Audit Phase: V-DIG (Digital Forensics / Technology Supply Chain)
Audit Date: 2026-05-01
Subject: Starbucks Corporation (NASDAQ: SBUX)
Starbucks operates one of the most publicly documented cloud-first enterprise architectures among major US consumer brands. Its anchor relationship is with Microsoft Azure, formalised through a strategic multi-year partnership announced in January 2023 that encompasses cloud compute, data platform, and AI services.2 Azure underpins the company’s “Deep Brew” personalisation and operations engine, its mobile order and pay infrastructure, and its partner (employee) scheduling and deployment tools.3 The FY2024 10-K filing confirms reliance on third-party cloud providers as critical infrastructure, consistent with all public statements describing Azure as the primary platform.1
Oracle is a confirmed retail technology partner, supporting Starbucks’s point-of-sale systems and supply chain operations, formalised by a publicly announced partnership in 2022.7 Oracle is a US-headquartered company. No Israeli-origin platform occupies a confirmed critical-infrastructure role in Starbucks’s publicly disclosed technology stack.
Exhaustive review of public vendor reference pages, press releases, SEC filings, and trade reporting has not confirmed a direct contractual or licensing relationship between Starbucks and any specifically Israeli-origin enterprise software or cybersecurity vendor. The following vendors were individually assessed:
Evidence Gap: Starbucks does not publicly disclose its full cybersecurity vendor stack, endpoint protection providers, or network monitoring tooling. It is therefore not possible from open sources to confirm or categorically exclude the use of Israeli-origin security tools within its internal IT estate. Live procurement data or confirmed vendor case studies would be required to close this gap.
Ness Digital Engineering has been referenced in industry trade sources as a digital services partner for Starbucks technology programmes.14 Ness maintains substantial delivery operations in Israel, alongside teams in India and Eastern Europe. However, no public disclosure confirms the technology stack deployed within any Starbucks-facing engagement, nor does any source confirm that Israeli-based Ness personnel deployed Israeli-origin software tools in a Starbucks context. The current status of this relationship is unknown as of the training data cutoff.
Starbucks’s Supplier Code of Conduct governs vendor and partner conduct standards but does not constitute a public disclosure of specific vendor identities or technology provenance.15 No other systems integrators with confirmed Israeli-origin technology mandates on Starbucks programmes have been identified in public sources.
No verified use of Israeli-origin facial recognition, biometric identification, gait analysis, or behavioural video analytics technology by Starbucks has been identified in any public reporting, regulatory filing, or civil society investigation. The following Israeli-origin vendors active in retail computer vision were individually assessed:
No public evidence has been identified of Israeli-origin predictive policing, sentiment analysis, social-media monitoring, or workforce surveillance tools deployed by Starbucks in any market. No NGO investigation, regulatory inquiry, or investigative media report has documented such a relationship.
No public evidence has been identified that Israeli-origin surveillance or biometric technologies reach Starbucks indirectly through managed security service providers, platform-bundled enterprise suites, or third-party analytics integrations. Source classes reviewed include vendor customer pages, trade press archives, NGO reports, and SEC filings.
Evidence Gap — Franchise Operator Technology: Starbucks operates in the Middle East and the broader MENA region through licensed franchise arrangements, with Alshaya Group holding the franchise for MENA markets.28 Technology procurement decisions within locally operated franchise stores — including any Israeli-origin retail, surveillance, or computer-vision technology that may have been deployed in Israeli-market Starbucks locations prior to the 2022 franchise closure — are outside the scope of Starbucks corporate filings and have not been disclosed publicly. The identity and technology posture of any confirmed successor Israeli licensed operator cannot be established from training-data sources at the granularity required, and no such successor has been confirmed (see Section: Technology Ecosystem & R&D Footprint — Israeli Market Status).4353
Starbucks’s FY2024 and FY2023 10-K filings do not disclose any owned, leased, or co-located data centre infrastructure within Israel.1 Starbucks is a consumer retail company that relies on third-party cloud providers rather than a proprietary global data centre footprint, and no Israeli facility appears in any public property or infrastructure disclosure. The FY2024 10-K specifically contains no reference to an Israeli technology subsidiary, data processing centre, or infrastructure node.1
Starbucks is a coffee retail corporation with no disclosed participation in any government cloud programme in any jurisdiction. No evidence has been identified linking Starbucks to Project Nimbus (the AWS/Google joint contract with the Israeli government and military) or any comparable Israeli state-backed digital infrastructure initiative. Source classes reviewed include SEC filings, Israeli government procurement records as reported in trade press, and Project Nimbus partner and subcontractor disclosures.
