V-DIG Audit — Automobili Lamborghini S.p.A.

Audit Phase: V-DIG (Digital, Intelligence & Technology Ecosystem) Target Entity: Automobili Lamborghini S.p.A. (subsidiary of Volkswagen Group AG, Audi brand group) Date of Audit: 2026-05-01

Prefatory Note on Evidential Standards

Lamborghini is a wholly-owned subsidiary of Volkswagen Group AG, operating within the Audi brand group. The majority of its digital infrastructure, software platforms, cybersecurity architecture, and supplier contracts are managed at VW Group or CARIAD level rather than disclosed separately at brand level. Where a finding is confirmed only at VW Group or CARIAD level — not in a Lamborghini-specific public disclosure — this is stated explicitly. Findings marked [STRUCTURALLY INFERRED] indicate a strong architectural link without direct brand-level confirmation. Findings marked [UNCORROBORATED] indicate that the cited evidence does not support the asserted claim. Findings marked [INFERENCE] indicate a logical but unconfirmed extrapolation. Pre-2020 sources are noted where applicable.

Enterprise Technology Stack & Vendor Relationships

Cymotive Technologies — Vehicle Cybersecurity (Confirmed VW Group; Structurally Inferred at Lamborghini Level)

Cymotive Technologies was co-founded in 2016 as a joint venture between the Volkswagen Group and a team of Israeli cybersecurity professionals, with VW Group holding a 40% equity stake.¹²³⁴ The company’s co-founders include Yuval Diskin (Director of Shin Bet, 2005–2011), Tsafrir Kats (former head of the Shin Bet’s Technology Unit), and Dr. Tamir Bechor (former head of Information and Computing at the Shin Bet).²⁵ Cymotive describes itself as a “trusted cyber partner” of the Volkswagen Group and provides in-vehicle intrusion detection systems (IDS), a Vehicle Security Operations Center (vSOC), and fleet-level real-time monitoring services across the VW Group vehicle portfolio.³⁵

Lamborghini’s official connectivity pages for the Urus describe a “Remote Immobilization” feature and reference a Security Operations Center function.⁶⁷ These capabilities are operationally consistent with Cymotive’s vSOC product description,³⁵ and the Urus Connect platform is embedded within the same VW Group digital architecture that Cymotive services group-wide. However, Lamborghini’s public materials do not name Cymotive explicitly, and no Lamborghini-specific procurement document or press release confirms a direct Lamborghini–Cymotive contract. [STRUCTURALLY INFERRED via VW Group architecture; Cymotive not named in Lamborghini-specific public disclosures.]

Cymotive joined the Auto-ISAC (Automotive Information Sharing and Analysis Center) in 2020, indicating active participation in the industry’s vehicle cybersecurity intelligence-sharing ecosystem.⁸

The VW Group’s 2024 Annual Report confirms that IT infrastructure and digital platforms are managed at group level, with shared services flowing to all brands, including Lamborghini.⁹ This is the structural basis for treating VW Group-level technology relationships as having downstream applicability to Lamborghini operations.

Mobileye — ADAS & Computer Vision (Directly Confirmed, Named Relationship)

In March 2024, VW Group and Mobileye (headquartered in Jerusalem, Israel; majority-owned by Intel Corporation) announced an intensified collaboration explicitly naming Audi, Bentley, Lamborghini, and Porsche as brands that will integrate Mobileye SuperVision and Chauffeur ADAS platforms.¹⁰¹¹ This is the most directly confirmed Israeli-origin technology relationship in the Lamborghini estate, with a current (2024) disclosure date and explicit brand-level naming.

