INDEX / DIRECTORY / WAYMO / DIGITAL

Waymo DIGITAL

DIGITAL INFRASTRUCTURE AUDIT UPDATED 2026-09-22
Digital Score 2.75 /10 D Waymo - BDS-1000 269
Digital 2.75

Evidence-only forensic audit. Scoring happens downstream - see the main dossier for the composite assessment.

Forensic audits like this are reader-funded - no sponsors, no ads. Support OpenIntel →

Enterprise Technology Stack & Vendor Relationships

Waymo participates in the Google and Alphabet Vulnerability Rewards Program, while its public cybersecurity material does not identify cybersecurity-product suppliers, systems integrators, or managed-security providers 1.

Alphabet disclosed a 2025 agreement to acquire Wiz for $32 billion, subject to regulatory approvals and expected closing in 2026, but its filing does not identify Waymo as a Wiz customer, user, or deployment environment 2.

No public evidence identified of Waymo licensing, subscribing to, integrating, or receiving deployment of an identified Israeli-origin enterprise-security product, including products associated with Check Point, Wiz, SentinelOne, CyberArk, NICE, Verint, or Palo Alto Networks.

No public evidence identified of a Waymo technology-programme integrator that mandated, recommended, or deployed an Israeli-origin product.

Surveillance, Biometrics & Retail Technology

Waymo states that its vehicles use cameras, microphones, and AI/ML, and that it does not use facial recognition or other biometric-identification technologies to identify individuals 3.

Waymo identifies interior-camera uses including cleanliness, lost-property support, emergencies, rider-rule compliance, product improvement, and safety and security 3.

No public evidence identified that Waymo uses Israeli-origin facial-recognition, biometric-identification, gait-analysis, retail-analytics, predictive-policing, sentiment-analysis, social-media-monitoring, or workforce-surveillance products.

No public evidence identified that these product categories reach Waymo indirectly through a named third-party platform or managed service.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Waymo’s privacy policy identifies collection and processing of precise geolocation, trip route and pickup/drop-off data, account and payment information, device and network information, destination inferences, in-vehicle video, and support-call audio 4.

The policy permits processing by service providers acting on Waymo’s instructions and disclosures for legal process or enforceable government requests 4.

Waymo’s policy does not identify data-centre locations, data-residency jurisdictions, a Google Cloud region used by Waymo, or Israeli processing or storage infrastructure 4.

Waymo’s 2022 California Public Utilities Commission submission described Google and Waymo as Alphabet-affiliated but independent companies, and stated that Waymo would not share product or service personal information with Google except with consent, to provide Waymo services, or as described in its sharing provisions 5.

Google Cloud announced in 2021 that it had been selected for Project Nimbus to provide public-cloud services to Israeli government entities, with an initial seven-year term that could be extended, and announced an Israel cloud region 6.

An Israeli Government Procurement Administration page identifies AWS and Google as central-tender suppliers of public-cloud services to the Israeli government and describes Project Nimbus as involving the Ministry of Defense and IDF alongside government procurement, digital, cybersecurity, budget, and legal bodies 7.

The Project Nimbus records are Alphabet-group Google Cloud evidence and do not establish a Waymo contract, data-processing role, or participation in the programme 6, 7.

No public evidence identified that Waymo operates, leases, or co-locates a data centre in Israel, or that Waymo rider or sensor data is stored, routed, processed, or legally accessible through Israeli infrastructure or jurisdiction.

Defence, Intelligence & Security Sector Technology Relationships

TIME reported in April 2024 on an unsigned draft consulting contract it reviewed between Google and Israel’s Ministry of Defense concerning architecture, implementation guidance, and automation for a Google Cloud “landing zone” 8.

TIME reported that the reviewed draft did not specify military applications and that it found no evidence that Google Cloud was being used for targeting purposes 8.

This reported Google Cloud matter is Alphabet-group evidence rather than evidence of a Waymo contract or Waymo service provision 8.

No public evidence identified of a Waymo contract, partnership, service agreement, or product deployment involving the Israeli Ministry of Defense, IDF, Israeli intelligence agencies, or Israeli law-enforcement bodies.

No public evidence identified of Waymo development, sale, licensing, or maintenance of offensive cyber capabilities, exploit tools, or digital weapons for Israeli state actors.

AI, Algorithmic & Autonomous Systems

Waymo confirms that it uses AI/ML and that its external camera system detects road-relevant features such as traffic lights and construction zones 3.

Waymo’s public materials reviewed do not describe provision of its AI, computer-vision, or autonomous-driving systems to Israeli state bodies 3.

Project Nimbus is officially described as a Google Cloud public-cloud arrangement for Israeli state entities, and Google’s announcement included cloud migration, integration, optimisation, and technical-skills training 6.

No public evidence identified that Waymo AI models, computer-vision systems, autonomous decision-support tools, training datasets, or vehicle-sensor data have been provided to Israeli military, intelligence, security, or law-enforcement bodies.