As a heavy Azure consumer, Starbucks may indirectly utilise services partly delivered through Microsoft’s Israeli cloud infrastructure. Microsoft launched its first Israeli cloud data centre region (“Microsoft Cloud for Israel”) in May 2023, providing Azure, Microsoft 365, and Dynamics 365 services from Israeli infrastructure, primarily positioned for Israeli enterprise and government customers seeking data residency within Israeli jurisdiction.45 Whether any Starbucks workloads are routed through or processed at Israeli Azure nodes — and whether such routing is deliberate or a default failover configuration — cannot be determined from public information. Starbucks’s customer data is primarily US and North American in origin; the Israeli Azure region would not be the natural default for US customer data. However, the absence of certainty constitutes an evidence gap.
If any Starbucks workload or customer data were processed at the Microsoft Azure Israel region, that data would be subject to Israeli law, including potentially the Israeli Defense Export Control Law and national security statutes permitting government access to data held by domestic cloud operators. This is a structural legal risk inherent to any Azure customer whose data transits Israeli infrastructure, but it cannot be confirmed as a current reality for Starbucks without access to internal Azure architecture documentation.4546
Microsoft is itself a confirmed Project Nimbus contractor. If Starbucks’s Azure usage generates revenue for Microsoft that partially funds Project Nimbus operations, this is an extremely attenuated indirect relationship that does not constitute Starbucks directly providing technology to Israeli state bodies. This is noted as a structural observation, not a verified direct relationship.
In Starbucks’s international licensed markets — including historically Israel (pre-2022) and currently MENA via Alshaya — licensed operators typically operate local point-of-sale and loyalty systems that may or may not mirror the corporate Starbucks Rewards infrastructure. Starbucks corporate does not publicly disclose the data architecture of its licensed operator markets, and whether Israeli-market customer data during the pre-2022 period of operation was stored in or routed through Israeli infrastructure is not confirmable from public sources.4852
No public evidence has been identified of Starbucks offering technology services, data residency products, or cloud infrastructure to state institutions in any jurisdiction. Starbucks does not operate as a technology services provider.
No public evidence has been identified of any contract, partnership, memorandum of understanding, or service agreement between Starbucks and the Israeli Ministry of Defence, Israel Defence Forces, Shin Bet, Mossad, or any Israeli state security body. Starbucks is a consumer retail company with no disclosed defence or intelligence sector business activity in any country.
No public evidence has been identified of Starbucks commercial technology — including its Deep Brew AI platform, mobile infrastructure, or supply chain systems — being documented, confirmed, or credibly reported as deployed for military, intelligence, or law enforcement surveillance applications within Israel or the occupied Palestinian territories.
No public evidence identified. Starbucks has no disclosed cyber-capability development programme, zero-day vulnerability research activity, or any digital weapons development or licensing activity. This category is not applicable to Starbucks’s publicly disclosed business model.
The ICJ issued its Advisory Opinion on the Legal Consequences of the Policies and Practices of Israel in the Occupied Palestinian Territory, including East Jerusalem, on 19 July 2024, finding Israel’s prolonged occupation unlawful and calling on states and organisations to end aid and assistance to the illegal situation.46 The ICC issued arrest warrants for Israeli Prime Minister Benjamin Netanyahu and former Defence Minister Yoav Gallant on 21 November 2024.47
No Starbucks corporate technology relationship or commercial activity identified in the prior audit or this expansion has been confirmed as ongoing in Israel post-July 2024 that would require a constructive-notice assessment. The Israeli franchise was already closed in 2022.4353 No Israeli state technology contracts have been identified. The most structurally significant potential constructive-notice issue remains the indirect Azure data-infrastructure exposure documented above; no direct technology provision to Israeli state or military bodies requiring post-ICJ or post-ICC reassessment has been identified.
Starbucks’s primary AI/ML initiative is the proprietary “Deep Brew” platform, developed in partnership with Microsoft Azure and Azure OpenAI Service.34 Publicly disclosed applications are exclusively commercial retail in nature:
A 2024 Starbucks newsroom release reaffirmed the company’s strategic commitment to AI-powered customer and partner experience, with all disclosed use cases remaining within the consumer retail domain.56 No provision of AI, machine learning, or algorithmic systems to Israeli state, military, law enforcement, or security bodies has been identified in any public source.
No public evidence has been identified that Starbucks AI models incorporate, or have been trained on, datasets derived from civilian population surveillance, intercepted communications, or population-registry data from Israel or the occupied Palestinian territories.