Mobileye’s Road Experience Management (REM) technology harvests camera and sensor data from equipped vehicles to build and maintain crowdsourced HD maps — the “Global RoadBook.”¹⁰ Vehicles equipped with Mobileye systems contribute anonymised road geometry and sign data to this platform, meaning that once Mobileye SuperVision is deployed in Lamborghini production models, those vehicles will become passive data contributors to an Israeli-domiciled mapping infrastructure. Mobileye has also announced expanding its Surround ADAS partnerships across multiple top-ten global automakers.¹²

Innoviz Technologies — LiDAR Supply (Confirmed at CARIAD/Group Level)

CARIAD SE (VW Group’s software and electronics subsidiary, responsible for shared electronic architectures across Audi, Porsche, Bentley, and Lamborghini platforms) selected Innoviz Technologies as a direct LiDAR supplier for automated driving programmes across VW Group brands.¹³¹⁴ The deal is reported at approximately $4 billion in lifetime contract value.¹³ Innoviz is an Israeli company whose founders are publicly identified as veterans of Unit 81, an IDF intelligence and technology unit.¹³¹⁴

CARIAD develops the E3 1.2 and E3 2.0 shared electronic architectures that Lamborghini’s forthcoming models — including the Lanzador EV — are expected to employ. Because the Innoviz contract operates at the CARIAD platform level, the LiDAR hardware and data pipeline will apply to any Lamborghini model built on those architectures. [GROUP-LEVEL CONTRACT confirmed; Lamborghini model-specific deployment not yet publicly confirmed as of early 2025.] No Lamborghini-specific Innoviz deployment announcement has been made in publicly available CARIAD or Lamborghini communications.

Argus Cyber Security / PlaxidityX — Embedded Vehicle Cybersecurity (Plausible; Unconfirmed at Brand Level)

Argus Cyber Security, an Israeli firm with founders including Unit 8200 alumni, was acquired by Continental AG in November 2017 and rebranded PlaxidityX.¹⁵ Continental is one of VW Group’s primary Tier-1 suppliers of automotive electronics, networking, and embedded systems. The prior research document posits that PlaxidityX Ethernet IDPS products are integrated into VW Group vehicle networking gateways via Continental’s component supply chain. No specific VW Group or Lamborghini procurement record naming Argus or PlaxidityX was identified in any cited source. [PLAUSIBLE via Continental supplier relationship; not confirmed in named Lamborghini or VW Group contract disclosures.]¹⁵

Check Point Software Technologies — Network Security (Uncorroborated)

Check Point Software Technologies (founded by Gil Shwed, a veteran of Israeli military intelligence) is among the world’s largest network security vendors. The research memo asserts Check Point as part of VW Group’s enterprise security stack. The cited sources — a Check Point–Wiz strategic partnership announcement¹⁶ and a Check Point customer stories landing page¹⁷ — do not name Volkswagen Group or Lamborghini as Check Point customers. No VW Group or Lamborghini corporate disclosure, procurement record, or case study naming Check Point as a vendor was identified. [UNCORROBORATED — cited sources do not confirm VW Group or Lamborghini as Check Point customers.]

Wiz — Cloud Security (Uncorroborated)

Wiz is an Israeli-founded cloud-native application protection platform (CNAPP), with several founders publicly identified as Unit 8200 alumni. The research memo asserts Wiz secures VW Group’s multi-cloud environment. The cited sources — the Check Point–Wiz partnership announcement¹⁶ and the Wiz–Check Point integration page¹⁸ — document only an inter-vendor partnership, not any VW Group or Lamborghini customer relationship. [UNCORROBORATED — cited sources do not confirm VW Group or Lamborghini as Wiz customers.]

SentinelOne — Endpoint Detection & Response (Uncorroborated)

SentinelOne is an Israeli-founded endpoint detection and response (EDR/XDR) platform. The research memo asserts VW Group deployment. The sole cited source is a CyberArk–SentinelOne partnership press release,¹⁹ which does not name VW Group or Lamborghini as customers. [UNCORROBORATED — cited sources do not confirm VW Group or Lamborghini as SentinelOne customers.]

CyberArk — Identity & Privileged Access Security (Uncorroborated)

CyberArk is an Israeli-founded identity security company specialising in privileged access management. The research memo asserts VW Group deployment. The cited source is again the CyberArk–SentinelOne partnership press release,¹⁹ which does not name VW Group or Lamborghini. [UNCORROBORATED — cited sources do not confirm VW Group or Lamborghini as CyberArk customers.]

CARIAD Cybersecurity Programme

CARIAD’s official communications confirm that automotive cybersecurity — including UN ECE WP.29 compliance — is a core programme responsibility, and that cybersecurity architecture is designed at the shared platform level.²⁰ This reinforces the structural logic of group-level cybersecurity vendors (including Cymotive) having applicability across all CARIAD-platform brands, including Lamborghini.

