BMW Group — V-DIG Domain Audit

Audit Phase: V-DIG Audit Subject: BMW Group (BMW AG, BMW i Ventures, BMW Group Technology Office) Prepared: 2026-05-01 Scope: Technographic audit of BMW Group’s enterprise technology stack, vendor relationships, cloud infrastructure, defence/intelligence sector relationships, AI and autonomous systems, R&D footprint, and civil society scrutiny, with particular attention to Israeli-origin technology relationships.

Enterprise Technology Stack & Vendor Relationships

Confirmed Israeli-Origin Software & Services

Wiz (Cloud Security — CNAPP)

Wiz is documented as BMW Group’s primary cloud security platform across its AWS-based cloud infrastructure. A Wiz customer case study ¹ explicitly records BMW “accelerating cloud security with Wiz,” citing a 95% decrease in critical cloud security issues during a period in which BMW simultaneously doubled its cloud workload. Wiz provides agentless Cloud-Native Application Protection Platform (CNAPP) scanning across BMW’s AWS environment and is described as “the single source of truth for cloud risk” within BMW’s cloud operations ¹. This relationship was active and ongoing as of the case study’s publication (~2023). Wiz was founded in 2020 by Israeli entrepreneurs who previously led the Azure Security engineering team at Microsoft following the acquisition of their prior company, Adallom, and has been publicly characterised as among the fastest-growing enterprise software companies in history ². BMW’s underlying cloud infrastructure runs predominantly on AWS, as confirmed by multiple AWS migration and case study publications ³⁴⁵.

CyberArk (Identity & Privileged Access Management)

BMW Group was named a recipient of the CyberArk 2025 Identity Security Impact Customer Award ⁶⁷. CyberArk awards this recognition specifically to enterprises that demonstrate deep, enterprise-wide deployment of its Identity Security platform, which covers privileged access management, secrets management, and machine identity — all material attack surfaces for a software-defined vehicle manufacturer with vehicle-to-cloud communications infrastructure. CyberArk is headquartered in Petah Tikva, Israel ⁸, and the 2025 award citation confirms an active, ongoing relationship with BMW. The precise scope of BMW’s CyberArk deployment (which divisions, geographies, or system categories are covered) is not granularly itemised in available public materials.

Claroty (OT/Industrial Cybersecurity — Investment Relationship)

BMW i Ventures invested in Claroty in 2018 ⁹. Claroty is an Israeli-founded OT and industrial cybersecurity firm associated with the Team8 venture foundry; Team8 was co-founded by Nadav Zafrir, former commander of IDF Unit 8200. BMW i Ventures’ investment blog post explicitly frames the rationale in terms of securing “the world’s most critical networks,” including industrial and automotive environments consistent with BMW’s factory OT estate. The investment relationship is confirmed by primary source. Whether BMW Group separately procures Claroty as a direct technology customer — beyond the equity investment — is not confirmed by a distinct public procurement announcement or case study in available sources. The dual role of BMW i Ventures as both investor and potential operator-customer is plausible but not separately evidenced. Claroty maintains a confirmed technology alliance with Check Point Software Technologies ¹⁰¹¹ (see below).

Check Point Software Technologies (Network Security — Indirect / Alliance Linkage)

Check Point Software Technologies is headquartered in Tel Aviv and was co-founded by Gil Shwed, a veteran of IDF intelligence signals units [^49]. A confirmed technology alliance exists between Claroty and Check Point for securing industrial control networks ¹⁰¹¹, and Check Point has entered a strategic partnership with Wiz to deliver integrated CNAPP and cloud network security ¹². Given BMW’s confirmed use of Wiz and its BMW i Ventures investment in Claroty, Check Point represents a plausible indirect technology dependency — particularly if Claroty OT security is deployed in BMW manufacturing facilities via the Check Point alliance channel. Check Point’s blog has published general-industry analysis of automotive cloud misconfiguration risks ¹³, but this is sector-level commentary, not a BMW-specific customer case study. No direct BMW–Check Point procurement announcement or case study was identified in available public sources. The connection to BMW’s environment is indirect, mediated via the Wiz and Claroty partnerships.

