V-DIG Audit — Bolt

Audit Phase: V-DIG Target Entities: Bolt Technology OÜ (Tallinn, Estonia) · Bolt Financial Inc. (San Francisco, CA) · Bolt Solutions Inc. (US) Audit Date: 2026-05-01

Entity Disambiguation

Three legally distinct companies share the “Bolt” brand name. No common ownership exists between them. Each is assessed independently throughout this audit.

• Bolt Technology OÜ — Estonian-registered mobility super-app offering ride-hailing, e-scooters, and food delivery. Operates across approximately 45+ countries. Founded by Markus Villig. Principal investors include Sequoia Capital and G Squared.
• Bolt Financial Inc. — US-registered e-commerce checkout and shopper identity platform headquartered in San Francisco. Entirely separate corporate entity from Bolt Technology OÜ.
• Bolt Solutions Inc. — US-based insurtech platform connecting insurance carriers and distributors. Distinct from both entities above.

The prior research treated these entities as a unified “Bolt ecosystem.” That framing is analytically misleading and is not adopted here. Claims are attributed to the specific entity for which evidence exists.

Enterprise Technology Stack & Vendor Relationships

Bolt Technology OÜ — AppsFlyer

AppsFlyer is an Israeli-headquartered mobile attribution and marketing analytics company, founded by Oren Kaniel and Reshef Mann and based in Herzliya, Israel.¹ Its SDK is embedded across a wide range of major consumer applications globally to collect event-level mobile usage and attribution data.

The prior research asserts that Bolt Technology OÜ uses AppsFlyer as a core analytics vendor. This claim is flagged as unverified by primary source: no independently confirmed corporate disclosure, data processing agreement, or app SDK analysis report was accessible establishing the specific Bolt–AppsFlyer contractual relationship. The Tunisian regulatory incident (see Civil Society Scrutiny & Regulatory History) is the only documentary trail cited in support of this relationship, and that incident itself remains pending live verification.² The technical plausibility of an AppsFlyer deployment is high given AppsFlyer’s ubiquitous SDK presence across consumer apps, but plausibility is not confirmation.

Status: Asserted by prior research; unconfirmed by primary source in this audit cycle. Recommended verification method: static APK/IPA analysis via Exodus Privacy or MobSF to detect embedded SDKs; or review of Bolt Technology OÜ’s published sub-processor list.

Bolt Financial Inc. — Palantir Technologies

Bolt Financial Inc. announced a commercial partnership with Palantir Technologies (NYSE: PLTR) in mid-2025, described as “Checkout 2.0” — a deployment of Palantir Foundry for AI-powered commerce decisioning and shopper personalisation.³⁴ This is a customer–vendor relationship: Bolt Financial is a commercial licensee of Palantir Foundry infrastructure.

Palantir Technologies is a US-incorporated company (Denver, CO) with publicly disclosed defence and intelligence contracts across multiple governments. Relevant to this audit, Palantir has confirmed a strategic partnership with the Israeli Ministry of Defence (MoD), a relationship reflected in its SEC filings and cited in the UN Special Rapporteur’s October 2024 report on the human rights situation in the Occupied Palestinian Territory.⁵ Palantir’s broader positioning as an AI infrastructure company with deep government relationships has been extensively documented in open-source commentary.⁶

The indirect financial implication is factual and not inferential: Bolt Financial’s Palantir licence fees contribute to Palantir’s consolidated revenue, a portion of which funds Palantir’s government and defence operations, including its Israeli MoD relationship. No evidence has been identified that Bolt Financial’s shopper data or platform outputs are shared with, accessible to, or processed by Israeli state bodies. The current scope of data loaded into Bolt’s Palantir Foundry ontology and the contractual data isolation provisions between the two companies have not been independently confirmed in this audit cycle.