No public evidence identified that Waymo has supplied autonomous target-generation, weapons-effects, target-identification, or autonomous-tracking systems to Israeli forces.

Technology Ecosystem & R&D Footprint

California’s Department of Motor Vehicles identifies Waymo LLC as a holder of autonomous-vehicle testing permits and driverless-deployment authorisation 9.

Waymo describes the company as established under Alphabet, while Alphabet’s FY2025 filing characterises Waymo for accounting purposes as a consolidated variable-interest entity within its Other Bets reporting 10, 2.

Waymo stated in February 2026 that Alphabet remained its majority investor, and identified Tekedra Mawakana and Dmitri Dolgov as co-CEOs 11.

Alphabet reported that Waymo announced a $16 billion investment round in February 2026, with the significant majority funded by Alphabet and external investments expected to create non-controlling interests 2.

Waymo’s financing announcement identifies external investors but does not disclose individual equity percentages 11.

Alphabet’s Exhibit 21 lists subsidiaries individually significant or significant in aggregate and does not list Waymo LLC in the retrieved exhibit, which does not negate Alphabet’s separate VIE disclosure 12, 2.

Israeli Patent Office journals published 2021 Waymo LLC applications concerning lidar hardware and lidar-range-measurement accuracy, identifying Waymo LLC as a U.S. applicant and Reinhold Cohn and Partners as the Israeli patent agent 13, 14.

The underlying U.S. priority dates shown in those patent-journal records fall in 2018–19 13, 14.

These patent filings establish Israeli patent prosecution through a local agent, not an Israeli Waymo R&D centre, acquisition, vendor relationship, government contract, or operational deployment 13, 14.

No public evidence identified of a Waymo R&D centre, engineering office, innovation lab, accelerator, acquisition, strategic investment, patent co-development arrangement, or research partnership in Israel.

Alphabet’s pending Wiz acquisition is a group-level transaction and does not establish an acquisition by Waymo or a Waymo deployment of Wiz technology 2.

Civil Society Scrutiny & Regulatory History

The supplied document-scoped full-text review found no occurrence of “Waymo” in the UN Special Rapporteur’s A/HRC/59/23 report, including its discussion of Project Nimbus, surveillance, AI, and cloud services 15.

The supplied document-scoped review found no occurrence of “Waymo” in the 2023 and 2025 OHCHR settlement-business databases 16, 17.

These report-level results do not establish an absence of Alphabet- or Google-related discussion, nor do they establish a database-wide absence finding 15, 16, 17.

No public evidence identified in the reviewed official, corporate, UN/OHCHR, and supplied civil-society source classes of a regulatory inquiry, court action, export-control matter, sanctions investigation, or organised boycott campaign specifically alleging Waymo technology provision to Israeli state entities or in occupied territory.

Footnotes

  1. https://waymo.com/cybersecurity-research/ ↩

  2. https://www.sec.gov/Archives/edgar/data/1652044/000165204426000018/goog-20251231.htm ↩ ↩2 ↩3 ↩4 ↩5

  3. https://support.google.com/waymo/answer/9190819?hl=en ↩ ↩2 ↩3 ↩4

  4. https://waymo.com/privacy/ ↩ ↩2 ↩3

  5. https://www.cpuc.ca.gov/-/media/cpuc-website/divisions/consumer-protection-and-enforcement-division/documents/tlab/accessforall/waymo-cpuc-advice-letter-0001-tier-3 - 2022-phase-i-driverless-deployment-permit-application-december.pdf ↩

  6. https://cloud.google.com/blog/topics/inside-google-cloud/google-cloud-selected-to-provide-cloud-services-to-the-state-of-israel ↩ ↩2 ↩3

  7. https://www.mr.gov.il/ilgstorefront/he/news/details/111222 ↩ ↩2

  8. https://time.com/6966102/google-contract-israel-defense-ministry-gaza-war/ ↩ ↩2 ↩3

  9. https://www.dmv.ca.gov/portal/vehicle-industry-services/autonomous-vehicles/autonomous-vehicle-testing-permit-holders/ ↩

  10. https://waymo.com/about/ ↩

  11. https://waymo.com/blog/2026/02/waymo-raises-usd16-billion-investment-round/ ↩ ↩2

  12. https://www.sec.gov/Archives/edgar/data/1652044/000165204425000014/googexhibit2101q42024.htm ↩

  13. https://www.gov.il/BlobFolder/dynamiccollectorresultitem/patent-journal-jun-2021/he/patents-journal_jun-2021-16A.pdf ↩ ↩2 ↩3

  14. https://www.gov.il/BlobFolder/dynamiccollectorresultitem/patent-journal-oct-2021/he/patents-journal_oct-2021-16A.pdf ↩ ↩2 ↩3

  15. https://docs.un.org/en/A/HRC/59/23 ↩ ↩2

  16. https://docs.un.org/en/A/HRC/53/22 ↩ ↩2

  17. https://docs.un.org/en/A/HRC/60/19 ↩ ↩2