Deutsche Telekom Digital Audit

Audit Phase: V-DIG
Target: Deutsche Telekom AG (including T-Systems, Telekom Security, Deutsche Telekom Capital Partners / DTCP, hub:raum)
Date: 2026-05-01
Basis: Research memo findings only. No new research performed. All factual claims sourced exclusively from verified memo evidence.

Enterprise Technology Stack & Vendor Relationships

CyberArk (Israel — Privileged Access Management / Identity Security)

T-Systems / Telekom Security is listed as a named partner on CyberArk’s official partner-finder directory.¹ The listing confirms two distinct dimensions of the relationship:

• Internal deployment: CyberArk is used to protect Deutsche Telekom AG’s own privileged access layer — placing it at the level of core enterprise identity infrastructure rather than a peripheral function.
• Reseller and managed service provision: T-Systems is characterised as a full-lifecycle reseller and managed service provider, covering consulting, design, rollout, and continuous operations for CyberArk solutions delivered to more than 35 large enterprise clients. The listing describes this service as operating within what it calls Europe’s largest integrated Cyber Defense and Security Operations Center.¹

The relationship was confirmed as active as of the most recent crawl of the CyberArk partner directory (2025/2026).¹ CyberArk was founded in Israel; its co-founders have Israeli state-sector backgrounds, and the company’s growth trajectory is documented in the context of Israel’s broader cybersecurity export industry.³⁰ The CyberArk dependency is therefore confirmed at the level of critical enterprise infrastructure — both for Deutsche Telekom AG’s own identity and access management posture and for the managed security services T-Systems delivers to major enterprise clients across Europe.

In 2025, Palo Alto Networks announced an acquisition of CyberArk in a landmark deal reported at approximately $25 billion.³¹³² The transactional implications for the T-Systems / CyberArk relationship are not yet publicly clarified in available sources.

Teridion Technologies (Israel — SD-WAN / Cloud WAN Connectivity)

Deutsche Telekom made a confirmed $25 million equity investment in Teridion, an Israeli SD-WAN company headquartered in Ra’anana, Israel, in 2018.² A senior Deutsche Telekom executive joined Teridion’s board following the investment.² The official Deutsche Telekom press release confirms that Teridion’s technology was integrated into the company’s “Premium Internet” commercial service offering for enterprise customers, representing infrastructure-level dependency at the point of integration.² DTCP served as the investment vehicle. Teridion was subsequently acquired by Akamai Technologies in 2021; whether Deutsche Telekom continued to deploy Teridion/Akamai technology for the same service post-acquisition is not confirmed in public sources — flagged as status uncertain post-2021.

Check Point Software Technologies (Israel — Network Security / Firewalls)

No direct procurement or licensing relationship between Deutsche Telekom / T-Systems and Check Point has been independently confirmed in public corporate filings, press releases, or partner directories reviewed for this audit. Check Point’s documented ecosystem integrations with Wiz¹⁶³⁶ and Claroty¹⁸ are confirmed facts about Check Point’s own vendor partnerships; they do not constitute evidence of Deutsche Telekom deployment. No public evidence of a direct Deutsche Telekom–Check Point procurement relationship identified.

Wiz (Israel — CNAPP / Cloud-Native Application Protection)

No direct licensing, subscription, or integration relationship between Deutsche Telekom / T-Systems and Wiz has been identified in public sources. No public evidence identified.

SentinelOne (US/Israel — EDR/XDR)

No direct Deutsche Telekom procurement of SentinelOne is confirmed in public sources. The documented CyberArk–SentinelOne technical integration partnership¹⁷ is a product-level interoperability arrangement between those two vendors; it does not constitute evidence of Deutsche Telekom deploying SentinelOne. No public evidence of direct Deutsche Telekom–SentinelOne procurement identified.

Claroty (Israel/US — OT/ICS Security)

No direct Deutsche Telekom / T-Systems procurement of Claroty is confirmed. The Claroty–Check Point integration brief¹⁸ documents a vendor-to-vendor product integration, not a Deutsche Telekom relationship. No public evidence identified.