Operational Technology Security — Claroty (Anonymised Case Study; Unconfirmed)

Claroty published an anonymised case study documenting how an automotive manufacturer improved industrial OT cybersecurity using Claroty’s platform.²¹ No VW Group, Lamborghini, or CARIAD press release or corporate filing names Claroty as a vendor. Claroty is an Israeli-founded OT/ICS security company; its investor base includes prominent Israeli and US technology funds.²² [ANONYMISED CASE STUDY ONLY — OEM identity unconfirmed; Lamborghini/VW Group relationship cannot be established from available evidence.]

Data Breach Context

In December 2024, a security incident exposed personal data associated with approximately 800,000 VW Group electric vehicle owners, with location and owner data reportedly stored insecurely in AWS cloud infrastructure.²³²⁴²⁵ The breach affected VW Group broadly; Lamborghini’s EV exposure is structurally included in the group’s shared data architecture but was not separately itemised in public reporting.

Business Transformation & Integration Partners

KPMG is documented as a business transformation partner for Lamborghini in the context of operational and digital transformation initiatives.²⁶ No Israeli-origin technology mandate or deployment requirement is referenced in the KPMG client story. No public evidence identified of any integrator (KPMG, Accenture, Capgemini, or other) mandating Israeli-origin technology as part of documented Lamborghini-specific transformation programmes.

Surveillance, Biometrics & Retail Technology

Driver Monitoring Systems — Cipia (Inference; OEM Unconfirmed)

Cipia (formerly Eyesight Technologies), a Tel Aviv-based computer vision company, announced in January 2024 that it had won design awards for four new vehicle models with “a leading global OEM customer” described as a European luxury carmaker under a major automotive group.²⁷²⁸ Cipia’s Driver Sense technology uses infrared cameras to track driver gaze, eyelid state, head position, and facial landmarks for drowsiness detection, distraction classification, driver identification, and occupant monitoring.²⁷

The OEM is not named in Cipia’s announcement. The description “European luxury carmaker under a major automotive group” is consistent with VW Group’s Audi brand group (which includes Audi, Porsche, Lamborghini, and Bentley), but is equally consistent with other European luxury groups. No Lamborghini, VW Group, or Cipia secondary disclosure confirms the identity. [INFERENCE — OEM identity not confirmed in any public disclosure; EU General Safety Regulation 2022 mandates DMS for new type approvals from July 2024, making DMS adoption a universal regulatory requirement across all new European vehicles irrespective of supplier choice.]²⁷²⁸

Cabin Sensing — Guardian Optical Technologies / Gentex (Plausible; Unconfirmed)

Guardian Optical Technologies, an Israeli startup specialising in micro-vibration-based occupancy and vital-sign sensing, was acquired by Gentex Corporation.²⁹ Guardian’s technology enables heartbeat detection and occupancy classification through analysis of micro-vibrations in vehicle surfaces, without requiring direct contact or a camera.²⁹³⁰

Gentex is a confirmed Tier-1 supplier to Lamborghini for auto-dimming mirrors and vision systems (a general supplier relationship, not contested). Whether Gentex has integrated Guardian’s micro-vibration sensing into components supplied specifically to Lamborghini has not been disclosed in any publicly available Gentex IR filing, product release, or Lamborghini supplier documentation. [SUPPLIER RELATIONSHIP with Gentex confirmed; deployment of Guardian-derived sensing in Lamborghini-specific vehicles not confirmed in public disclosures.]²⁹³⁰

In-Vehicle Connectivity & Remote Monitoring

Lamborghini’s Urus Connect platform provides real-time vehicle telemetry, remote status monitoring, remote immobilisation, and emergency call (eCall) functions.⁶⁷ The Lamborghini Revuelto brochure similarly documents connected services integrating vehicle state data into cloud-based ownership portals.³¹ These connectivity platforms operate within the VW Group’s group-level connected vehicle architecture, which is where Cymotive’s vSOC capabilities are applied.³⁵ The remote immobilisation feature in particular requires a persistent two-way data channel between the vehicle and a security operations centre, which is the operational profile Cymotive describes.³