Upstream Security (Vehicle Cybersecurity — Investment Relationship)

BMW i Ventures invested in Upstream Security, confirmed by Upstream’s own press release (~2019) ¹⁴. Upstream provides a cloud-based vehicle security operations centre (vSOC) analysing connected vehicle telemetry for anomaly and threat detection ¹⁵. BMW i Ventures’ strategic rationale for the investment is consistent with BMW’s connected vehicle and over-the-air software update infrastructure. Whether BMW Group subsequently deployed Upstream’s vSOC platform in production at group scale — as opposed to retaining Upstream as a portfolio company — is not confirmed by a separate BMW procurement or deployment record in available public sources.

Unverified or Discarded Prior Claims

The following vendor relationships were asserted in prior AI-generated analysis of BMW’s technology estate but are not supported by the cited sources and cannot be treated as confirmed:

• JFrog (Artifactory / Software Supply Chain): JFrog’s automotive industry marketing page ¹⁶¹⁷ and a conference presentation reference automotive OEM use cases, but neither document names BMW as a confirmed Artifactory customer. JFrog is dual-headquartered in Sunnyvale, CA and Netanya, Israel ¹⁸. The prior claim is unverified; BMW is not named in available primary sources as a JFrog customer.

• Snyk (DevSecOps / Vulnerability Scanning): Prior analysis cited Snyk’s npm vulnerability database entries for packages named bmw-js as evidence of BMW Group procuring Snyk as an enterprise tool. These entries document third-party open-source packages that happen to include “bmw” in their names — they constitute no evidence of enterprise procurement. This claim is discarded.

• Verint (Knowledge Management — BMW UK): A Verint blog post on knowledge management ¹⁹ is generic marketing content and does not name BMW UK as a customer. A TrustRadius PDF cited in prior analysis was not independently verified as BMW-specific. This claim is unverified.

• SentinelOne, NICE, Palo Alto Networks: No BMW relationship with these vendors was identified in available primary sources. No public evidence identified.

Integrator & Programme Partnerships

• Publicis Sapient is documented as a BMW digital transformation partner, named in connection with BMW’s i Vision Dee concept presentation at CES 2023 and automotive OEM data strategy ²⁰. Publicis Sapient is not an Israeli-origin firm. No evidence was identified that its BMW engagements specifically mandate Israeli-origin technology.
• Accenture is documented as a programme partner in BMW Group’s Intercultural Innovation Hub alongside UNAOC ²¹²². This is a corporate social responsibility and capacity-building partnership, not an IT systems integration engagement.

Surveillance, Biometrics & Retail Technology

Facial Recognition & Video Analytics

Axis Communications (Industrial Camera Supplier — Swedish, not Israeli-origin)

Axis Communications is a confirmed camera supplier to BMW Group vehicle production facilities, documented in an Axis customer story describing quality inspection applications in BMW Group manufacturing ²³. Axis Communications is a Swedish company and is not within scope as an Israeli-origin technology.

BriefCam (Video Analytics — Hebrew University spin-out; acquired by Canon ~2018)

BriefCam was founded by researchers from the Hebrew University of Jerusalem and was acquired by Canon approximately 2018 ²⁴. BriefCam’s video synopsis and facial analytics software is commonly deployed as a plugin to Milestone Systems XProtect VMS, and the Milestone–BriefCam integration is a confirmed general market partnership ²⁵. However, no BMW-specific BriefCam deployment case study or procurement record was identified in available public sources. The existence of the Milestone–BriefCam partnership does not constitute evidence of BMW deploying BriefCam. No public evidence identified of BMW Group directly procuring or deploying BriefCam technology.

ioimage (Perimeter Intrusion Detection — Israeli-origin; acquired by DVTEL, then FLIR)

Prior analysis asserted that a “specific case study” documented BMW dealerships using ioimage video analytics. The cited source is a Milestone/Netto supermarkets case study on SourceSecurity.com — it describes a Netto retail deployment, not a BMW dealership. This claim appears to rest on a misattributed source and is discarded. No public evidence identified of BMW deploying ioimage technology.

