X (X Corp) - BDS-1000 Forensic Dossier

Key Findings

• Digital/Identity Infrastructure: Since 2020, X Corp’s XBlue/Premium biometric identity-verification pipeline has routed government-ID and selfie data to AU10TIX, a Tel Aviv-headquartered firm founded by former Shin Bet/El Al security personnel with a chairman reported to be a veteran of IDF Unit 8200; neither company responded to civil-society privacy inquiries.¹²³
• Political/Regulatory Exposure: The European Commission opened a DSA investigation into X on/around 12 October 2023 tied explicitly to “the dissemination of illegal content in the context of Hamas’ terrorist attacks against Israel,” and on 5 December 2025 issued a €120 million non-compliance fine, while a separate illegal-content/disinformation probe from that same episode remains ongoing.⁴⁵
• Executive Conduct: Elon Musk’s November 2023 endorsement of an antisemitic post triggered a major-advertiser exodus, a pledge to donate Gaza-war-associated ad/subscription revenue to Israeli hospitals and the Red Cross/Red Crescent (fulfillment unconfirmed), and a personal visit to Israel meeting Netanyahu and Herzog.⁶⁷⁸
• Not found: No public evidence identified of any X Corp defence contract, IMOD/IDF relationship, weapons-adjacent technology, or listing in the OHCHR settlement-business database; the company’s most significant military-AI nexus (xAI/Grok–Pentagon Project Maven) is a US-facing relationship of a separate, though affiliated, corporate entity.⁹¹⁰

Target Profile

Key Facts:

• XBlue/Premium biometric data has been reported retained by AU10TIX for up to 30 days.¹⁹
• X Corp sued Israeli firm Bright Data Ltd. over alleged unauthorized data scraping; litigation proceeded through partial dismissal, partial revival, and settlement on contract claims.²⁰²¹²²
• Israeli fintech firm BridgeWise (Tel Aviv) launched an API data-licensing partnership with X (“SentimentWise”) in April 2026, as a customer of X’s data, not a technology supplier to X.²³²⁴
• Israel’s Government Advertising Agency ran hasbara-classified ad campaigns via X (among other platforms), with a June 2025 exemption-committee approval covering ~167 million shekels combined across X, Google and Outbrain/Teads.²⁵²⁶

Executive Summary

X Corp is a privately held social-media and software company whose documented Israel/Palestine nexus is almost entirely digital, political, and reputational rather than military or industrial. The audits found no public evidence of any direct contract, tender, or licensing relationship between X Corp and the Israeli Ministry of Defense, IDF, Israel Prison Service, or Israeli defence primes, and no evidence that X manufactures, markets, or supplies any dual-use, tactical, or weapons-adjacent hardware. The company’s business model - software and platform services - leaves it without the physical supply chains, settlement operations, or agricultural/goods sourcing patterns that anchor Economic findings for other companies; correspondingly, no evidence was found of X Corp investment, real estate, or operational facilities in Israel or the Occupied Palestinian Territories, and X Corp does not appear in the OHCHR’s September 2025 database of businesses linked to Israeli settlement activity.

The strongest and most consistently documented vector is digital: X Corp’s XBlue/Premium identity-verification pipeline has, since roughly 2020, sent government ID and biometric selfie data to AU10TIX, an Israeli firm headquartered in Tel Aviv and founded by former Shin Bet and El Al security personnel, with its chairman reported as a veteran of IDF Unit 8200. Neither company responded to Business & Human Rights Resource Centre’s privacy inquiries in 2023, and the relationship’s continuation into 2025–2026 could not be independently reconfirmed in the sources reviewed. Separately, X Corp pursued adversarial litigation against Israeli data-scraping firm Bright Data, which settled on confidential/contract terms - a relationship of conflict rather than complicity. An Israeli fintech firm, BridgeWise, later became a paying customer of X’s data API, reversing the direction of technology flow.

