V-DIG Technographic Audit — Bugatti / Bugatti Rimac d.o.o.

Audit Type: V-DIG Technographic Audit Subject: Bugatti Rimac d.o.o. (trading as Bugatti Automobiles; technology operations through Rimac Group and Rimac Technology d.o.o.) Prepared: 2026-05-01 Research Status: All findings drawn exclusively from training-data knowledge and the source inventory documented in the research memo. Live web fetch returned no results. Claims flagged as unverified in the source inventory are carried forward with explicit qualification. No new research was performed for this audit.

Enterprise Technology Stack & Vendor Relationships

Corporate Structure

Bugatti Rimac d.o.o. was incorporated in November 2021 as a joint venture in which Rimac Group holds a 55% stake and Porsche AG holds 45%.¹ The entity consolidates the Bugatti brand under Croatian operational management while retaining Porsche as the primary shareholder conduit to the broader Volkswagen Group. Rimac Technology d.o.o. — a wholly owned Rimac Group subsidiary that was formally constituted as a standalone entity in 2022 — acts as the designated Tier 1 technology supplier for powertrain, battery management, and embedded software systems across Bugatti vehicles.² The Rimac Technology relationship was publicly confirmed when it was announced as the powertrain and battery supplier for the Bugatti Tourbillon.³

The practical consequence of this structure is that Bugatti’s technology stack is substantially determined at the Rimac Group level, not the Bugatti Automobiles level. Vendor relationships established by Rimac Group — whether for enterprise IT, cloud infrastructure, or embedded automotive technology — flow directly into Bugatti operations. Equally, technology scouted or invested in by Porsche AG and the VW Group ecosystem represents an indirect but structurally proximate influence on the technology available to Bugatti Rimac.

Microsoft 365 and Core Productivity Infrastructure

The Rimac Group, inclusive of Bugatti Rimac operations, standardised on Microsoft 365 as its enterprise productivity, collaboration, and endpoint security platform. A Microsoft-published customer case study dated 2023 documents this deployment in detail, covering Microsoft Teams, Azure Active Directory (now Entra ID), and Microsoft Defender as deployed components.⁴ The case study identifies the scale and integration depth of the Microsoft engagement across the group’s engineering and operational workforce. No Israeli-origin cybersecurity vendor is named as a co-deployment in this Microsoft case study.

Combis as IT Systems Integrator

Combis is a Croatian IT systems integrator with a documented commercial relationship with Rimac Automobili. The prior research document cites two Combis case studies covering Rimac engagements — one addressing VDI workstation virtualisation and a second unspecified engagement. These case study URLs are treated as unverified in this audit’s source inventory, as they could not be independently read during research preparation. Combis’s publicly documented partner status with Check Point Software is consistent with published partner-directory information. However, the specific claim that Combis deployed Check Point or CyberArk products within the Rimac/Bugatti operational environment is not independently confirmed by any verifiable public source. The prior research document infers this from Combis’s partnership tier, not from any statement by Rimac, Bugatti, or either vendor naming the Rimac/Bugatti environment as a deployment site.

Check Point, CyberArk, SentinelOne

The prior research document asserts that these three vendors collectively constitute the cybersecurity technology stack for Bugatti/Rimac, based on: (a) Combis’s partner status with the respective vendors; (b) a generic SentinelOne–Check Point joint solution brief;⁵ and (c) a generic CyberArk–SentinelOne integration press release.⁶ None of these sources name Rimac or Bugatti as a customer. No Bugatti, Rimac, or Rimac Technology press release, case study, or technology announcement names any of these three vendors. No public evidence identified of a direct licensing, subscription, or deployment relationship between Bugatti Rimac and Check Point Software Technologies, CyberArk Software, or SentinelOne.

It is noted as background context that Check Point Software, CyberArk, and SentinelOne are all Israeli-founded companies, with founding team members who have publicly documented intelligence and military unit backgrounds in Israeli national security. This background context is documented in industry and press analysis. However, founder provenance does not constitute an operational relationship with Bugatti or Rimac, and is recorded here solely as structural context rather than as a verified finding.