Frictionless Retail & Loss Prevention

Trigo (AI-Powered Retail Checkout — Israeli)

Trigo develops computer vision AI for frictionless checkout and retail loss prevention [^48]. BMW Group has established a Retail Performance Company joint venture with h&z ²⁶ and has pursued “Future Retail” initiatives. However, prior analysis itself acknowledged no confirmed Trigo–BMW deployment [^48]. No public evidence identified of Trigo technology being deployed within BMW retail or dealership environments.

Predictive Analytics, Social Media Monitoring & Workforce Surveillance

No public evidence identified of BMW Group deploying Israeli-origin predictive policing, social media monitoring, or workforce surveillance tools through direct procurement or managed service arrangements.

Third-Party & Indirect Deployments

No public evidence identified of Israeli surveillance technologies reaching BMW indirectly through documented managed service or outsourcing channels.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

BMW’s Primary Cloud Infrastructure

BMW Group’s cloud infrastructure is predominantly built on Amazon Web Services. Multiple AWS publications document this relationship, including the migration of BMW ConnectedDrive to AWS ³, BMW Group’s AWS-based data lake ⁵, and broader BMW–AWS partnership case studies ⁴. The BMW Cloud Data Hub — described as the operational backbone for vehicle-to-cloud data flows and digital services — is an AWS-hosted environment in which Wiz operates as the primary cloud security layer ¹.

Data Centre Operations in Israel

No public evidence identified that BMW Group operates, leases, or co-locates data centre or compute infrastructure within Israel. All primary-sourced documentation of BMW cloud infrastructure references AWS regions in North America and Europe.

AWS Israel Region (il-central-1) and Project Nimbus

AWS launched its Israel (Tel Aviv) region (il-central-1) in August 2023 ²⁷. This region was developed in the context of Project Nimbus, the approximately $1.2 billion Israeli government cloud contract awarded jointly to AWS and Google Cloud in 2021 ²⁸. Project Nimbus is designed to provide cloud infrastructure to Israeli government ministries and defence agencies.

Prior analysis asserted that BMW routes workloads through the il-central-1 region, citing “technical signal analysis of TLDs and DNS configurations” and referencing generic internet infrastructure files (a GitHub TLD canon file; public suffix lists; Spare Cores instance availability pages). These sources document that certain EC2 instance types are available in il-central-1 — they contain no BMW-specific routing or workload data. This claim is not supported by the cited sources. No public evidence identified that BMW workloads are deployed in the AWS Israel region.

BMW’s Tel Aviv Technology Office ²⁹ may make incidental use of local cloud resources for day-to-day scouting operations, but no documented evidence of BMW Group deploying workloads in il-central-1 was found.

Government Cloud & Project Nimbus Participation

BMW is a private automotive manufacturer. No public evidence identified that BMW participates in Project Nimbus or any Israeli government cloud programme in any capacity — whether as a tenant, contractor, or technology provider.

Data Sovereignty & Resilience Services

No public evidence identified of BMW participating in Israeli sovereign cloud, data localisation, or critical infrastructure resilience programmes.

Defence, Intelligence & Security Sector Technology Relationships

Military & Intelligence Contracts

No public evidence identified of BMW Group holding contracts with the Israeli Ministry of Defence, Israel Defense Forces (IDF), Shin Bet, Mossad, or any Israeli intelligence body for technology services, software, or systems.

Israeli Government Fleet Vehicle Tender

BMW, through its Israeli importer Delek Motors, won a government tender to supply BMW 528i sedans to Israeli Cabinet Ministers and Supreme Court Justices ³⁰³¹. Reporting in Ynetnews and The Jerusalem Post (approximately 2013–2014) confirmed that the vehicles were supplied at approximately 50% below retail price — approximately NIS 205,000 against a retail price of approximately NIS 398,000 — with reporting suggesting the discount level was determinative in the tender award ³¹. This is a vehicle supply contract via a local commercial importer governed by standard government procurement rules; it is not a technology services agreement and does not constitute a defence or intelligence sector technology relationship. Whether BMW vehicles have been supplied under subsequent Israeli government fleet tenders is not determinable from available sources.

BMW maintains an Authority Vehicles (special sales) programme globally ³², which covers law enforcement, emergency services, and government fleet supply across multiple jurisdictions as a standard commercial product line.