The political domain carries the highest documented severity. The European Commission opened a formal Digital Services Act investigation into X explicitly framed around “the dissemination of illegal content in the context of Hamas’ terrorist attacks against Israel,” culminating in a first-of-its-kind €120 million non-compliance fine in December 2025, with a related illegal-content/disinformation inquiry still open. Civil-society monitoring (7amleh, Business & Human Rights Resource Centre) documents thousands of cases of alleged censorship of Palestinian voices and account suspensions, alongside allegations that X failed to remove a large share of flagged hate speech during the war. Musk’s personal conduct - his November 2023 endorsement of an antisemitic post, the ensuing advertiser exodus, a pledge (of unconfirmed fulfillment) to donate Gaza-war-associated revenue to Israeli hospitals and the Red Cross/Red Crescent, his subsequent visit to Israel meeting Netanyahu and Herzog, and a specific November 2023 policy declaring pro-Palestinian slogans “calls for extreme violence” subject to suspension - anchors much of this domain’s scoring.

What is not supported by the evidence is equally important: no defence contract, no export-control action, no organised boycott/divestment campaign targeting X Corp specifically on Israel-Palestine grounds (as distinct from broader antisemitism/content controversies), and no settlement-business listing. The military-domain AI relationship most publicly associated with the Musk corporate family - xAI/Grok’s use within the US Pentagon’s Project Maven - is a US-facing relationship of a related but corporately distinct entity, with no public evidence connecting it to Israeli forces or targeting systems. These findings, evidence-only and human-vetted, yield a BRS of 712 (Tier B, Severe), driven overwhelmingly by the Political domain (V=8.00) against a near-zero Military floor (V=0.00).

Timeline of Relevant Events

Corporate Overview

X Corp is a privately held US social-media company with no disclosed Israeli subsidiaries, offices, or physical operations. Its corporate structure has changed substantially in the audit period: X Corp became a wholly owned subsidiary of xAI in March 2025, and xAI itself merged into SpaceX in February 2026 in an all-stock transaction valuing the combined entity at roughly $1.25 trillion, before xAI was formally dissolved into SpaceX as its AI division in July 2026. Elon Musk retains controlling voting power (>80%) via Class B super-voting shares. Disclosed outside investors - Saudi Arabia’s Kingdom Holding Company and the Qatar Investment Authority - are Gulf sovereign-linked, not Israeli. No Israeli state, sovereign fund, or government entity is identified among X Corp’s shareholders, board, or governance mechanisms, and no “golden share” or state-control instrument exists.

The company maintains some Israel/Tel Aviv-based job listings (data analyst, product manager, backend/product engineering roles), but no evidence establishes a formal R&D centre or laboratory there. No Israeli-origin acquisition appears in X’s or Twitter’s acquisition history. The clearest documented Israeli-entity relationships are commercial-adversarial or vendor-based rather than structural: AU10TIX (vendor, identity verification), Bright Data (litigation opponent), and BridgeWise (data-licensing customer of X’s API). Group-level entities under common Musk control - xAI (Pentagon AI relationship) and SpaceX (Starlink licensing in Israel/Gaza) - are corporately distinct from X Corp and are noted as context rather than X Corp findings.

Domain Summaries

Military: Military

Mechanism of Involvement

No public evidence identified of any direct contract, tender, or MOU between X Corp and Israeli defence, security, or prison authorities, and no evidence X Corp appears in SIBAT or comparable defence-export directories. As a software/social-media company, X Corp has no hardware, heavy-machinery, or dual-use product line. At the group level (not an X Corp finding), SpaceX’s Starlink was licensed for civilian/government-approved use in Israel and parts of Gaza in February 2024 following security vetting, and an opinion-sourced (uncorroborated in hard news) claim alleges rapid IDF battlefield activation post-October 7. xAI - X Corp’s direct corporate parent - has a documented US Department of Defense relationship (Grok in Project Maven), but no public evidence connects this to Israeli forces or Gaza targeting systems.

Counter-Arguments and Evidence Limits

The company’s defence is structural and strong in this domain: it has no hardware manufacturing capability, no SIBAT presence, no IMOD contract, and no documented role in Iron Dome, David’s Sling, Arrow, or any Israeli platform. The one battlefield-activation claim traces to a single opinion outlet, not independently corroborated. The Palantir-Starlink “digital kill chain” characterization originates from an advocacy source (BHRRC citing an opinion article) rather than verified operational disclosure, and concerns a separate company (Palantir) and a separate corporate entity (SpaceX), not X Corp.