Upstream Security

The prior research document claims that Porsche Ventures is an investor in Upstream Security (an Israeli automotive cybersecurity firm specialising in connected-vehicle SOC platforms) and that Upstream Security’s platform is deployed for Bugatti connected-car telemetry monitoring. Porsche Ventures’ general investment in automotive cybersecurity startups is consistent with its publicly stated portfolio focus.⁷ However, no public source names Upstream Security as an operationally deployed vendor for Bugatti vehicles or Rimac’s vehicle SOC infrastructure. No public evidence identified of a direct operational deployment relationship between Bugatti Rimac and Upstream Security.

Palo Alto Networks, Wiz, NICE, Verint, Claroty

No public evidence identified. None of these vendors appear in any Bugatti, Rimac, or Rimac Technology public document, case study, technology announcement, or procurement record identified during this audit.

Surveillance, Biometrics & Retail Technology

Physical Security at the Rimac Campus

Rimac Group broke ground on a purpose-built corporate campus in Sveta Nedelja, Croatia in 2021.⁸ The campus consolidates Rimac Group’s engineering, manufacturing, and administrative operations, and by structural implication serves as the operational base for Bugatti Rimac d.o.o. as well.

The prior research document identifies Eccos Inženjering — a Croatian physical security systems integrator — as the primary contractor responsible for access control, CCTV infrastructure, and integrated security management at the Rimac Campus. Eccos is a real and active Croatian company. The prior document’s sourcing for the Eccos–Rimac Campus engagement relies on an Adria Security Summit industry publication and the Eccos product website, neither of which was independently readable during research preparation. The Rimac Campus security vendor is not named in any Rimac or Bugatti press release identified in this audit. The Eccos–Rimac relationship is therefore plausible given Eccos’s market position in Croatian enterprise security integration, but cannot be confirmed as a verified finding from publicly readable primary sources.

Avigilon / Motorola Solutions

The prior research document connects Avigilon (the video surveillance hardware brand of Motorola Solutions) to the Rimac Campus via the Eccos integrator chain, on the basis that Eccos is a certified Avigilon partner. This is an indirect inference, not a statement from any primary source naming Avigilon hardware at the Rimac facility. The specific deployment claim is not independently confirmed.

Separately and as confirmed background context: Motorola Solutions operates both an active R&D and innovation centre in Israel⁹ and has named Israel-based general management.¹⁰ Motorola Solutions’ Israeli operations are a matter of public record. However, the causal link between Motorola Solutions’ Israeli operations and any physical security deployment at the Rimac Campus passes through two unconfirmed steps (Eccos as integrator; Avigilon as deployed product) and is therefore not presented as a verified finding.

Facial Recognition, Biometric Systems, and Workforce Surveillance

No public evidence identified. No vendor in the facial recognition, retail biometrics, or workforce analytics categories — including AnyVision/Oosto, Trigo, BriefCam, or Trax — appears in any Bugatti or Rimac public communication, technology announcement, or third-party case study identified during this audit.

No public evidence identified of deployment of Israeli-origin social media monitoring, predictive policing analytics, or open-source intelligence platforms by Bugatti, Bugatti Rimac, or Rimac Group in any operational context.

Indirect Deployment via Managed Services

No public evidence identified of indirect deployment of Israeli surveillance technology by Bugatti or Rimac through managed service providers or outsourced security operations.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Connected Vehicle Telematics and Cloud Infrastructure

Bugatti operates a remote vehicle monitoring and diagnostic service for customers, publicly described as the “Flying Doctor” programme, which enables Bugatti technicians to remotely access vehicle data for diagnostics and support.¹¹ This service implies cloud infrastructure for vehicle-to-cloud data transmission. The specific cloud provider or providers supporting this service are not named in any publicly available Bugatti or Rimac press release or technical document identified in this audit.

The prior research document cites a blog post by data-streaming practitioner Kai Waehner (dated July 2025 in the citation — beyond this audit’s knowledge window) as evidence that Rimac Technology uses AWS with MQTT and Apache Kafka for vehicle telemetry streaming. This citation cannot be independently confirmed: the post date falls outside the verifiable knowledge period, and no alternative primary source names AWS as Rimac Technology’s telemetry infrastructure provider. AWS usage for connected-vehicle telemetry at this scale is consistent with automotive industry norms, but the specific deployment remains plausible and unconfirmed.