Dual-Use Technology Provision

No public evidence identified of BMW’s commercial technology — including its autonomous driving systems, connected vehicle platforms, or factory automation systems — being documented as deployed for military or intelligence surveillance applications within Israel or the occupied Palestinian territories.

Offensive Cyber & Weapons Technology

No public evidence identified. BMW Group is an automotive and mobility manufacturer with no known offensive cyber products, weapons systems, or related technology lines.

AI, Algorithmic & Autonomous Systems

Mobileye (Vision SoC, ADAS, HD Mapping — Jerusalem, Israel; Intel subsidiary)

Mobileye is headquartered in Jerusalem and has been a subsidiary of Intel Corporation since Intel’s 2017 acquisition; Mobileye re-IPO’d on Nasdaq in 2022 ³³. BMW’s partnership with Mobileye and Intel for autonomous driving development was announced in 2016 ³⁴, with Delphi added as system integrator and platform developer in 2017 ³⁵. The arrangement positioned Mobileye’s EyeQ system-on-chip as the sensor fusion and perception backbone for BMW’s autonomous driving platform.

In 2019, BMW restructured the tripartite arrangement, announcing it would develop its higher-level autonomous driving stack in partnership with Aptiv (subsequently Motional), stepping back from the joint L4 programme with Intel and Mobileye. Mobileye has continued to supply EyeQ ADAS chips for lower-level driver assistance functions in BMW series production vehicles; Mobileye’s 20-F annual filings identify BMW as among its OEM customers ²⁸. This ADAS supply relationship has continued through the 2024–2025 model years.

Mobileye’s Road Experience Management (REM) / Global RoadBook programme ³⁶ aggregates HD map data from vehicles equipped with Mobileye sensors. BMW vehicles in the Mobileye-equipped production fleet contribute drive data to this cloud-based HD mapping system, which is operated by Mobileye and underpins its mapping products for multiple OEM and government customers. BMW’s CES 2026 iX3 presentation ³⁷ does not specifically identify Mobileye as the sensor supplier for the Neue Klasse architecture, suggesting potential technology diversification at the platform level, though Mobileye’s 20-F continues to list BMW as an active customer.

Innoviz Technologies (LiDAR — Haifa, Israel; founders cited as IDF Unit 81 veterans)

Innoviz Technologies was founded in 2016 in Haifa, Israel ³⁸. Co-founders including Omer Keilaf and Eldar Cegla are referenced in trade press and investor materials as having backgrounds in IDF technology units, with the specific unit designation “Unit 81” appearing in press profiles and investment documentation. BMW selected Innoviz as its LiDAR sensor supplier for series production, announced approximately 2019 ³⁹ — the first major series production LiDAR contract in Innoviz’s history. Innoviz’s 20-F annual filings confirm BMW as its primary customer ².

Innoviz’s InnovizOne solid-state LiDAR sensor was targeted at BMW’s autonomous driving integration. As of 2024–2025, Innoviz investor communications describe the BMW programme as ongoing but subject to production ramp timing, with the full series production delivery schedule having experienced delays relative to initial projections. The programme status as of 2025 is not fully resolved in available public disclosures.

AI/ML Provision to Israeli State Bodies

No public evidence identified of BMW Group providing AI systems, autonomous driving technology, or algorithmic tools to Israeli state, military, or security bodies.

Training Data & Surveillance-Derived Data

No public evidence identified of BMW’s AI training datasets incorporating surveillance-derived data from Israeli state sources, or of BMW’s data assets being shared with Israeli government or military bodies.

Autonomous Systems & Lethal Applications

No public evidence identified. BMW’s autonomous systems are exclusively commercial automotive products. No lethal autonomous weapons or dual-use military autonomous system relationship was identified.

Technology Ecosystem & R&D Footprint

Israeli R&D Presence

BMW Group Technology Office Tel Aviv was established in 2019, confirmed by BMW Group’s own press announcement ²⁹. It was positioned as one of five global technology scouting and co-development offices alongside facilities in Silicon Valley, Shanghai, Seoul, and Tokyo. The stated mandate covers trend scouting, startup engagement, and proof-of-concept co-development in the Israeli technology ecosystem, with focus areas including sensor technology, cybersecurity, and smart manufacturing. The office is a scouting and liaison presence, not a major engineering centre; no headcount figures appear in BMW’s public corporate disclosures. BMW i Ventures’ investment in Claroty ⁹ and Upstream Security ¹⁴ are consistent with, and in part attributable to, the strategic intelligence generated by this Tel Aviv office.