Verint / NICE Systems (Israel — Analytics / Workforce Management)

Both companies are Israeli-origin enterprise software vendors active in telecom-sector analytics and contact-centre platforms. No specific, sourced Deutsche Telekom licensing or integration relationship with either Verint or NICE has been independently confirmed in corporate filings, press releases, or partner directories reviewed. No public evidence identified beyond co-listing in broad industry directories.

Scale and Character of Confirmed Dependencies

The CyberArk relationship is the single confirmed, sourced dependency of material scale for the enterprise technology stack. Its confirmed scope — covering Deutsche Telekom AG’s own privileged access layer plus managed services for 35+ large enterprise clients via T-Systems’ central SOC — places it squarely within critical enterprise infrastructure.¹ The Teridion relationship (2018) was also infrastructure-level, integrated into a core commercial product, but its continuity post-2021 Akamai acquisition is unconfirmed.² T-Systems is publicly documented as a major systems integrator for enterprise digital transformation programmes across European retail, media, and manufacturing sectors.²⁴²⁵ No primary source confirms integrator mandates that coercively impose Israeli-origin technology stacks on T-Systems clients.

Surveillance, Biometrics & Retail Technology

Trigo Vision (Israel — Computer Vision / Frictionless Retail)

Trigo is an Israeli computer vision company whose retail deployment technology has been confirmed in multiple primary sources:

• REWE Group (Germany): A 600 m² hybrid-autonomous supermarket in Germany — confirmed as the country’s largest of its type — was opened by Trigo and REWE in March 2023, with deployments also confirmed in Cologne, Berlin, and Munich.⁹
• Netto Marken-Discount (Edeka Group, Germany): Trigo technology was confirmed deployed at Netto stores in Munich and recognised with a retail technology award in 2022.¹²³⁵
• International deployments: Confirmed deployments also include Tesco (UK) and Aldi Nord (Netherlands).¹⁰¹¹

Trigo raised $100 million in a 2022 funding round.¹⁰ The system operates through ceiling-mounted cameras, shelf sensors, and AI to continuously track shopper movement and automate checkout and loss-prevention functions.¹¹ Loss-prevention alerting is explicitly documented as a use case.¹¹ The company’s co-founders have reported backgrounds in Israeli intelligence-linked projects, as noted in secondary sources.³³

Deutsche Telekom / T-Systems direct relationship with Trigo: The research basis for this audit does not identify any primary source — press release, contract announcement, case study, or corporate filing — directly naming T-Systems as the IT integrator for any Trigo retail deployment at REWE or Netto. This claim, present in prior analytical materials, has been discarded as unverified for the purposes of this audit.

AnyVision / Oosto (Israel — Facial Recognition / Tactical Surveillance)

AnyVision, rebranded as Oosto, is a confirmed Israeli-origin facial recognition company with documented reporting of ties to the Israeli Ministry of Defence and former intelligence officials on its advisory board.²³ No confirmed procurement, integration, or commercial relationship between Deutsche Telekom, T-Systems, Magenta Security Services, and AnyVision / Oosto has been identified in any public source reviewed. Generic security-vendor directory co-listings do not constitute evidence of a procurement relationship. No public evidence identified.

BriefCam (Israel/Canon — Video Analytics)

No confirmed Deutsche Telekom procurement identified. No public evidence identified.

Predictive Analytics & Monitoring

No verified use of Israeli-origin predictive policing, sentiment analysis, or workforce surveillance tools by Deutsche Telekom has been identified in public sources, corporate filings²⁰²¹, NGO procurement databases³⁴, the DIMSE database²³, or press archives. No public evidence identified.

Third-Party Indirect Deployment

No confirmed third-party indirect deployment of Israeli-origin surveillance technology reaching Deutsche Telekom via managed services or bundled enterprise suites has been identified. No public evidence identified.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Data Centre Operations in Israel

No evidence of Deutsche Telekom operating, leasing, or co-locating data centre infrastructure within Israel has been identified in the 2024 Annual Report²⁰, the 2024 investment holdings statement²¹, T-Systems cloud infrastructure documentation²⁴²⁵, or press archives. No public evidence identified.