Data Residency

No information about the physical or jurisdictional location of Bugatti or Rimac vehicle telematics data, customer data, or operational data is available in publicly identified primary sources. No public evidence identified that any Bugatti or Rimac data is stored, processed, or transmitted through infrastructure located in Israel or through Israeli-government-contracted cloud services.

Project Nimbus Participation

No public evidence identified. Neither Bugatti, Bugatti Rimac, nor Rimac Group is a party to Project Nimbus (the Israeli government’s cloud infrastructure contract with AWS and Google). The prior research document’s framing of shared use of AWS as a general cloud platform as potential “complicity” in Project Nimbus is an inferential editorial step — not a documented factual relationship — and is not carried forward as a finding in this audit.

Sovereign Cloud and Government-Contracted Infrastructure (Israeli State)

No public evidence identified of Bugatti or Rimac Group providing data residency, cloud resilience, or managed cloud services to Israeli state institutions, ministries, or military agencies.

Defence, Intelligence & Security Sector Technology Relationships

Military and Intelligence Contracts

No public evidence identified of any contract, partnership, service agreement, memorandum of understanding, or formal relationship between Bugatti Automobiles, Bugatti Rimac d.o.o., or Rimac Group and the Israeli Ministry of Defence, the Israel Defense Forces (IDF), Israeli intelligence services (Mossad, Shin Bet, Aman), or Israeli government defence procurement entities.

Dual-Use Technology Provision

No public evidence identified of Bugatti or Rimac technology — including powertrain systems, embedded software, battery management systems, or ADAS components — being deployed, evaluated, licensed, or adapted for military, intelligence, or law enforcement surveillance applications within Israel or in occupied territories.

Offensive Cyber Capabilities and Digital Weapons

No public evidence identified. Bugatti Automobiles and Rimac Group are hypercar manufacturers and automotive technology suppliers. Their publicly documented product portfolio has no overlap with offensive cyber capability development, digital weapons systems, or signals intelligence tooling.

Unit 8200 and Intelligence-Linked Vendor Ecosystem

As background context, several cybersecurity vendors cited in prior research (Check Point Software, CyberArk, and SentinelOne) have founding team members with publicly documented Israeli intelligence and military unit backgrounds. This is a matter of public record in industry and press coverage. As noted in the Enterprise Technology Stack section, no confirmed deployment relationship between any of these vendors and Bugatti Rimac has been established in this audit. The Unit 8200 lineage of vendor founders is therefore recorded as structural ecosystem context rather than as an operational finding for this subject.

AI, Algorithmic & Autonomous Systems

Verne Robotaxi Platform — Rimac Group

Rimac Group publicly revealed its autonomous vehicle platform, branded Verne, in 2024, positioning it as a commercially deployable robotaxi service.¹²¹³ The Verne vehicle is a fully autonomous, purpose-built passenger pod designed for urban ride-hailing deployment, representing a significant strategic expansion for the Rimac Group beyond hypercar technology provision.

The prior research document asserts that the Verne platform is built around Mobileye Drive™ — Mobileye’s turnkey autonomous driving system comprising EyeQ system-on-chip hardware, proprietary perception software, and the Mobileye Responsibility-Sensitive Safety (RSS) driving policy. Mobileye Drive is a real, commercially marketed product offered by Mobileye (an Intel subsidiary headquartered in Jerusalem, Israel).¹⁴¹⁵¹⁶

However, the Car and Driver¹² and InsideEVs¹³ articles cited as sources for the Verne platform reveal do not explicitly name Mobileye Drive as the autonomous driving platform in independently confirmable text. The Mobileye–Verne connection in the prior research document may represent industry inference rather than a direct statement in the cited articles. The claim that Verne uses Mobileye Drive as its core autonomous driving platform is technically coherent and consistent with Mobileye’s documented OEM customer base in the VW Group ecosystem, but is not confirmed by an independently verifiable Rimac or Mobileye primary announcement.

