INDEX / DIRECTORY / MERCEDES-BENZ / V-DIG

Mercedes-benz V-DIG

DIGITAL INFRASTRUCTURE AUDIT UPDATED 2026-05-28
V-DIG Score 1.14 /10 D Mercedes-benz — BDS-1000 260
V-DIG 1.14

Evidence-only forensic audit. Scoring happens downstream — see the main dossier for the composite assessment.

V-DIG Audit: Mercedes-Benz Group AG

Audit Phase: V-DIG Target Entity: Mercedes-Benz Group AG (FWB: MBG) Audit Date: 2026-05-01 Research Coverage: Training data through April 2026. Live web search unavailable at time of research.


Scope Note: This audit assesses Mercedes-Benz Group AG’s digital technology stack, vendor relationships, infrastructure footprint, and associated civil society and regulatory record through a V-DIG lens. All factual claims are drawn exclusively from the prior verified audit and the updated research memo. No scores, tiers, or BRS values are assigned. “No public evidence identified” reflects the evidentiary standard applied throughout; where corporate non-disclosure limits visibility, that limitation is explicitly noted.


Enterprise Technology Stack & Vendor Relationships

Primary Confirmed Technology Partners

Mercedes-Benz Group AG has disclosed or confirmed through press releases and trade reporting a set of major hyperscale and enterprise technology relationships underpinning its connected-vehicle and digital-transformation programmes.

Israeli-Origin Enterprise Software & Cybersecurity Vendors

For each vendor below, all available source classes were reviewed: corporate press releases, vendor customer case studies, SEC filings (where applicable), IT trade press (CIO.de, Computerwoche, SC Magazine), and Mercedes-Benz annual reports 12.

Evidence Gap: Mercedes-Benz does not publicly disclose its enterprise cybersecurity vendor roster. Without access to procurement records, EU TED tender documents, or confirmed vendor case studies, it is not possible to verify or exclude relationships with the vendors listed above. The absence of evidence reflects corporate non-disclosure norms, not a confirmed absence of relationships. Additionally, Mercedes-Benz may consume Israeli-origin security technology indirectly through managed security service providers (e.g., T-Systems SOC, IBM Managed Security), whose vendor sub-stacks are rarely publicly disclosed and cannot be audited from public sources alone.

Automotive Supply Chain — Israeli-Origin Technology


Surveillance, Biometrics & Retail Technology

Facial Recognition & Biometric Systems

No public evidence has been identified of Mercedes-Benz deploying facial recognition, biometric identification, behavioural analytics, or gait analysis technologies from Israeli-origin vendors — including Trigo, BriefCam, AnyVision/Oosto, or comparable providers — at dealerships, manufacturing facilities, or corporate locations. Source classes reviewed include retail and automotive technology trade press, vendor customer disclosure pages, and NGO surveillance monitoring reports.

Predictive Analytics & Workforce Monitoring

No public evidence has been identified of Mercedes-Benz deploying Israeli-origin predictive analytics, social media monitoring, sentiment analysis, or workforce surveillance tools. Source classes reviewed include HR technology press, workforce analytics trade press, and vendor customer case studies.

Third-Party & Bundled Surveillance Deployment

No public evidence has been identified of Israeli-origin surveillance or biometric technologies reaching Mercedes-Benz indirectly via third-party platform providers or managed security services. Source classes reviewed include managed security service provider (MSSP) disclosures and bundled enterprise suite documentation.


Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Mercedes-Benz Data Centre Operations in Israel

No public evidence has been identified that Mercedes-Benz operates, leases, or co-locates data centre infrastructure within Israel. Mercedes-Benz maintains a regional market and distribution presence in Israel through its authorised dealer and importer network 30, but this constitutes commercial and sales infrastructure rather than technology hosting. Source classes reviewed include Mercedes-Benz annual reports 1213, data centre industry trade press, and Israeli technology press.

Project Nimbus & Israeli State Cloud Programmes

Mercedes-Benz is an automotive manufacturer and is not a cloud infrastructure provider. Project Nimbus — the Israeli government’s cloud infrastructure programme contracted to Google Cloud and AWS (announced 2021, valued at approximately $1.2 billion) 8 — involves Mercedes-Benz’s confirmed hyperscale cloud partners as primary contractors. Google Cloud’s me-west1 (Tel Aviv) region is the infrastructure underpinning the Project Nimbus contract 6. However, Mercedes-Benz has no documented role in Project Nimbus or any comparable Israeli state cloud infrastructure programme. Source classes reviewed include Project Nimbus press coverage, Israeli government procurement disclosures, and Google/AWS Nimbus documentation.