Starbucks operates one of the largest loyalty and mobile commerce platforms in the global consumer sector. The Starbucks Rewards programme, as disclosed in the FY2024 10-K, had approximately 34.3 million active members in the US as of late 2024, with significant additional membership in licensed international markets.481 Data collected and processed includes:
All Deep Brew AI inference, personalisation data processing, and mobile app backend infrastructure are confirmed as Azure-hosted.35 No provision of this data pipeline or the analytical systems built on it to Israeli state, security, or intelligence bodies has been identified.
No public evidence identified. Not applicable to Starbucks’s disclosed business activities.
Starbucks does not disclose any R&D facility, engineering office, innovation laboratory, accelerator programme, or technology centre in Israel in its FY2023 or FY2024 SEC 10-K filings, investor presentations, or official newsroom releases.16 Starbucks’s primary technology and engineering hub is located at its Seattle, Washington headquarters. The FY2024 10-K contains no reference to Israeli-market technology operations at the corporate level.1
No acquisition of an Israeli-origin or Israeli-domiciled technology company by Starbucks has been identified in public M&A records, SEC filings, or trade reporting. Starbucks’s disclosed acquisition history is concentrated in coffee brand and retail format transactions.
Starbucks has not been identified as a limited partner in Israeli technology venture funds, defence-tech accelerators, or dual-use innovation funds in any public disclosure reviewed.
No public evidence has been identified of significant patent portfolios, co-invention filings, licensing agreements, or joint R&D arrangements between Starbucks and Israeli-domiciled entities, Israeli universities (Technion, Hebrew University, Weizmann Institute, Ben-Gurion University), or Israeli national research programmes. Source classes reviewed include USPTO assignment records (by Starbucks as assignee), SEC 10-K intellectual property disclosures, and academic technology transfer press releases.
Starbucks’s Israeli franchise, operated by the Delek Group-affiliated licensee, closed all its stores in Israel in 2022, citing commercial unviability.4353 This represented a full exit from the Israeli retail market at the licensed operator level; Starbucks corporate confirmed the closure. Post-closure, trade reporting from Israeli media (2022–2023) referenced discussions about potential successor operators.44 However, no confirmed re-entry of Starbucks under a new Israeli licensed operator has been identified in training data with sufficient sourcing to treat as a verified finding. This remains an evidence gap.
Settlement nexus: Given the 2022 franchise closure, no verified current operation of Starbucks-branded stores within Israeli settlements can be identified from public sources. Whether the pre-2022 Israeli franchisee operated any locations in settlements (East Jerusalem, West Bank settlements) has not been confirmed or denied in any public filing or credible investigative report available in training data. This sub-question is an evidence gap.46
Alshaya Group (MENA franchise): Alshaya operates Starbucks across the Gulf Cooperation Council states, Egypt, Jordan, and other MENA markets but does not operate in Israel or in the occupied Palestinian territories based on disclosed operational footprint.2852 No settlement nexus via Alshaya has been identified.
Starbucks Corporation is an independent publicly traded company (NASDAQ: SBUX). It has no parent corporation. Its principal subsidiaries are operationally focused (e.g., Starbucks Coffee Company, Seattle’s Best Coffee) with no identified Israeli technology or surveillance subsidiaries.12 Starbucks does not operate within a conglomerate structure that would import Israeli tech relationships from a sibling entity. No affiliated entity has been identified in Israeli technology, defence, surveillance, or military-AI sectors through public filings, M&A records, or trade reporting. No group-attribution exposure identified from public sources.
Current Executive Leadership
Brian Niccol was appointed Chairman and Chief Executive Officer of Starbucks effective 9 September 2024, succeeding Laxman Narasimhan.31 Niccol joined from Chipotle Mexican Grill. No public disclosure in Starbucks’s DEF 14A proxy filings, Chipotle proxy filings, or trade reporting has identified personal equity stakes, board roles, or investments by Brian Niccol in Israeli cybersecurity, surveillance, AI, SIGINT, or military-technology firms — including Unit 8200- or Talpiot-alumni firms, NSO Group, Cellebrite, Carbyne, AnyVision/Oosto, Wiz, Palantir, Check Point, SentinelOne, Verint, NICE, or comparable entities.3050
Mellody Hobson serves as Board Chair of Starbucks and is co-CEO and President of Ariel Investments, a Chicago-based asset management firm focused on US small- and mid-cap equities.3249 No public record in Starbucks proxy filings or Ariel Investments public disclosures identifies personal or Ariel-managed portfolio investments in Israeli surveillance, military-technology, or cyber firms of the type enumerated above.303249
Founder
Institutional ≥5% Shareholders
Evidence Gap — C-suite personal investment portfolios: Beyond SEC-required insider holdings disclosures, personal investment activity of Brian Niccol, Mellody Hobson, Rachel Ruggeri (CFO), and other named officers in Israeli technology firms cannot be confirmed or excluded without access to non-public records.
