V-ECON Audit — ExpressVPN

Audit Phase: V-ECON Research Date: 2026-05-01 Methodology Note: All findings are drawn exclusively from the research memo dated 2026-05-01, which itself relies on training data current through April 2026 and identified prior-AI materials. Source quality caveats are preserved and noted inline. No new research has been conducted. No facts, sources, contracts, relationships, or incidents have been invented.

Supply Chain & Sourcing Relationships

Physical Goods Supply Chain

ExpressVPN is a digital software and services company with no physical goods supply chain. The named categories of Israeli agricultural and physical-goods exporters (Mehadrin, Hadiklaim, Galilee Export, Agrexco successors) are entirely inapplicable to this target. No public evidence identified of any procurement relationship with Israeli agricultural, manufacturing, or physical goods suppliers. No seasonal sourcing patterns, importer-of-record structures for physical goods, or third-party indirect physical sourcing relationships have been identified.¹

IP, R&D, and Revenue Flows Through Israeli-Domiciled Entities

While ExpressVPN has no physical supply chain, its parent company, Kape Technologies, maintains Israeli-domiciled subsidiaries that constitute an upstream value-creation layer:

• Kape Technologies’ 2022 annual results filing explicitly records a significant increase in tax cash outflows “mainly due to Israeli tax prepayments that were paid in 2022 by Group subsidiaries.”² This confirms that Israeli-domiciled subsidiaries of Kape hold sufficient taxable economic activity within Israel to generate material advance corporate tax obligations under Israeli law. Kape’s R&D centre in Tel Aviv (121 Derech Menachem Begin, Tel Aviv-Yafo) is the most publicly identified Israeli operational entity.³⁴
• Kape’s acquisition of Webselenese Ltd. (Israeli company registration number 514414127), headquartered at 146 Derech Menachem Begin, Tel Aviv, for $149.1 million in March 2021⁵⁶⁷⁸⁹ introduced a significant Israeli-incorporated operating subsidiary into the Kape/ExpressVPN group structure. Webselenese operates the high-traffic VPN review platforms vpnMentor.com and WizCase.com.⁵⁷ The vertical integration of Kape-owned VPN products with Kape-owned review platforms has been documented and critiqued by multiple industry observers.^10111213 No regulatory investigation or enforcement action by the FTC, CMA, or equivalent body specifically targeting this conflict-of-interest structure has been identified in available sources.
• The combined structure means that consumer-facing affiliate marketing revenues — a material component of the digital VPN industry’s customer acquisition economy — flow through an Israeli-incorporated entity (Webselenese) before consolidating into the broader Kape group.

Third-Party & Indirect Sourcing

No public evidence identified of third-party Israeli supplier relationships (software vendors, data centre providers, security contractors, or otherwise) specific to ExpressVPN’s product or service delivery.

Product Origin, Labeling & Regulatory Compliance

Settlement-Origin Products

Not applicable. ExpressVPN produces no physical goods and has no supply chain capable of generating settlement-origin labeling obligations. No public evidence identified of any NGO investigation by Who Profits, Corporate Occupation, or equivalent databases targeting ExpressVPN or Kape Technologies regarding settlement-origin goods. No DEFRA advisory, UK customs enforcement notice, or equivalent regulatory instrument has been identified as applicable to this entity.¹

Labeling Compliance

Not applicable to a digital services company. The UK’s country-of-origin labeling regime, EU import labeling requirements, and equivalent frameworks govern physical goods; none of these instruments have been identified as applying to ExpressVPN’s products or services.

Corporate Labeling and Sourcing Policy

No public evidence identified of any ExpressVPN or Kape Technologies corporate policy addressing sourcing or labeling of goods from occupied or contested territories. This is consistent with the company having no physical goods supply chain and having made no public statements on the matter in available sources.¹⁴

Regulatory Actions

No public evidence identified of any consumer protection, customs, or trade compliance regulatory action targeting ExpressVPN or Kape Technologies in connection with product origin or labeling in any jurisdiction reviewed.

Investment, Capital & Financial Exposure

Direct Foreign Investment — Israeli Operational Assets

Kape Technologies Tel Aviv R&D and Operations Office Kape Technologies maintains a research, development, and operational office at 121 Derech Menachem Begin, Tel Aviv-Yafo, Israel.³⁴ This constitutes a confirmed operational real estate holding in Israel. Job listings for engineering roles associated with the ExpressVPN product have been linked to the Tel Aviv office,¹⁵ though the ongoing status of this listing is not independently re-confirmed post-2023 given Kape’s transition to private status.