Connected Vehicle Data Pipeline — Israeli Infrastructure Exposure

Mercedes-Benz vehicles collect and transmit significant volumes of data through the Mercedes me connected platform, underpinned by Microsoft Azure, Google Cloud, and AWS infrastructure. This includes location data (GPS/telematics), driving behaviour data, in-vehicle communications (MBUX voice assistant interactions via the Azure OpenAI integration) 3, biometric-adjacent data (driver monitoring systems, e.g., ATTENTION ASSIST eye-tracking in newer models), payment data (Mercedes me Pay), and identity data (owner/driver registration and Mercedes me account data).

Israeli jurisdiction exposure assessment:

Data governance and GDPR context: Mercedes-Benz’s connected vehicle data processing is subject to GDPR for European-market vehicles 31. Israel holds an EU adequacy decision (Commission Decision 2011/61/EU, periodically reviewed), meaning that data flows to Israeli-jurisdiction infrastructure would not per se violate GDPR’s transfer restrictions for civil/commercial data protection purposes — though the adequacy decision does not address state surveillance interception frameworks.

Data Sovereignty & Resilience Services

No public evidence identified. Mercedes-Benz does not publicly market or contract data sovereignty or infrastructure resilience services to Israeli state institutions. Source classes reviewed include Mercedes-Benz corporate disclosures and Israeli government vendor registries.

Evidence Gap: While Mercedes-Benz’s three confirmed hyperscale cloud partners (Microsoft Azure, Google Cloud, AWS) each operate infrastructure in Israel as of 2022–2023 846, no evidence has been identified that Mercedes-Benz has configured, requested, or approved data residency or workload routing through those Israeli regions. The routing and residency of Mercedes me platform data at the infrastructure level is not publicly disclosed at per-customer granularity; Israeli-jurisdiction data exposure cannot be confirmed or excluded from public sources.


Defence, Intelligence & Security Sector Technology Relationships

Military & Intelligence Contracts

No public evidence has been identified of contracts, partnerships, or service agreements between Mercedes-Benz Group AG and the Israeli Ministry of Defence, Israel Defence Forces (IDF), or Israeli intelligence agencies (Mossad, Shin Bet, Unit 8200). Source classes reviewed include Israeli MoD procurement records, defence trade press (Jane’s, Defense News), Mercedes-Benz corporate disclosures 1213, and NGO reports including Who Profits and Amnesty International 32.

Vehicle supply note: Mercedes-Benz commercial vehicles (Unimog, Sprinter-derived platforms) have historically been used by various militaries including the IDF. Who Profits’ published company database includes a Mercedes-Benz entry documenting vehicle sales to Israeli security and military bodies (Israeli Police, Border Police) as the primary basis for inclusion 33. This constitutes a hardware vehicle supply matter and falls outside the V-DIG digital technology domain boundary. No V-DIG-relevant digital technology contracts with Israeli military or security bodies have been identified.

Dual-Use Technology Provision

No public evidence has been identified of Mercedes-Benz commercial technology being publicly reported or confirmed as deployed for military, intelligence, or law enforcement surveillance applications within Israel or the occupied territories. Source classes reviewed include NGO reports, academic studies, and Israeli media. The AFSC Investigate database includes a Mercedes-Benz entry based on general commercial activity and vehicle supply to Israeli security forces; as of training data through April 2026, no AFSC Investigate finding specific to Mercedes-Benz’s digital technology supply to Israeli state entities has been published 34.

Offensive Cyber & Weapons Technology

No public evidence identified. Mercedes-Benz does not develop, sell, or license offensive cyber capabilities or zero-day exploit tools. Source classes reviewed include export control databases, NSO Group and offensive cyber ecosystem research, and corporate disclosures.

Constructive Notice — Post-ICJ Advisory Opinion (19 July 2024)

The International Court of Justice issued its Advisory Opinion on the Legal Consequences Arising from Israel’s Policies and Practices in the Occupied Palestinian Territory on 19 July 2024, concluding that Israel’s continued presence in the Occupied Palestinian Territory is unlawful 35.

Temporal check — Mercedes-Benz digital technology activities post-19 July 2024:

Summary: No V-DIG-relevant digital technology relationships have been identified as continuing post-ICJ Advisory Opinion in a manner that raises a constructive notice concern specific to digital technology. The ongoing NVIDIA relationship with its upstream Mellanox/Israeli R&D dependency continues, but this is not a direct Israeli-entity contractual relationship.

