Volkswagen DIGITAL

Enterprise Technology Stack & Vendor Relationships

Volkswagen AG manages the Volkswagen Group through its Board of Management, while constituent companies are managed within the Group framework by their respective managements.¹

As of 31 December 2025, Porsche Automobil Holding SE held 53.3% of Volkswagen AG voting rights, the State of Lower Saxony held 20.0%, Qatar Holding LLC held 17.0%, and 9.7% was free float.²

Volkswagen’s related-party disclosure identifies Porsche SE as the majority voting-rights holder and describes Lower Saxony’s rights to appoint two Supervisory Board members while it holds at least 15% of ordinary shares.³

Volkswagen’s June 2026 AGM materials identify Oliver Blume as Chairman of the Board of Management and Hans Dieter Pötsch as Chairman of the Supervisory Board.⁴

Volkswagen’s importer portal lists Israel through its “GLOBAL” Group Retail Portal instance, establishing an official importer-facing market channel without identifying the contracting importer or local ownership structure.⁵

Volkswagen’s 2018 announcement identified Champion Motors as direct importer and distributor in Israel for Volkswagen, Audi, Škoda, SEAT, and Volkswagen Commercial Vehicles since 1965, and stated that Champion Motors was wholly owned by Allied Group rather than Volkswagen AG.⁶

The European Commission’s 2019 merger decision likewise described Champion Motors as an Allied Holdings subsidiary and direct Israeli importer and distributor for Volkswagen, Škoda, Audi, and SEAT.⁷

The cited 2018 and 2019 materials do not establish Champion Motors’ current ownership, operating status, or contractual arrangements with Volkswagen.^{6, 7}

Volkswagen stated in 2018 that Champion Motors participated in joint-venture business opportunities with the Group, including Škoda Auto DigiLab Israel, XPLORA by SEAT, and New Mobility in Israel.⁶

Škoda Auto’s 2022 annual report listed “ŠKODA AUTO DIGILAB ISRAEL Ltd., Bnei Brak” among its companies, evidencing an Israeli-domiciled Škoda Auto group entity as of 31 December 2022 without establishing the precise ownership percentage from the cited text alone.⁸

No public evidence identified of a Volkswagen AG-owned Israeli sales subsidiary in the reviewed materials.^{5, 6, 7}

Volkswagen’s 2023 annual-report IT disclosure describes Group-wide information-security governance and certifications, while its 2025 disclosure states that automotive cybersecurity addresses cyberattacks on vehicles and the digital vehicle ecosystem and that the Group’s UNECE R155 cybersecurity-management system was recertified by Germany’s Federal Motor Transport Authority in 2025.^{9, 10}

Volkswagen’s 2016 release stated that it and Israeli cybersecurity experts Yuval Diskin, Tsafrir Kats, and Tamir Bechor would jointly create CYMOTIVE Technologies for automotive cybersecurity, with bases in Herzliya and Wolfsburg.¹¹

Volkswagen AG’s 2023 separate financial statements list CyMotive Technologies GmbH, Wolfsburg, and CyMotive Technologies Ltd., Herzliya, as associates accounted for at cost, each with a 40.00% capital share held by Volkswagen AG; this filing establishes the recorded holding at its reporting date, not its continuation thereafter.¹²

A 2025 Škoda Auto annual-report search record lists CyMotive Technologies Ltd., supporting continuing Group-entity recognition during that reporting period without establishing the ownership chain, percentage, or accounting category.¹³

Volkswagen identifies CARIAD as its Group software company, established in 2020, with approximately 5,500 employees and a remit including driver assistance, automated driving, infotainment, cloud infrastructure, and connectivity.¹⁴

Volkswagen’s 2025 annual report reports CARIAD revenue of €1.8 billion for 2025, principally from software supplied to Volkswagen Group brands, confirming continuing operation as an internal Group software supplier without disclosing CyMotive ownership or contract terms.¹⁵

KPIT’s 6 May 2026 announcement describes CyMotive as jointly founded by Israeli cybersecurity leaders and CARIAD, but does not establish that CARIAD rather than Volkswagen AG held the recorded 40% interests or specify CARIAD’s equity percentage at that date.^{16, 17}

KPIT announced an agreement to acquire a majority stake in CyMotive subject to milestones, customary closing conditions, and regulatory approvals, including an initial US$10 million preference-capital investment convertible upon milestones into 26% equity and a planned acquisition of the remaining stake by mid-2029 in revenue- and EBIT-dependent tranches, with expected aggregate consideration of US$60–120 million.^{16, 17}

No public evidence identified in the reviewed current corporate sources that the KPIT transaction had closed by 1 September 2026, that the 26% conversion had occurred, or that Volkswagen/CARIAD had divested its formerly recorded indirect or direct interest; the announced transaction was conditional and prospective.^{16, 17}

CyMotive’s website presents automotive-cybersecurity services including governance, risk assessment, security architecture, DevSecOps, validation and penetration testing, and a Cyber Data Hub that analyses fleet data for cyber and technical anomalies.¹⁸