BMW i Ventures — Israeli Portfolio

BMW i Ventures is BMW Group’s corporate venture capital vehicle. The following Israeli-founded or Israeli-headquartered companies are confirmed within or proximate to BMW i Ventures’ portfolio based on primary sources:

• Claroty (2018): OT/industrial cybersecurity; Israeli-founded; Team8/Unit 8200-associated foundry ⁹⁴⁰.
• Upstream Security (~2019): Vehicle cybersecurity / vSOC; headquartered Herzliya, Israel ¹⁴⁴⁰.
• Moovit (pre-2020): Israeli mobility data and public transit platform; acquired by Intel in 2020 for approximately $900 million. BMW i Ventures is identified in investor materials as among early backers, though the specific investment round is not confirmed in sources reviewed. The Moovit relationship is a pre-acquisition historical investment; Moovit no longer operates as an independent entity.

BMW i Ventures’ full portfolio page ⁴⁰ lists additional companies; a comprehensive assessment of all Israeli-founded companies across the portfolio was not completed due to source limitations. The BMW i Ventures team page ⁴¹ reflects the fund’s ongoing activity.

Acquisitions

No confirmed BMW Group acquisition (as distinct from BMW i Ventures minority venture investment) of an Israeli technology company was identified in available sources.

Patent & IP Co-Development

No public evidence identified of patent co-development or formal IP licensing agreements between BMW Group and Israeli academic institutions (Technion, Hebrew University of Jerusalem, Weizmann Institute of Science) or Israeli government research bodies.

Ecosystem Partnership — Publicis Sapient & Accenture

Publicis Sapient is documented as a BMW digital transformation partner engaged on automotive data strategy and the i Vision Dee concept presentation at CES 2023 ²⁰. Accenture is a programme partner in the BMW Group Intercultural Innovation Hub alongside UNAOC ²¹²². Neither relationship involves Israeli-origin technology as a documented component.

Civil Society Scrutiny & Regulatory History

NGO & Academic Investigations

No dedicated NGO investigation specifically addressing BMW Group’s technology vendor relationships with the Israeli state or Israeli military was identified in training data. General civil society databases covering Israeli-connected companies (including Who Profits and AFSC Investigate) address companies operating in or with Israeli state or occupation-related contexts, but no BMW-specific V-DIG-type report focused on its technology relationships was found in available sources.

BMW appears in general commercial contexts as a German company with Israeli market operations and investment activity, but not in any specific human rights NGO report concerning technology supply to Israeli military or occupation authorities.

Boycott, Divestment & Sanctions (BDS) Campaigns

No organised BDS campaign specifically targeting BMW Group for its technology vendor relationships with Israel was identified in training data. BMW has been subject to general BDS consumer pressure as a luxury consumer goods company at various times, but no campaign specifically citing BMW’s relationships with Mobileye, Innoviz Technologies, Wiz, or CyberArk as its grounds was identified in available sources.

The Israeli government fleet vehicle tender ³⁰³¹ has not been identified as a specific focus of BDS campaign activity in available sources. The prior AI report’s Israeli government cloud use claims (il-central-1, Project Nimbus participation) are not evidentially supported and therefore cannot serve as a basis for assessing civil society response.

Regulatory & Legal Actions

No public evidence identified of regulatory inquiries, export control investigations, sanctions-related enforcement actions, or legal proceedings involving BMW Group’s technology sales, services, or vendor relationships in connection with Israeli state entities or the occupied Palestinian territories.

Labour & Supply Chain Scrutiny

Separate from technology-specific concerns, BMW Group’s broader supply chain (including minerals sourcing, labour practices in manufacturing) has been subject to civil society attention in other jurisdictions, but this falls outside the V-DIG technology audit scope. No overlap between those campaigns and BMW’s Israeli technology relationships was identified in available sources.

End Notes