Workforce, Retail & Predictive Surveillance

No public evidence identified of Lamborghini deploying Israeli-origin predictive analytics, social media monitoring, workforce surveillance, or retail biometric systems. The limited retail footprint of a low-volume luxury manufacturer (approximately 10,000 vehicles per year) and the bespoke, relationship-managed nature of Lamborghini’s sales and aftersales operation reduce the surface area for consumer-facing surveillance technology relative to mass-market automotive brands.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Cloud Hosting Architecture

VW Group’s primary cloud partner is AWS (Amazon Web Services). VW Group has disclosed an enterprise-scale AWS collaboration covering production transformation, AI integration, and the VW Industrial Cloud.³²³³ The 2024 Annual Report confirms group-level IT infrastructure management that encompasses all brands, including Lamborghini.⁹ VW Group’s AWS deployment is documented as hosted in European regions; no VW Group or Lamborghini data centre or cloud workload within Israeli territory has been identified in any public disclosure.

No public evidence identified that Lamborghini or the Volkswagen Group operates, leases, or co-locates data centre infrastructure within Israel.

Project Nimbus — Indirect Financial Relationship

AWS is one of two primary cloud providers contracted under Project Nimbus, the Israeli government and IDF cloud infrastructure programme.³⁴³⁵ VW Group’s commercial relationship with AWS means that VW Group’s cloud expenditure contributes to AWS’s consolidated global revenue, a portion of which derives from Project Nimbus contract revenue.³²³³³⁴³⁵ This constitutes an indirect financial relationship mediated through a shared cloud provider rather than any direct VW Group or Lamborghini participation in, or contracting under, Project Nimbus. [INDIRECT FINANCIAL RELATIONSHIP via shared cloud provider; not direct participation in Project Nimbus.]

Data Sovereignty & Residency

VW Group’s connected vehicle data architecture, including the data streams from Lamborghini’s Urus Connect and model-level telematics platforms,⁶⁷ is processed within VW Group’s AWS-based cloud infrastructure. The December 2024 breach disclosure confirmed that location and owner data from VW Group EVs was stored in AWS infrastructure.²³ No VW Group or Lamborghini data processing agreement placing Lamborghini owner or vehicle data within Israeli jurisdiction has been identified.

Not applicable to target with respect to sovereign cloud service provision: Lamborghini is an automotive manufacturer and does not offer cloud, data sovereignty, or infrastructure resilience services to any state body.

Defence, Intelligence & Security Sector Technology Relationships

Military & Intelligence Contracts

No public evidence identified of any contract, partnership, service agreement, or memorandum of understanding between Lamborghini (or the Volkswagen Group acting on Lamborghini’s behalf) and the Israeli Ministry of Defence, the Israel Defense Forces, or Israeli intelligence agencies (Mossad, Shin Bet/Shabak, Aman).

Personnel & Institutional Knowledge Transfer

Cymotive’s confirmed co-founders — Yuval Diskin, Tsafrir Kats, and Dr. Tamir Bechor — each held senior operational or technological leadership roles within the Shin Bet prior to founding Cymotive.²⁵ Their institutional knowledge of Israeli state intelligence methodology is embedded in the commercial product design of Cymotive’s vSOC and IDS offerings. This constitutes a documented personnel pathway from a state intelligence agency to a commercial vendor with a structural relationship to VW Group and, by extension, to Lamborghini’s vehicle security architecture. No public reporting documents Cymotive’s automotive commercial products being applied for military, law enforcement, or occupation-enforcement purposes in Israel or occupied territories.

Similarly, Innoviz’s founding team’s Unit 81 background¹³¹⁴ and Cipia’s Israeli defence-adjacent computer vision pedigree²⁷ represent institutional knowledge transfer pathways from Israeli military technology programmes into commercial automotive sensor and vision systems.

Mobileye REM Data & Israeli Jurisdiction

Mobileye’s REM crowdsourced mapping platform collects road geometry, sign, and infrastructure data globally from equipped vehicles.¹⁰ Mobileye is headquartered in Jerusalem and is subject to Israeli law, including any data access obligations that may apply to Israeli-domiciled technology companies under Israeli security legislation. Once Mobileye SuperVision systems are integrated into production Lamborghini models (as announced for forthcoming Audi brand group vehicles¹¹), those vehicles will passively contribute road data to Mobileye’s Israeli-hosted infrastructure. No public evidence identified that Mobileye’s REM data from any VW Group or Lamborghini-equipped vehicle has been provided to IDF or Israeli security bodies.