Bolt Financial Inc. — Cybersecurity Vendors (Wiz, SentinelOne, Cato Networks, Perimeter 81, Radware)

Prior research lists five Israeli-origin cybersecurity vendors as components of Bolt Financial’s security stack. The sole sourcing cited for this claim resolves to a third-party technology badge aggregator (techimply.com), which is not a reliable procurement record, and no independent primary source (job posting, corporate disclosure, engineering blog post, or verified stack-analysis report) was accessible to confirm any of these specific vendor relationships.

The Israeli origin and Unit 8200-linked founding teams of the named vendors are independently confirmed from training knowledge:

• Wiz — founded 2020 by Assaf Rappaport and co-founders from Microsoft/Adallom; Adallom team included Unit 8200 alumni; acquired by Google in 2025 for approximately $32 billion.⁷
• SentinelOne — founded 2013 by Tomer Weingarten; Israeli origin; NYSE: S.⁸
• Cato Networks — founded 2015 by Shlomo Kramer (co-founder of Check Point Software); Israeli origin.⁹
• Perimeter 81 — Israeli origin; acquired by Check Point Software in 2023.¹⁰
• Radware — founded 1997, headquartered Tel Aviv, Israel; NASDAQ: RDWR.¹¹

Status: Israeli origin of all five vendors is confirmed. Bolt Financial’s use of any of them is unconfirmed by primary source. Recommended verification method: review Bolt Financial job postings on LinkedIn/Greenhouse for stack references; check BuiltWith or Wappalyzer for detectable client-side technologies; review Bolt Financial’s engineering blog.

Check Point, CyberArk, NICE, Verint, Claroty, Palo Alto Networks

No evidence of any relationship between any Bolt entity and these vendors was identified in the prior research or training knowledge. No public evidence identified.

Procurement & Integrator Relationships

No evidence of major systems integrators (Accenture, Publicis Sapient, Infosys, or comparable firms) deploying Israeli-origin technology on behalf of any Bolt entity was identified. No public evidence identified.

Surveillance, Biometrics & Retail Technology

Bolt Technology OÜ — Veriff Identity Verification

Veriff is an Estonian company founded in 2015 by Kaarel Kotkas, providing AI-based identity document verification and facial comparison for customer onboarding workflows. Prior research cites two Veriff case studies asserting that Bolt Technology OÜ uses Veriff for driver identity verification.¹²¹³ Veriff’s public client portfolio is consistent with this claim in training knowledge, though it could not be live-confirmed in this audit cycle.

Veriff is an Estonian company. It is not of Israeli origin. No Israeli-origin biometric or facial recognition vendor has been identified in connection with any Bolt entity.

Israeli-Origin Facial Recognition & Biometrics (AnyVision/Oosto, BriefCam, Trigo, Trax)

No evidence of any relationship between any Bolt entity and these vendors was identified. No public evidence identified.

Predictive Analytics & Workforce Monitoring

No evidence of Israeli-origin workforce monitoring, predictive policing, or retail surveillance technology deployed by any Bolt entity was identified. No public evidence identified.

Third-Party Deployment Vectors

No evidence of Israeli biometric or surveillance technology reaching any Bolt entity indirectly via managed services or bundled platform suites was identified. No public evidence identified.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Data Centre Operations in Israel

No evidence of any Bolt entity operating, leasing, or co-locating data centre infrastructure within Israel was identified. Prior research indicates that Bolt Technology OÜ claims data residency within EU member states, which would be inconsistent with Israeli co-location of the same data.² No public evidence identified of Israeli data centre operations by any Bolt entity.

Project Nimbus Participation

Project Nimbus is the Israeli government cloud contract awarded to Google Cloud and Amazon Web Services in 2021. None of the three Bolt entities is a cloud infrastructure provider; none could logically function as a Project Nimbus prime contractor or primary subcontractor. The prior research draws an analytical parallel between Bolt Financial’s Palantir relationship and Project Nimbus logic but explicitly does not claim Bolt is a Nimbus participant. No public evidence identified of any Bolt entity participating in Project Nimbus or any comparable Israeli state cloud programme.

Data Sovereignty & Resilience Services to Israeli State

No public evidence identified.