Project Nimbus and Israeli Government Cloud Contracts

Project Nimbus is a confirmed $1.2 billion cloud services contract signed in April 2021 and awarded exclusively to Google Cloud and Amazon Web Services by the Israeli government.¹³⁴⁰⁴¹ The contract established local data centres within Israel and encompasses all government ministries; the IDF has been documented as a key stakeholder and beneficiary.¹⁴¹⁵

Confirmed intermediaries and integrators deploying cloud services to the Israeli government and Israeli police under adjacent arrangements are Israeli-domiciled firms (Ness Technologies / Ness Israel; Getter Group), not Deutsche Telekom or T-Systems.²⁶ Physical data centre construction for the AWS component of Project Nimbus is attributed to Compass Datacenters (partly owned by the Israeli Azrieli Group), not Deutsche Telekom.²⁶

T-Systems is documented as a Microsoft Azure integrator in European markets including Germany and Hungary²⁴²⁵ but no evidence places T-Systems in any Project Nimbus delivery role or any Israeli government cloud contract. No public evidence identified.

T Cloud / Open Telekom Cloud Sovereign Services

T-Systems actively markets its “T Cloud” and “Open Telekom Cloud” sovereign cloud services as GDPR-compliant, EU-law-governed offerings for European enterprise and public-sector clients.²⁵ T-Systems marked 20 years of cloud services delivery in 2024.²⁴ No marketing, contracting, or service delivery of these sovereign cloud offerings to Israeli state institutions, military bodies, or Israeli government agencies has been identified. No public evidence identified.

Defence, Intelligence & Security Sector Technology Relationships

Military and Intelligence Contracts

No verified contracts, partnerships, or service agreements between Deutsche Telekom (including T-Systems, Telekom Security, or DTCP) and the Israeli Ministry of Defence, the Israel Defence Forces (IDF), Israeli intelligence agencies, or Israeli state security bodies have been identified in corporate filings²⁰²¹, press records, NGO databases³⁴, or regulatory filings. No public evidence identified.

Dual-Use Technology Provision

Deutsche Telekom’s CyberArk-based identity security infrastructure¹ and its prior Teridion SD-WAN integration² are general-purpose enterprise technologies with broad civilian and commercial deployment profiles. No public report, official confirmation, or academic study has documented either technology being deployed for military, intelligence, or law enforcement surveillance applications within Israel or the occupied Palestinian territories, whether directly by Deutsche Telekom or through a downstream customer chain. No public evidence identified.

Offensive Cyber and Weapons Technology

No verified development, licensing, sale, or maintenance of offensive cyber capabilities, zero-day exploit tools, or digital weapons systems by Deutsche Telekom, T-Systems, or Telekom Security has been identified. No public documentation of such tools being deployed by Israeli state actors via Deutsche Telekom has been found. No public evidence identified.

Unit 8200 Alumni Networks and Vendor Ecosystem Context

Multiple confirmed Deutsche Telekom / DTCP vendor and investee relationships involve companies founded by alumni of IDF intelligence units. Guardicore — a DTCP portfolio company (see §6) — was co-founded by Unit 8200 alumni.¹⁹³⁰ CyberArk’s founding context is documented in the Israeli cybersecurity export literature.³⁰ The broader Israeli cybersecurity industry’s structural reliance on Unit 8200 alumni networks is documented in secondary sources.¹⁹²⁹³⁰ These are contextual facts about the Israeli cybersecurity sector’s personnel pipeline; they do not, of themselves, constitute evidence of Deutsche Telekom having direct intelligence-sector relationships or contractual ties to Israeli state bodies.

AI, Algorithmic & Autonomous Systems

AI/ML Provision to Israeli State Bodies

No verified provision of AI, machine learning, computer vision, or autonomous decision-support systems by Deutsche Telekom or T-Systems to Israeli state, military, or security bodies has been identified. Sources checked include Deutsche Telekom corporate AI strategy documents, T-Systems case study library, and NGO databases.³⁴ No public evidence identified.