Offensive Cyber & Weapons Technology

No public evidence identified. Lamborghini is an automotive manufacturer with no documented involvement in offensive cyber capabilities, zero-day exploit tools, signals intelligence platforms, or digital weapons systems.

Dual-Use Assessment

The technology relationships identified in this audit (vSOC/IDS via Cymotive, ADAS via Mobileye, LiDAR via Innoviz, DMS candidate via Cipia) are all framed commercially and relate to road vehicle safety, connectivity, and cybersecurity functions. None of the cited sources documents deployment of these technologies for military targeting, crowd surveillance, border enforcement, or occupation-related applications arising from Lamborghini’s commercial relationships.

AI, Algorithmic & Autonomous Systems

ADAS & Autonomous Driving Pipeline

The March 2024 VW Group–Mobileye collaboration announcement confirmed that Mobileye’s SuperVision and Chauffeur systems — which combine camera-based perception, radar fusion, and real-time path planning using neural network inference — will be integrated into Lamborghini models.¹⁰¹¹ Mobileye SuperVision is a production-grade AI-based ADAS platform that performs:

Multi-camera surround-view processing for lane keeping, automated lane change, and highway driving assistance
Real-time object detection and classification (pedestrians, cyclists, vehicles, road markings)
Crowdsourced HD map contribution via REM¹⁰
Hands-free highway driving on mapped routes (Mobileye Chauffeur roadmap)

This represents the most substantive AI/ML system relationship confirmed at Lamborghini brand level in the research evidence.

LiDAR-Based Perception (Group Level)

The Innoviz LiDAR sensor supply agreement with CARIAD¹³¹⁴ will, when deployed in CARIAD-platform vehicles, provide point-cloud perception data to AI inference stacks. LiDAR-based 3D object detection and environment modelling are AI-dependent processes. This relationship is confirmed at CARIAD group level; Lamborghini model-specific deployment is not yet publicly confirmed.

Algorithmic Monitoring — Cymotive vSOC

Cymotive’s Vehicle Security Operations Center employs machine learning-based anomaly detection to identify anomalous in-vehicle network traffic and fleet-level attack patterns.³⁵ This constitutes an AI/algorithmic system operating on Lamborghini vehicle network data at the infrastructure level via VW Group’s shared security architecture. [STRUCTURALLY INFERRED; not directly confirmed in Lamborghini-specific disclosure.]³⁵

Provision of AI/ML Systems to State Bodies

Not applicable to target / No public evidence identified. Lamborghini does not provide AI, ML, or autonomous systems to state bodies.

Lethal Autonomous Systems

No public evidence identified. The V-MIL domain boundary covers purpose-built targeting and kill-chain systems. Lamborghini has no documented involvement in such systems.

Technology Ecosystem & R&D Footprint

Konnect — VW Group Innovation Hub, Tel Aviv

Konnect is the Volkswagen Group’s open innovation hub in Tel Aviv, with a stated mandate to “spearhead the discovery, evaluation, and integration of Israeli pioneering technologies” into VW Group vehicles and factories.³⁶³⁷ Its activities include technology scouting, startup evaluation, and matchmaking between Israeli deep-tech ventures and VW Group engineering teams.³⁶ Israel Bonds International has highlighted Konnect’s establishment as evidence of VW Group’s deepening commercial engagement with the Israeli technology sector.³⁷

In January 2022, Konnect and VW Commercial Vehicles selected ADASKY — an Israeli thermal camera startup — as the winner of the VW Group MaaS Startup Challenge.³⁸ Thermal and far-infrared cameras for pedestrian detection and night-vision ADAS are relevant technologies for future Lamborghini sports and SUV platforms. Konnect is a VW Group corporate entity, not a Lamborghini entity. Its technology selections feed into the shared component and platform pipeline available to all VW Group brands.³⁶

Porsche Digital / Porsche Ventures — Tel Aviv Office

Porsche AG established a dedicated innovation office and Porsche Ventures investment presence in Tel Aviv, with an “eight-figure” committed investment sum in Israeli technology startups.³⁹⁴⁰⁴¹ Porsche shares the Audi brand group executive structure with Lamborghini and co-develops platform technology (including CARIAD architectures) that underpins future Lamborghini models.