Defence, Intelligence & Security Sector Technology Relationships

Direct Military & Intelligence Contracts

No evidence of any direct contract, partnership, or service agreement between any Bolt entity and the Israeli Ministry of Defence, IDF, Shin Bet, Mossad, or any other Israeli state security body was identified. No public evidence identified.

Dual-Use Technology

Prior research raises a theoretical dual-use argument regarding AppsFlyer’s data collection capabilities but documents no confirmed instance of any Bolt entity’s technology being deployed for Israeli military, intelligence, or law enforcement surveillance. This framing is inferential and not evidentiary. No public evidence identified of confirmed dual-use deployment.

Offensive Cyber & Weapons Technology

None of the three Bolt entities is a cybersecurity vendor or weapons developer. No public evidence identified.

AI, Algorithmic & Autonomous Systems

Bolt Financial Inc. — Palantir Foundry AI Deployment

The Bolt Financial–Palantir “Checkout 2.0” partnership announced in mid-2025 describes Palantir Foundry as the underlying infrastructure for AI-powered checkout personalisation and commerce decisioning.³⁴ This positions Palantir as Bolt Financial’s AI infrastructure layer for customer-facing algorithmic decisioning.

Palantir’s Foundry platform is the same product deployed in its government and defence contexts, including its Israeli MoD relationship. The Bolt Financial deployment is a commercial application with no identified connection to state-sector use cases. No evidence has been identified that Bolt Financial provides AI systems, model outputs, or data to any Israeli state body directly or indirectly through this deployment.

The prior research also notes Klarna’s separate and independent relationship with Bolt Financial in the context of buy-now-pay-later checkout integration.¹⁴ No Israeli technology relationships arise from the Klarna connection.

Bolt Financial — Passkey & Shopper Identity Systems

Bolt Financial’s shopper identity platform includes passkey-based authentication for checkout.¹⁵ No Israeli-origin identity or authentication vendor has been identified in connection with this system. No public evidence identified of Israeli technology in Bolt Financial’s identity layer beyond the unconfirmed cybersecurity vendor list discussed above.

Training Data & Model Development

No public evidence identified of Bolt AI models trained on surveillance-derived data from Israel or occupied territories.

Autonomous Systems & Lethality

None of the Bolt entities manufactures or provides autonomous targeting, weapons-effects, or lethal autonomous systems. No public evidence identified.

Technology Ecosystem & R&D Footprint

Bolt Technology OÜ — Israeli Legal Entity

Prior research cites a KYC Israel corporate registry entry for Bolt Technologies Ltd, company number 516700291, registered address 11 Amal St, Rosh Haayin, Israel.¹⁶ Rosh Haayin is located in central Israel within the Green Line. This entry would indicate Bolt Technology OÜ maintains or maintained a registered legal entity in Israel for local market operations. This claim could not be live-confirmed in this audit cycle.

Prior research further notes that Bolt attempted to enter the Israeli ride-hailing market and encountered regulatory resistance from Israel’s Ministry of Transportation, which restricts ride-hailing to licensed taxis — a restriction consistent with known Israeli transport regulation in training knowledge and similar to constraints that affected Uber’s Israeli market operations.¹⁷ Whether this Israeli legal entity remains active as of 2025–2026 and whether Bolt Food or ride-hailing currently operates in Israel is unresolved.

Recommended verification method: Israeli Companies Authority (Rasham HaHevrot) at https://ica.justice.gov.il/.¹⁸

Bolt Solutions Inc. — Israeli R&D Centre (“Bolt Development Center Ltd”)

Prior research cites a CheckId Israeli corporate registry entry for BOLT DEVELOPMENT CENTER LTD, company number 512914805, listing directors David Yosef Levin and Ari Katz.¹⁹ If accurate, this represents a captive R&D subsidiary of Bolt Solutions Inc. registered in Israel. This claim could not be live-confirmed in this audit cycle. Israeli captive R&D centre structures for US technology companies are common, and the description is not inherently implausible, but it requires independent verification before being treated as a confirmed finding.