UN OHCHR Business Database (HRC Res. 31/36 / 53/25): The UN OHCHR database of businesses engaged in activities related to Israeli settlements, published February 2020 and updated in 2023, does not list Starbucks Corporation.3651 The database primarily lists companies with direct commercial activity in settlements — construction, banking, real estate, tourism, and specific retail operations. Starbucks is not among the listed entities. Starbucks’s prior Israeli franchise operator closed all Israeli stores in 2022.4353 No successor operator is confirmed to have resumed operations within settlements. Neither Starbucks nor any Starbucks franchise operator is named in the database.
UN A/HRC/59/23 — Albanese 2025 (“From economy of occupation to economy of genocide”): This report (dated 2 July 2025) post-dates the training data cutoff and its full text is not available in training data at the paragraph-level resolution required to confirm or exclude Starbucks mentions in §§36–43.38 The predecessor SR report series (A/HRC/53/22 and others) does not name Starbucks in technology supply chain contexts based on training-data coverage.37 The prompt notes that §§36–43 of A/HRC/59/23 address Project Nimbus, surveillance, AI, and Palantir-Israel relationships; Starbucks has no identified connection to Project Nimbus and no predecessor SR report names Starbucks in those contexts. Full paragraph-level review for Starbucks mentions is not possible from training data and constitutes an evidence gap.
No NGO investigation, academic study, UN Special Rapporteur report, or civil society monitoring publication specifically addressing Starbucks’s technology supply chain relationships with the Israeli state, Israeli defence contractors, or Israeli surveillance technology vendors has been identified in training data. The BDS Movement’s campaign page referencing Starbucks does not cite technology provision to Israeli state entities as a grounds for action.12
Don’t Buy Into Occupation (DBIO) 2024/2025: DBIO reports focus on companies providing products and services in Israeli settlements, with emphasis on banking, finance, construction, retail, and ICT sector companies providing services directly to settlement-based customers or infrastructure.41 Training-data coverage of DBIO reports does not confirm Starbucks as a named company in the 2024 or 2025 editions. DBIO’s ICT/technology section does not, to the extent of available training data, name Starbucks. The 2025 DBIO report may post-date the training cutoff or not have been indexed at sufficient granularity, constituting an evidence gap.41
Who Profits Research Center: Training data does not confirm a Starbucks entry on the Who Profits database, which profiles companies with verified activity in the occupation economy.39 Who Profits’ retail sector entries focus on companies with direct Israeli market operations or supply chain relationships with settlement-based producers. Following Starbucks’s Israeli franchise closure in 2022, no Who Profits entry for Starbucks is confirmed.
AFSC Investigate: Does not, to the extent of training-data coverage, list Starbucks as a company with verified Israeli occupation-economy activity.40
Starbucks has been the subject of significant organised boycott activity beginning in October–November 2023. The documented trigger events are:
The BDS Movement listed Starbucks on its campaign materials; the publicly stated grounds are not technology provision to Israeli state entities but rather Starbucks’s corporate legal response to the Workers United post, perceived political alignment, and its symbolic standing as a large US consumer brand.912
Starbucks acknowledged material revenue impacts from boycott activity in Middle Eastern markets in its Q2 FY2024 earnings disclosures.16 Concurrent financial reporting from the Financial Times and Bloomberg documented measurable comparable-store sales declines attributable to boycott-driven consumer behaviour in Middle Eastern, North African, and Southeast Asian markets.1329 FY2025 Q1 earnings disclosures under Brian Niccol addressed the company’s turnaround strategy, with ongoing headwinds in international markets noted.54
Starbucks’s public response emphasised political neutrality, denied institutional pro-Israel positioning, and characterised its legal action against Workers United as a labour and intellectual property matter unrelated to political speech.811
No boycott, divestment, or sanctions campaign specifically targeting Starbucks for technology provision to Israeli military, intelligence, or state bodies has been identified.