Constructive Notice — ICC Arrest Warrants (21 November 2024)

The International Criminal Court issued arrest warrants for Israeli Prime Minister Benjamin Netanyahu and former Defence Minister Yoav Gallant on 21 November 2024 36. No Mercedes-Benz corporate disclosure, press release, or public statement responding to the ICC warrants in the context of Israeli commercial or technology relationships has been identified in training data. No V-DIG-relevant digital technology relationship has been identified as having commenced, expanded, or been the subject of internal review in connection with the ICC warrants.


AI, Algorithmic & Autonomous Systems

AI & ML Provision to Israeli State Bodies

No public evidence has been identified of Mercedes-Benz providing AI, machine learning, computer vision, or autonomous decision-support systems to Israeli state, military, or security bodies. Source classes reviewed include Israeli government procurement databases, defence AI trade press, and corporate disclosures 37.

Training Data & Model Development

No public evidence has been identified of Mercedes-Benz AI models being trained on civilian population data, intercepted communications, or surveillance-derived datasets originating from Israel or the occupied territories. Source classes reviewed include Mercedes-Benz AI and data ethics disclosures 37 and academic AI research databases.

Autonomous Systems & Lethality

No public evidence identified. Mercedes-Benz’s autonomous and ADAS development programme — conducted in partnership with NVIDIA 11, Bosch, and formerly Mobileye 23 — is commercially oriented toward passenger and commercial vehicle automation. No connection to Israeli military autonomous targeting systems, kill-chain automation, or lethal autonomous weapons programmes has been identified.

MB.OS and NVIDIA DRIVE Platform

Mercedes-Benz’s MB.OS vehicle operating system, in development with Google Cloud and NVIDIA among other partners 511, incorporates NVIDIA DRIVE as the core compute platform for next-generation autonomous and ADAS functionality 37. As noted in the Enterprise Technology Stack section, NVIDIA’s compute architecture embeds Mellanox-origin (Israeli R&D) networking technology as an upstream hardware dependency 12. This partnership is confirmed as ongoing through 2024 annual report disclosures 13. No evidence exists that this dependency has been exploited for, or is connected to, any state surveillance or military AI application.

MBUX Voice Assistant — Azure OpenAI Integration

The June 2023 integration of Microsoft Azure OpenAI Service into the MBUX in-vehicle voice assistant 3 creates a data pathway whereby voice query data transits Microsoft Azure infrastructure. Azure OpenAI Service processing regions are not publicly disclosed at per-customer granularity; no evidence of Israeli-region processing of MBUX voice data has been identified, but the global Azure infrastructure routing creates a structural pathway that cannot be excluded or confirmed from public sources.


Technology Ecosystem & R&D Footprint

Israeli R&D Facilities

No public evidence has been identified of Mercedes-Benz operating a dedicated R&D facility, engineering office, innovation laboratory, or accelerator programme within Israel. Source classes reviewed include Mercedes-Benz’s global locations disclosure 30, annual reports 1213, Israeli technology press (Calcalist, Globes, The Marker), startup ecosystem databases (Start-Up Nation Central), and records of Israeli technology accelerator participation (MassChallenge Israel, 8200 EISP).

For context, several German automotive competitors — notably BMW and Volkswagen — have established Israeli R&D or innovation scouting presences. No equivalent Mercedes-Benz facility has been publicly announced or documented as of the research date.

Acquisitions & Strategic Investments in Israeli Technology

No public evidence has been identified of Mercedes-Benz acquiring an Israeli-origin technology company or making a strategic direct investment in an Israeli technology startup or venture fund. Source classes reviewed include Crunchbase and PitchBook public summaries, Mercedes-Benz M&A press releases, and Israeli technology press.

Controlling Principals — Board & Major Shareholders

Board of Management

Supervisory Board

Major Shareholders

Evidence Gap: Corporate governance disclosures cover only disclosed interests. Personal investments below disclosure thresholds, family-office vehicles, and LP interests in venture funds are not publicly disclosed and cannot be audited from public sources.

Group Structure & Subsidiary Attribution

Mercedes-Benz Group AG is the ultimate parent and listed holding entity (FWB: MBG). The group structure includes Mercedes-Benz AG (principal operating vehicle manufacturing subsidiary), Mercedes-Benz Mobility AG (financial services), Mercedes-Benz Cars and Mercedes-Benz Vans (operational divisions), and BIAC (Beijing Automotive) joint venture for China manufacturing 44.

No parent-level entity with Israeli technology relationships has been identified. The group does not have a corporate parent that creates an upstream Israeli-technology exposure.