Webselenese Ltd. Acquisition ($149.1 million, March 2021) Kape’s acquisition of Webselenese Ltd. — an Israeli-incorporated company (registration number 514414127) headquartered at 146 Derech Menachem Begin, Tel Aviv 6492103, Israel⁹ — for $149.1 million in March 2021⁵⁶⁷⁸ represents the single largest confirmed direct foreign direct investment (FDI) event placing capital into an Israeli-domiciled entity within the ExpressVPN group’s history. This is an acquisition of an Israeli operating company, not merely a financial instrument.

Other Acquisitions Kape previously acquired CyberGhost (2017), ZenMate (2018), and Private Internet Access (2019).¹⁰¹¹ None of these are Israeli-domiciled entities. No public evidence identified of Israeli FDI exposure through these specific acquisitions.

Israeli Tax Liability at Subsidiary Level

The advance Israeli corporate tax payments recorded in Kape’s 2022 annual results² confirm that value is attributed to and taxed within Israel at the subsidiary level within the Kape group. The specific amounts are not publicly disclosed in available filings.

Beneficial Ownership and Capital Flow Structure

Teddy Sagi — Ultimate Beneficial Owner Teddy Sagi (born 1971, Tel Aviv) is the ultimate beneficial owner of ExpressVPN via the following confirmed chain:^161718119

• Express Technologies Ltd. (BVI) — ExpressVPN operating entity¹
• → Kape Technologies (formerly UK AIM-listed; delisted May 2023, now private)¹⁹¹⁷
• → Unikmind Holdings Limited (Isle of Man, registration 016791V)¹⁸¹⁷
• → Teddy Sagi (personal beneficial owner, Israeli national)

Following a take-private bid announced in early 2023 and valued at approximately $1.51 billion,²⁰ Unikmind acquired over 98% of Kape shares and the company was delisted from the London Stock Exchange’s AIM market.²⁰¹⁷ Prior to delisting, Sagi held approximately 54.8% of Kape Technologies PLC via Unikmind.¹⁷

Sagi Personal Wealth Footprint

• Sagi’s primary wealth vehicle is Globe Invest (his family office).¹⁶ Significant personal real estate assets in Israel include a residence in Herzliya Pituah reported to have cost approximately NIS 100–135 million (~$27–37M).¹⁶ Note: this figure derives from Wikipedia¹⁶ and an unverified Medium post²¹; no primary deed record or Israeli land registry data was accessible.
• International real estate holdings include a property in the Camden Market area of London and a Miami Beach property on Pine Tree Drive (reported $24M purchase).¹⁶²²
• Sagi holds Cypriot citizenship obtained circa 2009¹⁶ and has maintained residences in Dubai and London.¹⁶

IDF-Related Donations by Sagi and Family

• 2016: Sagi’s parents donated $3 million to the Friends of the IDF (FIDF) at a Los Angeles gala.²³ Note: this donation is attributed to Sagi’s parents, not to Sagi personally, per the Ynetnews source. A prior AI research memo misattributed this directly to Sagi; this audit corrects that error.
• November 2023: Sagi personally donated NIS 1 million (approximately $270,000) to the “Returning Soldiers” initiative, associated with singer Omer Adam, which funded transport for IDF soldiers returning from active duty during the Gaza conflict.²⁴ This is a confirmed personal donation by Sagi made during active hostilities.

Criminal Record (Historical) Sagi was convicted in Israel in 1996 of bribery and insider trading (the “Gavea” affair) and served approximately nine months in prison.¹⁶ This is a pre-2020 historical matter; no ongoing legal proceedings against Sagi have been identified in available training data.

Portfolio and Fund Exposure

No public evidence identified of ExpressVPN or Kape Technologies holding Israeli sovereign bonds, Israeli-domiciled equities, or Israel-focused investment funds as portfolio assets.