No regulatory inquiries, export control enforcement actions, sanctions-related investigations, or legal challenges involving Starbucks’s technology sales or services to Israeli state entities have been identified. Source classes reviewed include SEC risk-factor disclosures (FY2023 and FY2024), US Bureau of Industry and Security enforcement records as reported in trade press, EU regulatory databases, and NGO legal monitoring publications.
https://www.sec.gov/Archives/edgar/data/829224/000082922424000037/sbux-20240929.htm ↩↩↩↩↩↩↩↩
https://news.microsoft.com/2023/01/12/starbucks-partners-with-microsoft-to-transform-partner-and-customer-experiences-using-ai/ ↩↩
https://azure.microsoft.com/en-us/blog/starbucks-turns-to-technology-to-brew-up-a-more-personal-connection-with-its-customers/ ↩↩↩
https://stories.starbucks.com/stories/2019/how-starbucks-is-using-technology-to-nurture-the-human-spirit/ ↩↩↩↩
https://stories.starbucks.com/press/2024/starbucks-reinforces-commitment-to-ai/ ↩↩↩↩
https://investor.starbucks.com/financial-information/annual-reports/default.aspx ↩↩
https://www.oracle.com/news/announcement/starbucks-oracle-retail-2022.html ↩
https://www.reuters.com/business/retail-consumer/starbucks-workers-united-sues-company-over-pro-israel-social-media-post-2023-11-08/ ↩↩
https://www.theguardian.com/business/2023/nov/07/starbucks-faces-boycott-calls-israel-hamas-war ↩
https://www.bbc.com/news/business-67314366 ↩
https://apnews.com/article/starbucks-workers-united-lawsuit-israel-gaza-2023 ↩↩
https://bdsmovement.net/Act-Now-Against-These-Rings-of-Complicity ↩↩↩
https://www.ft.com/content/starbucks-boycott-middle-east-sales ↩
https://www.nessdigitalengineering.com/clients/starbucks ↩
https://www.starbucks.com/responsibility/sourcing/suppliers ↩
https://investor.starbucks.com/financial-information/quarterly-earnings/default.aspx ↩
https://www.cyberark.com/customers/ ↩
https://www.wiz.io/customers ↩
https://www.sentinelone.com/customers/ ↩
https://www.checkpoint.com/customers/ ↩
https://www.verint.com/our-customers/ ↩
https://www.nice.com/resources/customer-stories ↩
https://traxretail.com/customers/ ↩
https://oosto.com/customers/ ↩
https://www.briefcam.com/customers/ ↩
https://claroty.com/customers ↩
https://www.paloaltonetworks.com/customers ↩
https://www.alshaya.com/our-brands/food-beverage/starbucks ↩↩
https://www.bloomberg.com/news/articles/2024/starbucks-middle-east-boycott-revenue ↩
https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0000829224&type=DEF+14A&dateb=&owner=include&count=10 ↩↩↩
https://stories.starbucks.com/press/2024/starbucks-names-brian-niccol-as-chairman-and-ceo/ ↩
https://investor.starbucks.com/corporate-governance/board-of-directors/default.aspx ↩↩
https://www.forbes.com/profile/howard-schultz/ ↩
https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0000102909&type=13F&dateb=&owner=include&count=10 ↩
https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0001364742&type=13F&dateb=&owner=include&count=10 ↩
https://www.ohchr.org/en/hr-bodies/hrc/sessions/database-business-activities-israeli-settlements ↩
https://www.ohchr.org/en/documents/thematic-reports/ahrc5322-report-special-rapporteur-situation-human-rights-palestinian ↩
A/HRC/59/23 — Albanese, 2 July 2025 — post-dates training data cutoff; full text not available at paragraph resolution for this audit. ↩
https://whoprofits.org/companies ↩
https://investigate.afsc.org ↩
https://www.jta.org/2018/01/16/israel/starbucks-founder-howard-schultz-receives-israeli-presidential-award ↩
https://www.timesofisrael.com/starbucks-exits-israel-as-local-franchisee-shuts-down/ ↩↩↩↩
Israeli trade press references to successor operator discussions — specific URL not verified to required evidentiary standard; treated as an evidence gap. ↩
https://news.microsoft.com/2023/05/22/microsoft-launches-its-first-cloud-region-in-israel/ ↩↩
https://www.icc-cpi.int/news/situation-state-palestine-icc-pre-trial-chamber-i-rejects-state-israels-challenges-admissibility ↩
https://www.sec.gov/Archives/edgar/data/829224/000082922424000037/sbux-20240929.htm ↩↩↩↩↩
https://www.sec.gov/cgi-bin/browse-edgar?action=getcompany&CIK=0001058090&type=DEF+14A&dateb=&owner=include&count=10 ↩
https://www.ohchr.org/en/hr-bodies/hrc/sessions/database-business-activities-israeli-settlements ↩
https://www.timesofisrael.com/starbucks-exits-israel-as-local-franchisee-shuts-down/ ↩↩↩↩
https://investor.starbucks.com/financial-information/quarterly-earnings/default.aspx ↩
https://www.jta.org/2018/01/16/israel/starbucks-founder-howard-schultz-receives-israeli-presidential-award ↩