CyMotive’s brochure states that it has been Volkswagen Group’s “trusted security partner” since 2016 and refers to UNECE and ISO automotive-security standards; this company statement does not disclose a specific Volkswagen contract, covered models, data access, or deployment volume.¹⁹

CyMotive’s current customer display includes Volkswagen, CARIAD, Audi, Porsche, Škoda, SEAT/CUPRA, and Volkswagen Commercial Vehicles, which is company-published evidence of claimed market relationships rather than evidence of specific contracts, purchase orders, scope, duration, value, or current procurement.¹⁸

CyMotive’s current site and KPIT’s 2026 announcement establish that it continued to market and operate as an automotive-cybersecurity company in 2026, but they do not establish that Volkswagen or CARIAD remained a current customer, shareholder, or purchaser after the announced conditional transaction.^{16, 18}

An undated CyMotive presentation hosted by the Israel Economic Mission to Japan describes Volkswagen Group as CyMotive’s “lead customer” and claims approximately US$200 million cumulative revenue over seven years and intrusion-detection deployment in more than one million vehicles; these are company investment-presentation claims not corroborated by a retrieved Volkswagen filing or disclosure.²⁰

No public evidence identified in reviewed targeted vendor materials and Volkswagen’s 2023 and 2025 IT disclosures of Volkswagen licensing, subscription, or integration relationships with Check Point, Wiz, SentinelOne, CyberArk, NICE, Verint, Claroty, or Palo Alto Networks.^{9, 10}

No public evidence identified in reviewed sources that a systems integrator or IT outsourcer deployed Israeli-origin enterprise software into Volkswagen’s core corporate infrastructure.^{9, 10}

Surveillance, Biometrics & Retail Technology

SEAT described its Tel Aviv Xplora project as adapting Eyesight Technologies’ in-vehicle system to analyse eye openness, viewing angle, head position, mobile-phone use, and seatbelt status.²¹

SEAT stated that the software could identify a driver and adapt vehicle preferences, while describing the work as development for automotive use rather than confirmed serial deployment.²¹

Konnect describes testing touchless driver-vital-sign sensing and technology intended to detect driving under the influence through micro-muscle-movement analysis, without identifying facial-recognition deployment, a security customer, or commercial rollout.²²

The cited SEAT and Konnect materials do not establish retail surveillance, workforce monitoring, deployment in Israel or occupied territories, or a state-security customer.^{21, 22}

No public evidence identified of Volkswagen predictive-policing, social-media-monitoring, facial-recognition, retail surveillance, workforce surveillance, or third-party bundled-surveillance deployment in the reviewed sources.^{21, 22}

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Israel’s Ministry of Finance identified Google as the provider that activated the first local cloud zone under the first stage of Project Nimbus.²³

The Project Nimbus announcement does not name Volkswagen, and no public evidence identified of Volkswagen participation in Project Nimbus in the reviewed material.²³

No public evidence identified of Volkswagen operating, leasing, or co-locating an Israeli data centre, or providing sovereign-cloud or data-residency services to Israeli state or military bodies.^{23, 22}

Volkswagen’s 2018 New Mobility in Israel announcement said the Israeli government committed to provide required infrastructure and traffic data, but did not identify controller roles, cloud providers, storage locations, or subsequent operating arrangements.⁶

Konnect’s privacy material identifies Konnect as controller for its website data and refers to website-related data including IP address, contact details, and computer location under Israeli privacy regulation; it does not establish storage, routing, or legal accessibility for Volkswagen vehicle telemetry, mobility-service, map, or customer-account data.²²

No public evidence identified establishing the storage location, cross-border-transfer arrangements, controller or processor roles, or legal-access pathway for Volkswagen vehicle telemetry, connected-service data, autonomous-driving maps, New Mobility rider data, or CyMotive-related cybersecurity data in Israel.^{6, 18, 22}

The existence of CyMotive’s cloud-oriented and fleet-data products does not establish that they process Volkswagen data, where any such data would be hosted, or which legal regime would apply.^{18, 24}

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of Volkswagen, CARIAD, or CyMotive contracts, partnerships, or service agreements with the Israeli Ministry of Defence, the IDF, intelligence agencies, police, or other Israeli state-security bodies in the reviewed corporate, programme, and company materials.^{11, 16, 18, 19}

No public evidence identified of Volkswagen or CyMotive developing, selling, licensing, or maintaining offensive-cyber capabilities, exploit tools, digital weapons, military-targeting software, or surveillance technology for Israeli state actors.^{11, 18, 24}

CyMotive’s verified product descriptions concern vehicle and backend cybersecurity, vulnerability management, intrusion detection, fleet-data anomaly investigation, and related security services rather than disclosed defence procurement.^{18, 19, 24}

The founders’ reported security-sector backgrounds do not establish a governmental customer, deployment, or military or intelligence application for CyMotive products.²⁵