Operational Presence & Market Activity

Physical Footprint

Israel — Confirmed Active Locations

• Kape Technologies R&D/Operations: 121 Derech Menachem Begin, Tel Aviv-Yafo, Israel.³⁴ Confirmed operational as of last available public data (2022–2023 AIM filings). Engineering roles associated with ExpressVPN product development have been listed at this location.¹⁵
• Webselenese Ltd.: 146 Derech Menachem Begin, Tel Aviv 6492103, Israel.⁹⁵ Confirmed as of acquisition in March 2021. Ongoing operational status post-2023 delisting is not independently re-confirmed; continued subsidiary operation is consistent with available evidence but not verified post-delisting.

Occupied Territories No public evidence identified of ExpressVPN offices, warehouses, data centres, retail locations, or support centres within the West Bank, Gaza, or Golan Heights.

ExpressVPN Brand-Specific Israel Presence No public evidence identified of ExpressVPN operating a physical office under its own brand name in Israel as distinct from Kape’s broader group offices. All confirmed Israeli presence is attributable to Kape Technologies as a group entity.

Employment and Tax Contribution

• Kape Technologies reported over 1,200 employees globally as of approximately 2022–2023.¹⁴ The proportion specifically located in Israel is not publicly disaggregated in any available filing.
• Webselenese employed approximately 29 people in its Tel Aviv office at the time of acquisition (March 2021),⁵⁶ with additional freelance contributors. Post-acquisition headcount is not independently confirmed.
• Kape’s Israeli subsidiaries are confirmed to generate advance Israeli corporate tax payments,² confirming a real tax contribution to the Israeli state. Specific tax amounts are not publicly disclosed.

Personnel: Leadership Military-Intelligence Background

The following personnel findings are drawn primarily from activist-aligned publications (MintPress News²⁵ and MR Online²⁶) and partially corroborated by other sources. Source limitations are flagged for each claim.

• Ido Erlichman (CEO, Kape Technologies): Erlichman’s role as Kape CEO is confirmed by multiple neutral sources.²⁷¹⁹ A claim that he is a veteran of Unit 217 (Duvdevan), an IDF special forces unit conducting undercover operations in Palestinian territories, is sourced solely from activist media²⁵²⁶ and cannot be independently verified from neutral corporate or biographical sources in available training data.
• Koby Menachemi (Co-founder / early CEO, Crossrider/Kape): A claim that he began his career as a developer for Unit 8200 (Israel’s signals intelligence corps²⁸²⁹) is sourced from activist media²⁵²⁶ and a low-authority aggregator blog.³⁰ This claim is unverified from neutral independent sources.
• Liron Peer (Head of Accounting, Kape): A claim of three years of service in Unit 8200 is sourced from activist media only.²⁵²⁶ Unverified from neutral independent sources.
• Daniel Gericke (former CIO, ExpressVPN): Gericke entered a Deferred Prosecution Agreement (DPA) with the US Department of Justice in September 2021, agreeing to pay a $335,000 fine for his role in Project Raven — a UAE government cyber-espionage program that used advanced exploits to surveil activists, journalists, and dissidents.³¹³²³³ This is confirmed by multiple neutral major news outlets and DOJ records. ExpressVPN publicly acknowledged retaining Gericke after the disclosure, stating the company “knew the key facts” of his background.³⁴ Gericke’s background involves US/UAE intelligence activity; his presence at ExpressVPN does not constitute Israeli state linkage. Whether Gericke remains employed at ExpressVPN as of 2025–2026 is not confirmed in available sources.

Market Positioning

No public evidence identified of ExpressVPN or Kape Technologies characterising Israel as a strategic growth market, regional hub, or target consumer market in any annual report, investor presentation, or press release. Israel appears in available filings exclusively as an operational location, not a consumer market.¹⁴³⁵

Corporate Structure & Foundational Ties

Founding and Incorporation History

ExpressVPN was founded in 2009 by Peter Burchhardt and Dan Pomerantz.¹ Neither founder is identified in public sources as Israeli. The company was not founded in Israel and has no Israeli-origin brand identity or operational heritage. The original legal entity, Express Technologies Ltd., was incorporated in the British Virgin Islands.¹ ExpressVPN operated as an independent company from 2009 until its acquisition by Kape Technologies in September 2021 for $936 million.²⁷¹⁹

Headquarters and Domicile

• ExpressVPN legal entity (Express Technologies Ltd.): British Virgin Islands — confirmed.¹
• Operational parent (Kape Technologies): Formerly UK-listed (London, AIM market); now a private company following the May 2023 take-private.²⁰¹⁷ Operational headquarters confirmed as split between London (UK) and Tel Aviv (Israel).³⁴¹⁴
• Holding company (Unikmind Holdings Limited): Isle of Man (registration 016791V).¹⁸¹⁷
• No dual or legacy Israeli headquarters exists under the ExpressVPN brand name.