Bugatti Tourbillon — ADAS Supplier

The prior research document claims that the Bugatti Tourbillon incorporates the Mobileye EyeQ6H SoC via Mobileye’s Surround ADAS product suite. The Mobileye Surround ADAS platform is a real, publicly announced product targeting multi-OEM deployment.¹⁴¹⁵ No Bugatti, Rimac, or Mobileye press release names the Bugatti Tourbillon as an EyeQ6H or Surround ADAS deployment.³ Given the Tourbillon’s production volume (approximately 250 units planned), it sits outside the typical scale at which Mobileye publicly announces design-win customers. No public evidence identified for this specific claim.

Mobileye Road Experience Management (REM) Mapping

Mobileye’s REM system is a real and publicly documented product that passively harvests road-geometry and mapping data from vehicles equipped with Mobileye hardware, aggregating data centrally to build Mobileye’s HD map layer (Roadbook). Were Mobileye hardware confirmed in either the Verne platform or the Bugatti Tourbillon, REM data collection and transmission to Mobileye’s mapping infrastructure would be a standard feature. However, since the hardware deployment itself remains unconfirmed for both platforms, the associated data sovereignty implications are also unconfirmed at this time.

AI and Machine Learning Provision to Israeli State Bodies

No public evidence identified of Bugatti, Bugatti Rimac, or Rimac Group providing AI systems, training data, inference infrastructure, or algorithmic decision-making tools to Israeli state institutions, security agencies, or military entities.

Autonomous Target Generation and Weapons-Relevant AI Systems

No public evidence identified. Bugatti and Rimac’s known AI and autonomy work is confined to automotive applications (autonomous driving, ADAS, powertrain optimisation). No overlap with weapons systems, autonomous target generation, or military AI applications is identified in any public document.

Technology Ecosystem & R&D Footprint

Porsche Digital — Tel Aviv Office

Porsche Digital GmbH operates a dedicated office in Tel Aviv, Israel. This is confirmed by the Porsche Digital offices listing¹⁷ and a 2020 Porsche Newsroom article describing the Tel Aviv presence as an active scouting location for cybersecurity and mobility startups within Israel’s technology ecosystem.¹⁸ A 2022 Porsche Newsroom article confirms that Porsche “ramped up” its Tel Aviv activities, co-locating Porsche Digital and Porsche Ventures operations at the site.¹⁹ The Tel Aviv office explicitly targets Israeli startups in cybersecurity — a domain relevant to connected-vehicle and enterprise IT security — for potential integration across Porsche and the broader VW Group.

Porsche AG holds a 45% stake in Bugatti Rimac d.o.o.¹ Technologies evaluated or invested in through Porsche Digital Tel Aviv represent an indirect but structurally proximate channel through which Israeli-origin security and mobility technology could reach Bugatti Rimac’s operational environment, depending on commercialisation outcomes.

Volkswagen Group Konnect Hub — Tel Aviv

The Volkswagen Group established Konnect, a dedicated innovation hub in Tel Aviv, in 2018, confirmed by Jerusalem Post coverage of the launch.²⁰ Konnect scouts and accelerates Israeli startups across cybersecurity, smart mobility, big data, and advanced manufacturing for potential integration across VW Group brands. The hub has supported a reported portfolio of 40+ companies. In 2022, the Konnect hub and VW Commercial Vehicles jointly ran a “MaaS Startup Challenge,” with ADASKY named as the winner.²¹

The Konnect pipeline is a VW Group-level entity. Bugatti Rimac’s exposure to Konnect-scouted technologies flows through Porsche AG’s 45% shareholding rather than through direct Bugatti participation. The pipeline is structurally real but the translation of any specific scouted technology into Bugatti production systems requires a separate, unconfirmed commercialisation step.

Porsche Investment in Israeli Venture Capital Funds

In 2018, Porsche AG announced an eight-figure euro investment in two Israeli venture capital funds: Magma Venture Partners and Grove Ventures.²² This is confirmed by the Porsche Newsroom press release. Magma focuses on enterprise software, cybersecurity, and automotive technology; Grove focuses on IoT, cloud infrastructure, and data analytics. These investments position Porsche — and by structural extension, its joint venture partner Bugatti Rimac — within the Israeli technology investment ecosystem at the fund level, with portfolio-level technology visibility and preferential commercial access.