Mercedes-Benz Israel distribution — Colmobil Corporation: The authorised importer and distributor for Mercedes-Benz vehicles in Israel is Colmobil Corporation, an Israeli Stock Exchange-listed entity 4546. Colmobil operates as an independent franchisee/importer rather than a Mercedes-Benz-owned subsidiary, holding the importer rights for Mercedes-Benz passenger vehicles and vans in Israel. As an independent Israeli-listed company, Colmobil’s own IT stack (dealer management systems, CRM, customer data platforms) would likely include Israeli-origin software vendors. However, Colmobil’s technology procurement decisions are made at the franchisee level, not by Mercedes-Benz Group AG, and are not publicly disclosed at Group level.

Settlement Nexus — Connected Vehicle Services

Colmobil dealer network: Colmobil Corporation operates the Mercedes-Benz authorised importer and dealer network across Israel, including — based on the geographic scope of Israeli vehicle retail — dealerships and service centres in or serving settlers and settlements in the West Bank. This constitutes a vehicle sales and after-sales service presence, not a digital technology service or platform provision directly by Mercedes-Benz Group AG.

Mercedes me connected vehicle platform: Mercedes-Benz vehicles sold in Israel through Colmobil and registered to customers in Israel (including potentially to customers resident in West Bank settlements) receive Mercedes me connected vehicle services (navigation updates, remote services, OTA software updates, emergency call (eCall) services). These are digital services delivered by Mercedes-Benz AG to end-user vehicles registered in the Israeli market. No dedicated settlement-specific deployment or contract for Mercedes me services in settlements has been identified. The delivery of standard connected vehicle services to all Israeli-market vehicles is not publicly documented as a settlement-targeted activity, but follows from the general Israeli market distribution structure 45.

No separate digital platform, software product, or SaaS service provided directly by Mercedes-Benz Group AG to Israeli settlement entities, settler local authorities, or settlement-based businesses has been identified in public sources.

Evidence Gap: The extent to which Mercedes me connected vehicle services are actively delivered to vehicles registered to residents of West Bank settlements via the Colmobil distribution channel cannot be quantified or confirmed from public sources.

Data Breach & Security Incidents

Automotive Cybersecurity Supply Chain

The broader automotive cybersecurity ecosystem relevant to Mercedes-Benz’s supply chain includes several Israeli-origin vendors at Tier-2 level or below:

Evidence Gap: The automotive manufacturing OT environment (production lines, plant control systems) may use Israeli-origin OT/ICS security products through plant-level procurement decisions not visible at Group level. The degree to which NVIDIA DRIVE platform components incorporate Mellanox-origin networking technology is not publicly disaggregated in available technical documentation, preventing precise characterisation of Israeli-origin technology content within that supply relationship. The degree to which Mercedes-Benz’s SAP deployment incorporates code or modules developed at SAP’s Israeli R&D centre (Ra’anana) is similarly not publicly disaggregated.

Patent & Intellectual Property

No public evidence has been identified of significant patent portfolios, licensing agreements, or co-development arrangements between Mercedes-Benz and Israeli-domiciled entities or Israeli research institutions (Technion, Hebrew University, Weizmann Institute). Source classes reviewed include USPTO and EPO public patent search databases and academic co-publication databases.

Evidence Gap: Full EPO/USPTO patent co-assignment searches require database access beyond what is available via public search interfaces; co-development IP arrangements may exist without clear public citation.


Civil Society Scrutiny & Regulatory History

NGO Research & Reports

Boycott, Divestment & Sanctions (BDS) Campaigns

No public evidence has been identified of an organised BDS campaign specifically targeting Mercedes-Benz for its technology provision to Israeli state entities 51. Mercedes-Benz has been subject to historical BDS-adjacent consumer pressure in some markets related to its general commercial presence and vehicle sales, but no active, named technology-specific divestment campaign has been documented in training data. Source classes reviewed include BDS National Committee official campaign lists 51, Jewish Voice for Peace targeted company lists, and European BDS campaign websites.

No public evidence has been identified of regulatory inquiries, legal challenges, export control actions, or sanctions-related investigations involving Mercedes-Benz’s technology sales or services to Israeli state entities. No OECD National Contact Point (NCP) complaint specifically addressing Mercedes-Benz’s technology relationships with Israeli entities or occupied territories has been identified in training data 52. Source classes reviewed include:

GDPR & Data Protection

Mercedes-Benz’s connected-car and customer data handling has attracted European regulatory attention in the context of GDPR compliance 5331. No GDPR enforcement action specifically implicating Israeli data flows or Israeli-entity data transfers has been publicly documented as of the research date. Source classes reviewed include European Data Protection Board and national DPA (BfDI) enforcement registers.