Recommended verification method: Direct query to Israeli Companies Authority at https://ica.justice.gov.il/.¹⁸

Bolt Solutions Inc. — Israeli Venture Capital Investors

Prior research claims investors in Bolt Solutions Inc. include Viola Group (headquartered Herzliya, Israel) and Hyperion Israel Venture Partners (Kadima Zoran, Israel), citing a Tracxn investor list.²⁰ Viola Group is confirmed in training knowledge as a major Israeli private equity and venture firm. The Tracxn investor list could not be retrieved for confirmation in this audit cycle; no independent primary source (press release, SEC filing, or funding announcement) corroborating Israeli VC participation in Bolt Solutions was accessible.

Status: Asserted by prior research; unconfirmed by primary source. Recommended verification method: Crunchbase, PitchBook, or Bolt Solutions’ own press releases on funding rounds.

Acquisitions & Investments

No evidence of any Bolt entity acquiring an Israeli-origin technology company or making a strategic investment in an Israeli venture fund was identified. No public evidence identified.

Patent & IP Arrangements with Israeli Research Institutions

No evidence of co-development, licensing, or patent arrangements between any Bolt entity and Technion, Hebrew University, Weizmann Institute, or any comparable Israeli research institution was identified. No public evidence identified.

Civil Society Scrutiny & Regulatory History

The Tunisian Data Sovereignty Incident (2022)

Prior research describes a 2022 incident in which Tunisian investigative outlets — identified as Al Qatiba and OCCRP (Organised Crime and Corruption Reporting Project) — reported that Bolt Technology OÜ’s application contained trackers attributed to AppsFlyer that were transmitting data to servers in Israel.² The report is said to have prompted Tunisia’s data protection authority (Instance Nationale de Protection des Données Personnelles, INPDP) to issue a formal warning against using Bolt’s application, citing violations of Tunisia’s Basic Law No. 63 of 2004 on personal data protection.

The contextual elements of this claim are consistent with training knowledge: Al Qatiba is a Tunisian investigative publication; OCCRP conducts joint investigations of this type; Tunisia’s INPDP exists and has enforcement powers under Basic Law No. 63 of 2004; Tunisia does not maintain diplomatic relations with Israel. The specific INPDP ruling and the content of the original investigative report could not be independently retrieved in this audit cycle.

If confirmed, this would represent the only documented instance of a regulatory body taking formal action against a Bolt entity in connection with an Israeli technology relationship. It would also represent the only evidence — albeit indirect — of the Bolt Technology OÜ–AppsFlyer relationship alleged in the enterprise technology section above.

Recommended verification method: INPDP official website at http://www.inpdp.nat.tn/; Tunisian Official Gazette (JORT) for any published decision referencing Bolt; direct retrieval of the Al Qatiba / OCCRP investigative report at the URL cited in prior research.²

Boycott & Divestment Campaigns

No evidence of an organised BDS campaign specifically targeting any of the three Bolt entities was identified in prior research or in training knowledge of BDS Movement public campaign lists. No public evidence identified.

Regulatory & Legal Actions

Beyond the alleged Tunisian INPDP warning described above (unverified), no regulatory inquiries, legal challenges, export control actions, or sanctions investigations involving any Bolt entity’s technology relationships with Israeli state entities were identified. No public evidence identified of additional regulatory or legal proceedings on this basis.

Palantir — Civil Society Scrutiny (Downstream Context)

Palantir Technologies, as Bolt Financial’s AI infrastructure vendor, has been the subject of sustained civil society scrutiny regarding its Israeli MoD relationship. The UN Special Rapporteur’s October 2024 report on the human rights situation in the Occupied Palestinian Territory cited Palantir by name in the context of AI systems deployed in Israeli military operations.⁵ This scrutiny attaches to Palantir directly and not to Bolt Financial, but it forms material context for assessing Bolt Financial’s supply-chain exposure.

End Notes