Porsche Ventures — TriEye Investment

Porsche Ventures’ investment in TriEye, an Israeli company developing CMOS-based short-wave infrared (SWIR) sensor technology for automotive ADAS applications, is confirmed in the 2022 Porsche Newsroom article about Tel Aviv investment activities.¹⁹ TriEye’s technology adapts SWIR imaging — which has established applications in military and defence sensing — for civilian automotive perception systems. The company is headquartered in Israel.²³

Porsche Ventures is the direct investor; Bugatti Rimac and Rimac Group are not named as direct investors or technology integration partners in available public sources. TriEye technology evaluation does not automatically confirm deployment in Bugatti vehicles. This investment is recorded as ecosystem-level exposure.

ADASKY — VW Konnect Challenge and Defence-Linked Provenance

ADASKY is an Israeli company that manufactures the “Viper” thermal camera, targeting ADAS and autonomous vehicle applications. ADASKY won the VW Konnect / VW Commercial Vehicles MaaS Startup Challenge in 2022.²¹ Gentex Corporation disclosed a strategic investment in and collaboration agreement with ADASKY in 2021.²⁴ ADASKY’s leadership includes individuals with IDF backgrounds, as documented in Gentex investor materials.²⁴

Winning a VW Group startup challenge positions ADASKY for potential design evaluation across VW Group brands. No Bugatti or Rimac press release names ADASKY as a supplier or development partner. The ADASKY relationship is recorded as ecosystem-level exposure through the Konnect channel, with no confirmed deployment in Bugatti vehicles.

Porsche Ventures Portfolio — Broader Israeli Startup Exposure

Porsche Ventures maintains an active portfolio of automotive and mobility technology investments.⁷ The 2022 Tel Aviv activities article confirms an explicit focus on cybersecurity-specialist startups through the Tel Aviv presence.¹⁹ The breadth of this portfolio, combined with the Porsche Digital Tel Aviv scouting office and the Konnect hub, creates a structured and ongoing channel through which Israeli-origin technology companies receive Porsche/VW Group evaluation, investment, and potential supply-chain integration.

Direct Israeli R&D Facilities (Bugatti / Rimac)

No public evidence identified of Bugatti Automobiles or Rimac Group (as distinct from their shareholders Porsche AG and VW Group) operating R&D facilities, engineering offices, or corporate entities within Israel.

Acquisitions of Israeli-Origin Technology Companies

No public evidence identified of Bugatti Rimac or Rimac Group acquiring Israeli-origin technology companies or Israeli IP-holding entities.

Patent Co-Development with Israeli Research Institutions

No public evidence identified of patent co-development arrangements between Bugatti, Bugatti Rimac, or Rimac Group and Israeli academic or research institutions (Technion, Hebrew University, Weizmann Institute, or similar).

Civil Society Scrutiny & Regulatory History

NGO Investigations and Academic Studies

No public evidence identified of any non-governmental organisation investigation, academic study, civil society report, or United Nations document specifically addressing Bugatti Rimac’s technology relationships with the Israeli state, Israeli military operations, or operations in occupied Palestinian territories.

Boycott, Divestment, and Sanctions (BDS) Campaigns

No public evidence identified of any organised BDS campaign, shareholder divestment initiative, or consumer boycott specifically targeting Bugatti Automobiles or Bugatti Rimac in connection with technology provision to Israeli state entities or supply-chain relationships with Israeli-origin vendors.

Regulatory Actions and Export Control Investigations

No public evidence identified of regulatory inquiries, export control proceedings, sanctions-related investigations, or enforcement actions involving Bugatti Rimac’s technology relationships with Israeli state entities or the transfer of controlled technology to Israel in any jurisdiction.

NFRD Reporting and Corporate Disclosure

The prior research document cites the Bugatti Rimac Non-Financial Reporting Directive (NFRD) Report 2023, published on the Rimac CDN in early 2025.²⁵ This document is a mandatory ESG/non-financial disclosure under EU reporting requirements. The document’s existence is plausible and consistent with Bugatti Rimac’s obligations as a Croatian entity subject to EU NFRD requirements. However, the content of the report — including any technology vendor disclosures, supply chain statements, or human rights policy language — could not be independently read or verified during research preparation for this audit. No technology vendor disclosures from this document can be confirmed or denied from available evidence.