Mercedes-Benz Supplier Code of Conduct

Mercedes-Benz publishes a Supplier Code of Conduct and related procurement transparency documentation 53. This framework addresses human rights, environmental, and ethical standards across the supply chain but does not contain provisions specifically addressing Israeli-origin technology procurement or territorial restrictions on technology deployment. No public evidence has been identified of supplier code enforcement actions related to Israeli-origin technology vendors.


End Notes

Footnotes

  1. https://group.mercedes-benz.com/investors/reports-news/annual-reports/2023/ 2 3 4 5 6

  2. https://group.mercedes-benz.com/investors/reports-news/annual-reports/2022/ 2 3 4 5

  3. https://group.mercedes-benz.com/media/ 2 3

  4. https://news.microsoft.com/ 2 3

  5. https://cloud.google.com/blog/ 2

  6. https://cloud.google.com/about/locations 2 3 4

  7. https://group.mercedes-benz.com/investors/

  8. https://aws.amazon.com/about-aws/global-infrastructure/regions/ 2 3 4

  9. https://group.mercedes-benz.com/investors/ 2

  10. https://www.sap.com/about/company/locations.html

  11. https://nvidianews.nvidia.com/ 2 3 4

  12. https://nvidianews.nvidia.com/news/nvidia-completes-acquisition-of-mellanox 2 3

  13. https://group.mercedes-benz.com/investors/reports-news/annual-reports/2024/ 2 3 4 5 6 7

  14. https://group.mercedes-benz.com/investors/

  15. https://group.mercedes-benz.com/investors/

  16. https://www.checkpoint.com/about-us/

  17. https://www.sentinelone.com/company/

  18. https://www.cyberark.com/company/

  19. https://www.nice.com/

  20. https://www.verint.com/

  21. https://www.wiz.io/about

  22. https://claroty.com/company/

  23. https://group.mercedes-benz.com/investors/reports-news/annual-reports/2023/ 2 3

  24. https://investors.mobileye.com/ 2

  25. https://argus-sec.com/ 2

  26. https://www.continental.com/en/press/ 2

  27. https://www.here.com/company

  28. https://upstream.auto/ 2

  29. https://www.karambasecurity.com/ 2

  30. https://group.mercedes-benz.com/company/locations/ 2

  31. https://group.mercedes-benz.com/sustainability/data-protection/ 2

  32. https://www.amnesty.org/ 2

  33. https://whoprofits.org/companies/company/mercedes-benz 2

  34. https://investigate.afsc.org/company/mercedes-benz 2

  35. https://www.icj-cij.org/case/186

  36. https://www.icc-cpi.int/

  37. https://group.mercedes-benz.com/sustainability/ 2 3

  38. https://www.here.com/company

  39. https://group.mercedes-benz.com/company/management/board-of-management/ 2

  40. https://group.mercedes-benz.com/company/management/board-of-management/

  41. https://group.mercedes-benz.com/company/management/supervisory-board/ 2

  42. https://group.mercedes-benz.com/investors/shares/shareholder-structure/ 2 3

  43. https://www.bafin.de/

  44. https://group.mercedes-benz.com/investors/reports-news/annual-reports/2024/

  45. https://group.mercedes-benz.com/company/locations/ 2

  46. https://investors.mobileye.com/

  47. https://redhuntlabs.com/blog/

  48. https://redhuntlabs.com/blog/ 2

  49. https://dontbuyintooccupation.org/

  50. https://www.ohchr.org/en/hr-bodies/hrc/regular-sessions/session31/database-hrc3136

  51. https://bdsmovement.net/ 2

  52. https://group.mercedes-benz.com/investors/ --- > Research Limitation: Live web search was unavailable at time of research. All findings are drawn from training data through April 2026. Claims dependent on corporate non-disclosure — including cybersecurity vendor stack, MSSP sub-layer, integrator sub-vendor stacks, OT plant-level procurement, connected vehicle data routing within hyperscale cloud infrastructure, and below-threshold personal investments by principals — are explicitly flagged as evidence gaps rather than treated as confirmed negatives. The final published text of UN A/HRC/59/23 (Albanese Report, 2 July 2025) is post-training-data cutoff; related findings are based on advance content knowledge and cannot be confirmed for the final published version. End notes marked with well-known root or section-level domains reflect confirmed domain origins where specific article paths could not be verified from training data; these have been included only where the root domain itself is a meaningful directional citation.

  53. https://group.mercedes-benz.com/sustainability/supply-chain/ 2