Named Entities and Evidence Map

• SpaceX (group parent, distinct entity) - Starlink Israel/Gaza licensing, February 2024³⁹⁴⁰
• xAI (group parent, distinct entity) - Project Maven/Pentagon relationship (US-facing)⁴⁶
• Palantir Technologies (unrelated company) - IMOD AI partnership, January 2024, cited only as context³⁸

Digital: Digital

Mechanism of Involvement

X Corp’s clearest documented Israel-nexus is digital-infrastructural: since ~2020, XBlue/Premium identity verification routes government ID and biometric selfie data to AU10TIX, a Tel Aviv-headquartered firm with founders reported to include former Shin Bet/El Al security personnel and a chairman reported as an IDF Unit 8200 veteran; retained data has been reported held for up to 30 days. Separately, X Corp litigated against Israeli firm Bright Data over alleged unauthorized data scraping (settled on contract claims), while Israeli fintech BridgeWise became a paying customer of X’s public conversation-data API in April 2026. No public evidence identified of X operating data-centre infrastructure in Israel, participating in Project Nimbus, or using Israeli surveillance/biometric/retail-analytics vendors (Trigo, BriefCam, AnyVision/Oosto, Check Point, Wiz, etc.).

Counter-Arguments and Evidence Limits

The AU10TIX relationship’s current (2025–2026) status is unconfirmed in available sources despite AU10TIX’s continued market activity. The Bright Data relationship is adversarial litigation, not cooperation, and includes a settlement. The BridgeWise relationship runs in the direction of X providing data outward, not consuming Israeli surveillance technology. No cloud, AI, or defence/intelligence-sector technology relationship between X Corp and Israeli state bodies was identified.

Named Entities and Evidence Map

• AU10TIX (Tel Aviv) - biometric ID-verification vendor, ~2020–2023 confirmed, status thereafter unconfirmed¹²³
• Bright Data Ltd. (Israel) - litigation opponent, settled²⁰²¹²²
• BridgeWise (Tel Aviv) - data-licensing customer via API, April 2026²³²⁴

Economic: Economic

Mechanism of Involvement

X Corp has no physical goods supply chain, no settlement-linked sourcing, and no FDI, facility, or real-estate holding in Israel/OPT. Its economic nexus is limited to (a) AU10TIX as a paid services vendor, (b) litigation/settlement with Bright Data, and (c) the Israeli Government Advertising Agency (Lapam) purchasing advertising services on X as part of hasbara-classified campaigns (reported ~167 million shekels combined across X, Google, and Outbrain/Teads in 2025; separately, an approximately $2 million Israeli ad push targeting X users specifically was reported). Musk’s November 2023 pledge to donate Gaza-war-associated ad/subscription revenue to Israeli hospitals and the Red Cross/Red Crescent remains of unconfirmed fulfillment.

Counter-Arguments and Evidence Limits

The dominant economic flow documented runs from Israel into X (as an advertising customer), not the reverse - X is not shown to be investing in, profiting from, or operating within Israel/OPT in a structural sense. No Israeli government contract, ownership stake, or critical-infrastructure designation exists. The company is privately held and does not disclose Israel-specific revenue.

Named Entities and Evidence Map

• AU10TIX - vendor payment relationship¹
• Israel Government Advertising Agency (Lapam) - customer of X advertising services, 2025²⁵²⁶
• Bright Data Ltd. - litigation, settled²⁰²²

Political: Political

Mechanism of Involvement

This is the dossier’s highest-severity domain. The European Commission’s DSA investigation, opened explicitly over “the dissemination of illegal content in the context of Hamas’ terrorist attacks against Israel,” resulted in a €120 million non-compliance fine (December 2025), with a related illegal-content/disinformation probe still open. 7amleh documented over 5,100 combined censorship/harmful-content cases across Meta and X between October 2023 and September 2024, alleging systematic suppression of Palestinian voices alongside a documented surge in Hebrew-language incitement. X’s November 2023 policy explicitly designating pro-Palestinian slogans (“decolonization,” “from the river to the sea”) as calls for “extreme violence” subject to suspension is a named, direct content-policy action. Musk’s personal conduct - the antisemitic-post endorsement, advertiser exodus, litigation against Media Matters and threatened litigation against the ADL, the Israel visit meeting Netanyahu/Herzog, the Auschwitz visit, and repeated public statements on Gaza - forms a dense, well-documented record. Post-acquisition trust-and-safety staffing cuts (~80% reduction, human rights team eliminated) form structural context for content-moderation findings.

