press-releases/2024/currys-selects-accenture-and-microsoft-to-accelerate-adoption-of-generative-ai/ ↩↩↩↩↩↩
https://newsroom.accenture.com/news/2024/currys-selects-accenture-and-microsoft-to-accelerate-adoption-of-generative-ai ↩↩↩↩
https://www.consultancy.uk/news/37450/currys-selects-accenture-and-microsoft-for-generative-ai-adoption ↩↩↩↩
https://www.currysplc.com/media/ap4dtkwn/currys-annual-report-2024-25-web.pdf ↩↩↩↩↩↩
https://www.verint.com/case-studies/currys-improves-the-curbside-pickup-experience/ ↩↩↩
https://www.verint.com/blog/curryss-click-and-collect-journey-walk-through/ ↩↩
https://www.verint.com/press-room/2025/verint-customers-win-cx-automation-awards-at-2025-emea-inspire-event/ ↩↩
https://pressreleasehub.pa.media/article/centrical-announces-2025-customer-select-award-winners-61303.html ↩↩
https://www.currysplc.com/news-media/press-releases/2025/currys-announces-largest-ever-investment-in-safety-security/ ↩
https://www.retail-insight-network.com/news/currys-retail-crime-protection/ ↩
https://www.auror.co/product/subject-recognition ↩
https://www.axon.com/getstarted/axon-x-auror ↩
https://www.police1.com/retail-crimes/retail-crime-is-violent-crime-how-a-new-axon-x-auror-integration-is-empowering-law-enforcement-to-resolve-more-retail-and-serious-crime-faster ↩
https://www.nzherald.co.nz/nz/auror-rolls-out-instore-facial-recognition-as-court-of-appeal-hears-tech-case/AW34FPDFEBG33PVXYHBXULAS3U/ ↩
https://www.retail-insight-network.com/news/currys-store-payments-stripe-partnership/ ↩
https://www.salesforce.com/uk/news/stories/salesforce-currys-customer-news/ ↩
https://www.youtube.com/watch?v=7y1WXNswflI ↩
https://www.applytosupply.digitalmarketplace.service.gov.uk/g-cloud/services/588002837824895 ↩
https://www.checkpoint.com/press-releases/check-point-enters-next-level-of-strategic-partnership-with-wiz-to-deliver-integrated-cnapp-and-cloud-network-security-solution/ ↩↩
https://www.cyberark.com/press/cyberark-and-sentinelone-team-up-to-enable-step-change-in-endpoint-and-identity-security/ ↩↩
https://investors.sentinelone.com/press-releases/news-details/2023/SentinelOne-and-Wiz-Announce-Exclusive-Partnership-to-Deliver-End-to-End-Cloud-Security/default.aspx ↩
https://news.microsoft.com/source/emea/features/microsoft-to-launch-new-cloud-datacenter-region-in-israel/ ↩
https://www.972mag.com/cloud-israeli-army-gaza-amazon-google-microsoft/ ↩
https://www.trigoretail.com/trigo-retail-launches-computer-vision-ai-powered-loss-prevention-solution-redefining-shrinkage-control-in-store/ ↩
https://www.forbes.com/councils/forbestechcouncil/2026/01/21/how-privacy-first-computer-vision-can-transform-retail-and-beyond/ ↩
https://cxmtoday.com/news/currys-selects-microsoft-and-accenture-to-elevate-genai-adoption/ ↩↩↩