Volkswagen’s documented Israeli technology activity in the cited sources concerns civilian automotive, mobility, innovation, importer, and cybersecurity relationships rather than disclosed defence procurement.^{5, 6, 7, 9, 11}

AI, Algorithmic & Autonomous Systems

Volkswagen, Mobileye, and Champion Motors announced a proposed joint venture, “New Mobility in Israel,” in October 2018.⁶

The announcement stated that Volkswagen would provide electric vehicles and mobility-service knowledge, Mobileye would provide a Level-4 autonomous-vehicle kit including hardware, driving-policy and safety software and map data, and Champion Motors would operate fleet logistics and the control centre.⁶

Volkswagen stated that the Israeli government accepted the proposal and committed regulatory support, infrastructure, and traffic data, while the announcement described commercialisation by 2022 as a plan rather than confirmation of launch.⁶

In February 2024, Mobileye’s chief executive told the Associated Press that Mobileye was working with Volkswagen on the ID. Buzz and expected deployment of thousands of vehicles in 2026.²⁶

Konnect states that its MOIA resident leads the ID. Buzz robotaxi collaboration with Mobileye and oversees testing and validation in Israel, without identifying deployment volume, territory, commercial terms, or a military or security use.²²

CARIAD selected InnovizTwo LiDAR sensors and perception software as a direct supplier for automated Volkswagen-brand vehicles in 2022, while Konnect describes Innoviz as a serial-production supplier and states that nine InnovizTwo LiDARs are integrated into each ID. Buzz AD vehicle; the cited materials do not disclose volume, deployment geography, contractual status, or commercial terms.^{27, 22}

The cited 2018, 2024, and current materials do not identify military, intelligence, law-enforcement, target-generation, fire-control, automated-tracking, or lethality uses for the Volkswagen–Mobileye or Innoviz work.^{6, 26, 22, 27}

No public evidence identified of Volkswagen providing AI or machine-learning systems to Israeli state bodies or using surveillance-derived datasets from Israel or the occupied territories for the civilian autonomous-mobility initiatives described in the reviewed materials.^{6, 26, 22}

Technology Ecosystem & R&D Footprint

Volkswagen announced in April 2018 that Group CEO Herbert Diess had visited Israel for political talks and meetings with innovative start-ups.²⁸

Volkswagen’s 2018 autonomous-mobility announcement stated that the company, Mobileye, and Champion Motors would invest in Israel through the proposed New Mobility programme.⁶

Volkswagen stated in 2018 that it held a 20% stake in Israeli ride-hailing company Gett, while the cited source does not establish whether that stake remained held after 2018.²⁸

Volkswagen opened the Konnect innovation hub in Tel Aviv in 2018, and Konnect currently describes itself as Volkswagen Group’s Israel innovation hub for discovery, evaluation, testing, and integration of Israeli technologies into Group vehicles and factories, including local proofs of concept, technology evaluation, and supplier onboarding.^{28, 22}

Konnect states that SaiFlow works with Audi on asset visibility, continuous threat monitoring, real-time risk scoring, and NIS2 support for Audi EV Charging Hubs; the material identifies charging-hub cybersecurity rather than Group-wide corporate network security and does not disclose scope, data location, value, or contract date.²²

Konnect states that Volkswagen Group China deployed Auto3P’s automated damage-reporting solution for insurance claims and repair workflows, without establishing Group-wide customer-data analytics use.²²

Konnect’s portfolio lists additional Israeli technology relationships including Mappo, Electreon, and TEMI, without publishing terms, dates, or current status.²²

The documented Israeli activities establish an innovation, mobility, and cybersecurity-engagement footprint, but they do not establish current contract values, production status, data-processing arrangements, CyMotive staffing or facility scale, current Volkswagen vehicle deployment, or termination status.^{6, 28, 12, 16, 18, 22}

No public evidence identified in the reviewed materials of Volkswagen patent licensing or co-development agreements with Israeli universities or research institutes.^{28, 22}

Civil Society Scrutiny & Regulatory History

The supplied research prescan recorded no Volkswagen mention in the specified OHCHR settlement-database updates, A/HRC/59/23, or listed civil-society reports, and this finding is document-scoped rather than a general finding across all databases or editions.²⁹

OHCHR’s 2025 announcement concerns an update to its database of business enterprises involved in activities related to Israeli settlements, but the cited announcement does not itself establish Volkswagen’s inclusion.²⁹

No public evidence identified in the reviewed materials of an organised technology-specific boycott campaign, regulatory inquiry, export-control action, sanctions investigation, or legal action concerning Volkswagen or CyMotive technology provision to Israeli state entities or occupied territories.^{29, 16, 18}

No public evidence identified in the reviewed source set of Volkswagen or the named Israeli importer operating digital products or services in East Jerusalem, the West Bank, the Golan Heights, or Israeli settlements.^{5, 6, 7, 29}

The absence findings in this audit are bounded by the cited materials and do not resolve unreviewed corporate filings, registries, reseller locations, later project records, or person-by-person investment research.^{6, 7, 9, 29, 12}