Documented Porsche Ventures investments in the Israeli ecosystem include:

TriEye (SWIR near-infrared sensing, 2019)⁴² — relevant to adverse-weather perception systems
Anagog (edge AI mobility analytics)⁴³ — relevant to on-device driver behaviour and mobility pattern analysis

Neither TriEye nor Anagog technology integration into a named Lamborghini vehicle programme has been announced as of early 2025. [INVESTMENT PIPELINE confirmed at Porsche Ventures level; Lamborghini programme integration not confirmed in public disclosures.]⁴³⁴²

Lamborghini-Specific R&D in Israel

No public evidence identified of any Lamborghini-specific R&D centre, laboratory, technical office, or co-development facility operating within Israel. The Israeli R&D footprint relevant to Lamborghini is entirely mediated through VW Group-level entities (CARIAD, Konnect) and the Porsche brand group (Porsche Digital, Porsche Ventures).

Acquisitions & Investments

No acquisition of an Israeli-origin technology company by Lamborghini specifically has been publicly identified. Relevant corporate actions are at VW Group level (co-founding of Cymotive, 2016¹) or supplier level (Continental’s acquisition of Argus/PlaxidityX, 2017¹⁵). Porsche Ventures’ Israeli portfolio investments (⁴³⁴²) are Porsche-level transactions.

No patent portfolios, licensing agreements, or co-development arrangements between Lamborghini and Israeli-domiciled research institutions (Technion, Hebrew University, Weizmann Institute) have been identified in publicly available IP filings or institutional partnership databases.

Civil Society Scrutiny & Regulatory History

NGO & Academic Reports

No public evidence identified of any published NGO investigation, academic study, or UN Special Rapporteur report specifically addressing Lamborghini’s technology relationships with the Israeli state, Israeli defence contractors, or operations in occupied Palestinian territory. Coverage of VW Group’s Israeli technology ecosystem in the source inventory is limited to promotional business media (Israel Bonds International³⁷) and industry trade press; no critical civil society analysis of the Konnect hub, the Cymotive joint venture, or the Mobileye/Innoviz supply relationships from the perspective of technology transfer to occupation-enforcement infrastructure has been identified in the evidence base.

Boycott, Divestment & Sanctions Campaigns

No public evidence identified of organised BDS campaigns specifically targeting Lamborghini for its vendor relationships with Israeli-origin technology companies. Broader BDS and divestment campaigns targeting upstream entities exist — including campaigns against Intel (Mobileye’s majority owner), against AWS and Google over Project Nimbus participation,³⁵ and against Check Point Software — but none of the identified campaign materials names Lamborghini as a target entity. Lamborghini’s status as a low-volume, high-price luxury manufacturer with limited consumer-facing mass-market exposure is a plausible explanation for the absence of brand-specific campaign targeting.

Regulatory & Legal Actions

No public evidence identified of regulatory inquiries, export control proceedings, sanctions investigations, or legal challenges specifically involving Lamborghini’s technology procurement from, or commercial relationships with, Israeli entities or Israeli state-affiliated bodies.

Data Protection Enforcement

The December 2024 VW Group data breach — affecting approximately 800,000 EV owners with location and ownership data exposed via insecure AWS cloud storage²³²⁴²⁵ — occurred at VW Group infrastructure level. No Lamborghini-specific regulatory enforcement action arising from this incident has been identified in public reporting. VW Group’s exposure to GDPR enforcement proceedings from European data protection authorities is a residual risk documented in post-incident analyses.²⁴

CARIAD Cybersecurity Regulatory Programme

CARIAD’s documented commitment to UN ECE WP.29 (CSMS) compliance²⁰ is a regulatory framework requirement for vehicle type approval in the EU, UK, Japan, and Korea from 2022 onwards. This is a compliance-driven regulatory programme, not a civil society scrutiny event.