Training Data and Model Development

No publicly reported instances of Deutsche Telekom AI models being trained on, or provided access to, data originating from Israel or the occupied Palestinian territories have been identified. No public evidence identified.

Autonomous Systems and Lethality

No verified provision of autonomous targeting, automated threat-detection, or autonomous tracking systems to Israeli military or security forces by Deutsche Telekom has been identified. No public evidence identified.

Retail AI Context

Trigo’s deployment at REWE and Netto — confirmed in primary sources⁹¹²³⁵ — involves AI-driven computer vision applied to continuous shopper tracking and loss-prevention alerting in German retail stores.¹¹ This constitutes a deployment of Israeli-origin AI systems in civilian retail environments in Germany, but there is no established chain of involvement linking Deutsche Telekom or T-Systems to this deployment in a confirmed primary source, as noted in §2 above.

Technology Ecosystem & R&D Footprint

hub:raum Tel Aviv

Deutsche Telekom’s technology incubator hub:raum operated a campus in Tel Aviv, confirmed in corporate and press sources from 2015 through at least 2018.⁴²² The Tel Aviv hub offered Israeli startups equity-free access to Deutsche Telekom’s European telecom infrastructure, 5G testbeds, APIs, and prototyping labs, and maintained a monitored pipeline of over 1,000 startups at peak activity.⁴ Additional hub:raum campuses were operated in Berlin and Krakow.²² The operating status of the Tel Aviv hub:raum office after 2019 is not confirmed in public sources as of 2024–2025. The most recent hub:raum references in available corporate materials focus on the Berlin and Krakow campuses. Flagged as status uncertain; last confirmed active pre-2020.

DTCP Tel Aviv Investment Office

Deutsche Telekom Capital Partners maintains an investment office in Tel Aviv alongside its Hamburg and Silicon Valley locations.⁶⁷ This is confirmed as ongoing through DTCP’s current corporate website.⁶ The Tel Aviv office manages the firm’s Israeli and EMEA-region portfolio investments. DTCP raised $450 million across two funds in 2021, underscoring the scale of its investment activity.⁸

Confirmed Portfolio Investments — Israeli-Origin Entities

• Guardicore (Israel — data centre / cloud microsegmentation security): DTCP participated in Guardicore’s Series C funding round ($60 million raise, with total funding reaching $110 million at that stage).⁵³⁹ Guardicore was co-founded by alumni of IDF Unit 8200.¹⁹³⁰ Guardicore was subsequently acquired by Akamai Technologies in 2021 for approximately $600 million; DTCP’s involvement terminated as an exit event. DTCP does not hold an ongoing relationship with Guardicore as an independent entity.

• Teridion Technologies (Israel — SD-WAN): $25 million equity investment confirmed; Deutsche Telekom board seat confirmed; technology integrated into the Premium Internet commercial service.² Acquired by Akamai in 2021; DTCP/Deutsche Telekom post-acquisition relationship status is unconfirmed.

• Replay Technologies (Israel — volumetric video / 3D imaging): DTCP led a $13.5 million Series B funding round.⁵ R&D centre based in Tel Aviv was confirmed at time of investment. Replay Technologies was acquired by Intel in 2016 [pre-2020]; this is a historical exit.

• Fornova (Israel — travel technology / data intelligence): DTCP led a $17 million Series B funding round.⁵ Fornova is a travel-technology data intelligence company; no military or intelligence sector ties have been identified in public sources.

Reported — Not Primary-Source Confirmed

• €100 million Israeli startup fund (2015): Deutsche Telekom was reported in 2015 to have earmarked approximately €100 million from a broader fund for investment in Israeli startups.³ This reporting originates from a tech.eu article citing a conference presentation and a ZDNet article from the same period.²² The figure has not been independently confirmed in a Deutsche Telekom primary corporate filing or investor relations document. Flagged as reported but not primary-source confirmed; pre-2020.