Counter-Arguments and Evidence Limits

X Corp does not appear in the OHCHR settlement-business database. No organised consumer boycott/divestment/sanctions campaign specifically targeting X Corp on Israel-Palestine grounds (as distinct from broader antisemitism controversies) was identified. The revenue-donation pledge, whatever its fulfillment status, is a documented gesture of even-handedness (funds directed to both Israeli hospitals and Gaza’s Red Cross/Red Crescent). CEO Yaccarino publicly and repeatedly disavowed discrimination “across the board.” No evidence shows X Corp lobbying specifically on anti-BDS legislation, nor corporate (as opposed to Musk’s personal) donations to IDF-linked, FIDF, or JNF/KKL organizations. The Grok “MechaHitler” episode was attributed by xAI to an “unintended update,” not deliberate policy.

Named Entities and Evidence Map

• Elon Musk - controlling owner, Israel visit November 2023, repeated public statements⁶⁷⁸⁴³
• Linda Yaccarino - former CEO, public statements on antisemitism, resignation July 2025⁴⁷¹⁷
• European Commission - DSA investigation and €120m fine⁴⁵
• 7amleh - civil-society monitoring of censorship patterns⁴⁸⁴⁹
• Media Matters / ADL - litigation and litigation-threat targets^33345051

BDS-1000 Score (V4)

• V_MAX: 8.00 Avg_OTHERS: 2.70
• BRS Score: 712 Tier: B (Severe)

V_MAX is set by Political (8.00), reflecting the high Impact (8.0), Magnitude (7.0), and especially Proximity (9.0) of X’s documented regulatory exposure (DSA investigation and €120m fine tied explicitly to Hamas-attack content) and Musk’s direct, personal, high-visibility engagement with Israeli state leadership and Gaza-war narrative-shaping. Digital (5.11) is driven by the AU10TIX biometric-data pipeline to an Israeli intelligence-linked vendor. Economic (3.00) and Military (0.00) remain comparatively low or zero, reflecting the absence of any physical supply chain, settlement operation, or defence-contracting relationship. The BRS applies a scale-free methodology (Impact × function of Magnitude/Proximity) across the four domains, evidence-only and human-vetted, yielding Tier B (Severe).

Methodology Note

• Scores are derived exclusively from the four domain audits (Military, Digital, Economic, Political); no claim in this dossier extends beyond what those audits document.
• Each domain score is scale-free: Impact (I) reflects the type/character of the documented activity, Magnitude (M) reflects its scale, and Proximity (P) reflects directness of the company’s nexus to Israeli state/military/settlement activity.
• Where audit checks found nothing, this dossier states “No public evidence identified” rather than inferring absence-of-evidence as evidence-of-innocence or vice versa.
• Temporal rule: divested, settled, or exited relationships (e.g., the Bright Data litigation settlement) are treated as mitigating rather than aggravating, consistent with the audits’ own framing.
• Entity attribution follows a no-transitive-guilt standard: findings about xAI, SpaceX, or Palantir are noted as group-level or third-party context only where the audits explicitly flag them as corporately distinct from X Corp, and are not folded into X Corp’s own score.
• Where an activity plausibly implicates both economic and political dimensions (e.g., Israeli government advertising purchases via X), it is discussed in both relevant domain summaries per audit sourcing, consistent with a dual-counting convention for economic/political settlement-adjacent activity.
• Unverified or unresolved claims (e.g., fulfillment status of the Musk revenue-donation pledge; current status of the AU10TIX vendor relationship) are carried with their original caveats rather than presented as confirmed.