Historical Roots: Crossrider/Kape

Kape Technologies was formerly known as Crossrider, an Israeli-founded adtech company later pivoted to cybersecurity.¹⁰ The Crossrider/Kape lineage provides the structural and personnel continuity connecting the company’s Israeli roots to its current form as ExpressVPN’s parent.¹⁰¹¹¹² Unit 8200 veteran claims for early Crossrider/Kape leadership (Menachemi) are sourced exclusively from activist media²⁵²⁶³⁰ and are unverified from neutral sources, as noted above.

State and Institutional Linkages

• No public evidence identified of Israeli state ownership stake in ExpressVPN or Kape Technologies.
• No public evidence identified of Israeli government board appointees on Kape or ExpressVPN boards.
• No public evidence identified of government contracts between ExpressVPN/Kape and the Israeli government or Israeli Defense Ministry.
• No public evidence identified of designation as critical national infrastructure by the Israeli state.
• No public evidence identified from Who Profits, Corporate Occupation, or equivalent NGO databases confirming entries for ExpressVPN or Kape Technologies.

Structural Governance Features

Following the May 2023 delisting and take-private, Kape Technologies is wholly controlled by Unikmind Holdings (Teddy Sagi).²⁰¹⁷ As a private company, no publicly disclosed governance documents are available for review. Prior to delisting, no golden shares, government-linked shares, or charter restrictions tying Kape to Israeli state objectives were identified in AIM filings. No structural governance mechanisms tying ExpressVPN’s operations or mission to Israeli state policy have been identified in any available source.¹⁹³⁵

Profit Repatriation & Economic Contribution

Revenue Attribution

No public evidence identified of ExpressVPN or Kape Technologies disclosing revenue specifically attributed to Israel as a consumer market. Kape’s AIM-era filings reported global subscription revenue figures without segmenting Israel as a market.²³⁵ Israel is not identified as a material consumer market in any available investor communication.¹⁴

Profit Flow Structure

The confirmed direction of profit flow is as follows:^1191718

Global subscriber revenue (worldwide) → Express Technologies Ltd. (BVI) → Kape Technologies (formerly UK AIM-listed; now private) → Unikmind Holdings Ltd. (Isle of Man) → Teddy Sagi (ultimate beneficial owner, Israeli national, resident in Dubai/London)

Key structural observations:

• Profits do not flow into Israel from a foreign parent. Rather, a portion of group profits is recognised and taxed within Israel at the subsidiary level (Kape’s Israeli R&D and operations entities), with ultimate profit flowing outward to the Isle of Man holding vehicle (Unikmind) and then to Sagi personally.²¹⁸
• The advance Israeli corporate tax payments recorded in Kape’s 2022 results² confirm that Israeli subsidiaries generate net taxable income, meaning Israel receives corporate tax revenues from Kape’s Israeli operations before profits are remitted upstream.
• The ultimate profit destination — Unikmind Holdings (Isle of Man) and Sagi personally — is outside Israel, though Sagi is an Israeli national with continued personal economic ties to Israel (property ownership in Herzliya Pituah¹⁶).

Economic Ecosystem Role

• Webselenese (Israeli subsidiary) is registered and operating within Israel’s digital media and technology sector, contributing employment and tax revenues at a modest documented scale (~29 direct employees at acquisition in 2021).⁵
• Kape’s Tel Aviv R&D centre contributes employment and tax to Israel’s technology sector.³⁴ No industry report or government designation quantifying this contribution has been identified in available training data.
• No public evidence identified of Israeli government or industry designations characterising Kape Technologies or ExpressVPN as a key employer, sector anchor, or infrastructure provider within the Israeli economy.
• No public evidence identified of ExpressVPN or Kape Technologies receiving Israeli government grants, subsidies, innovation authority funding, or preferential tax designations (e.g., “Approved Enterprise” status under Israeli Investment Law).

End Notes