Key Personnel — DTCP Israel Focus

• Guy Horowitz (DTCP General Partner): The DTCP team page confirms Horowitz’s role as General Partner with a focus on Israel and EMEA investments.⁷ His prior role as Managing Director of Deutsche Telekom’s Israeli office is referenced in conference materials from 2015.³⁷ His professional transition from that role to DTCP General Partner is also documented in industry trade press.³⁸ A claim that Horowitz holds IDF Unit 8200 Reserve Officer status has appeared in secondary reporting but has not been confirmed in any primary-source biography, verified LinkedIn entry, or official corporate profile in sources reviewed. Flagged as reported but not primary-source confirmed.

Patent and Intellectual Property

No significant patent portfolios, co-development arrangements, or licensing agreements between Deutsche Telekom and Israeli-domiciled entities or Israeli research institutions (e.g., Technion, Hebrew University, Weizmann Institute) have been identified in public patent databases or corporate filings.²⁰ No public evidence identified.

Civil Society Scrutiny & Regulatory History

NGO and Academic Investigations

• American Friends Service Committee — “Companies Profiting from the Gaza Genocide” (2024):³⁴ The AFSC database documents companies with financial or commercial relationships to the Israeli defence and surveillance sector. Deutsche Telekom does not appear as a named subject of a specific AFSC investigation based on available evidence. The AFSC source in the research memo is cited in relation to Elbit Systems and Palantir generally, not Deutsche Telekom specifically. No specific AFSC investigation naming Deutsche Telekom as a subject has been identified.

• +972 Magazine / Local Call: Published detailed investigative reporting on Project Nimbus (2021–2024)¹⁴ and on AI targeting systems used by the IDF. These investigations concern Google and Amazon as the primary subjects. No +972 reporting specifically naming Deutsche Telekom has been identified.

• Tech Inquiry — International Cloud Report (2022):²⁶ Documents cloud service provision to military and government bodies internationally. Confirms that intermediaries for Israeli government cloud services are local Israeli firms; does not name Deutsche Telekom as a relevant actor in the Israeli context.

• DIMSE (Database of Israeli Military and Security Exports):²³ Documents Israeli-origin technology companies with military or security export profiles. Deutsche Telekom is not identified as a subject entity. The DIMSE entry for AnyVision/Oosto does not name Deutsche Telekom.

• No UN Special Rapporteur reports, Human Rights Watch investigations, Amnesty International reports, or peer-reviewed academic studies specifically addressing Deutsche Telekom’s technology relationships with the Israeli state or operations in the occupied Palestinian territories have been identified. No public evidence identified.

Boycott and Divestment Campaigns

No organised BDS campaign specifically targeting Deutsche Telekom on grounds of technology provision to the Israeli state or military has been identified in public records, campaign websites, or press coverage through April 2026. Sources checked include BDS Movement official campaign listings, the AFSC database³⁴, and press archives. No public evidence identified.

Regulatory and Legal Actions

• T-Mobile US / CFIUS National Security Agreement violations (2018–2024): T-Mobile US — Deutsche Telekom’s US subsidiary, of which Deutsche Telekom is the majority owner — entered a National Security Agreement with CFIUS in 2018 in connection with its proposed merger with Sprint.²⁷ Federal authorities subsequently found that T-Mobile violated material provisions of this agreement, related to unauthorised data access and failure to report security incidents.²⁷ This matter is geographically and operationally distinct from Deutsche Telekom’s Israeli technology relationships; it concerns US domestic network security regulatory obligations. Included here as a confirmed, sourced regulatory action against a Deutsche Telekom group entity.

• No regulatory inquiries, export control actions, or sanctions-related investigations involving Deutsche Telekom’s technology sales or services to Israeli state entities have been identified in public records. Sources checked include German Federal Office for Economic Affairs and Export Control (BAFA) public records, EU sanctions registers, US BIS export enforcement public records, and the Adams & Reese international compliance digest.²⁷ No public evidence identified.

Evidence Gaps Relevant to Civil Society Assessment

The absence of NGO investigation specifically focused on Deutsche Telekom’s Israeli technology relationships may reflect genuine limited civil society scrutiny, or it may reflect a gap in publicly indexed English-language sources. German-language NGO and academic sources are not fully represented in the research basis for this audit.

End Notes