Domain Audit — PepsiCo (V-DIG Audit)

Enterprise Technology Stack & Vendor Relationships

Primary Cloud Infrastructure. PepsiCo maintains strategic cloud partnerships with Microsoft Azure, Google Cloud, and Amazon Web Services. Microsoft Azure serves as the primary cloud provider since approximately 2020. Google Cloud supports supply chain AI and analytics initiatives since approximately 2022. AWS maintains a complementary cloud relationship documented in 2021-2022 collaborations ¹².

Enterprise Resource Planning. PepsiCo undertook an ERP transformation based on SAP S/4HANA across 2021-2023. SAP is a German-origin enterprise software provider. No Israeli-origin software has been identified in PepsiCo’s disclosed ERP or core enterprise application stack.

Israeli-Origin Technology Vendors. Trax Retail represents the sole Israeli-origin technology vendor with a confirmed commercial relationship to PepsiCo in public sources. Trax, founded in Israel with headquarters in Tel Aviv and Singapore, provides computer-vision and AI-based image recognition for in-store shelf monitoring, planogram compliance verification, and retail execution analytics. PepsiCo was listed as a Trax client in industry materials between approximately 2017-2019 ³. The current status of the PepsiCo-Trax relationship—whether continued, expanded, or terminated post-2021—cannot be confirmed from available public sources.

Israeli-Origin Cybersecurity Vendors. No public evidence identified for PepsiCo licensing, subscription, or integration relationships with Check Point, CyberArk, SentinelOne, Wiz, Verint Systems, NICE Systems, Palo Alto Networks, or Claroty.

System Integrators. PepsiCo’s digital transformation involves major system integrators including Accenture and IBM, neither of which is Israeli-origin. No public evidence identified of these integrators mandating or deploying Israeli-origin technology as part of PepsiCo engagements.

Surveillance, Biometrics & Retail Technology

Facial Recognition and Biometrics. No public evidence identified of PepsiCo deploying facial recognition, biometric identification (iris, fingerprint, voice), gait analysis, or behavioural analytics technology of Israeli origin in any operational context.

Computer Vision in Retail. Trax’s shelf-analytics platform employs computer vision and AI object detection for commercial retail operations—specifically product placement analysis on store shelves. The technology analyses product-level planogram compliance, not individuals or personal data ³.

Predictive Analytics and Monitoring. No public evidence identified of PepsiCo using Israeli-origin sentiment analysis platforms, social media monitoring tools, workforce surveillance software, or employee behavioural monitoring systems.

Third-Party Deployment. No public evidence identified of Israeli-origin surveillance technology reaching PepsiCo indirectly via managed security services, bundled enterprise software suites, or third-party platform integrations.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Data Centre Operations in Israel. No public evidence identified that PepsiCo operates, leases, or co-locates data centre infrastructure within Israel. PepsiCo’s documented cloud infrastructure spans Microsoft Azure, Google Cloud, and AWS—all U.S.-headquartered platforms with their own Israeli data centre regions, but no PepsiCo-specific Israeli infrastructure has been identified ¹².

Government Cloud Contracts. Project Nimbus is an Israeli government $1.2 billion cloud contract awarded to Google Cloud and AWS, announced in 2021 and confirmed in 2022, providing services to government and defense establishments ⁴. PepsiCo is a commercial customer of both Google Cloud and AWS. No credible structural mechanism identified by which PepsiCo, as a consumer packaged goods customer of these platforms, would itself be a participant in or sub-contractor under Project Nimbus.

Data Sovereignty Services. PepsiCo does not provide cloud infrastructure, platform, or software services to external third parties as a business line. It is a technology consumer. No public evidence identified of PepsiCo providing services explicitly marketed or contracted to ensure digital sovereignty, data residency, or infrastructure resilience for Israeli state institutions or military bodies.

Defence, Intelligence & Security Sector Technology Relationships

Military and Intelligence Contracting. PepsiCo is a food, beverage, and snack manufacturing conglomerate; it does not operate as a defence contractor, intelligence contractor, or dual-use technology provider. No public evidence identified of any contract, service agreement, or commercial relationship between PepsiCo and the Israeli Ministry of Defence, Israel Defense Forces, Shin Bet, Mossad, or any Israeli government intelligence or security body.

Dual-Use Technology Provision. No public evidence identified of any PepsiCo commercial technology being reported, documented, or confirmed as deployed for military, intelligence, law enforcement surveillance, or border control purposes in Israel or occupied territories.

Offensive Cyber Capabilities. PepsiCo has no publicly known involvement in the development, sale, licensing, or export of offensive cyber capabilities, zero-day exploit research, signals intelligence tools, or digital weapons systems.

Cyber Intrusions. PepsiCo was subject to a data breach notification filed with the Maine Attorney General in January 2023 affecting employee-related data, and a claimed intrusion by SiegedSec in July 2023. These incidents involve PepsiCo as a victim of cyber-intrusion, not as a technology provider to state or military bodies ⁵.

AI, Algorithmic & Autonomous Systems

AI/ML Provision to State Bodies. PepsiCo uses AI and machine learning internally for supply chain optimisation, demand forecasting, and retail analytics through its documented Google Cloud partnership. No public evidence identified of PepsiCo providing, licensing, or selling AI or ML systems or outputs to Israeli state, military, law enforcement, or security agencies ².

Training Data and Model Development. No public evidence identified of PepsiCo AI or ML models being trained on civilian population data, intercepted communications data, biometrically derived datasets, or surveillance-derived data originating from Israel or occupied Palestinian territories.

Autonomous Systems and Lethality. No public evidence identified of PepsiCo providing autonomous targeting systems, automated threat detection platforms, lethal autonomous weapons components, or autonomous tracking systems to any military or security force, Israeli or otherwise.

Technology Ecosystem & R&D Footprint

Israeli R&D Centres. No public evidence identified of PepsiCo maintaining a dedicated software engineering office, technology R&D centre, or innovation laboratory in Israel as a standalone PepsiCo entity. PepsiCo operates SodaStream’s manufacturing and commercial operations in Israel following the $3.2 billion acquisition in December 2018. SodaStream’s primary Israeli manufacturing facility is located in Rahat, in the Negev region of Israel proper ⁶⁷.

Acquisitions and Investments. PepsiCo completed acquisition of SodaStream International Ltd. in December 2018 for approximately $3.2 billion. SodaStream is a consumer hardware and consumables company (home carbonation appliances, CO₂ cylinders, flavour syrups), not a software company, cybersecurity vendor, AI developer, or enterprise technology provider ⁶⁷. PepsiCo acquired Strauss Group’s 50% stake in Sabra Dipping Company in December 2024 for approximately $244 million, becoming sole owner. The joint venture with Strauss Group, which has documented historical ties to IDF Golani Brigade, is now 100% owned by PepsiCo ⁸⁹¹⁰. No evidence identified of PepsiCo acquiring or making strategic investments in Israeli-origin software, cybersecurity, AI, cloud, or enterprise technology companies beyond the above consumer-product acquisitions.

Patents and Intellectual Property. No public evidence identified of significant patent portfolios, co-development programmes, or licensing arrangements between PepsiCo and Israeli-domiciled academic or research institutions (Technion, Hebrew University, Weizmann Institute). PepsiCo’s patent activity is primarily concentrated in food science, packaging, beverage formulation, and manufacturing process engineering.

Civil Society Scrutiny & Regulatory History

NGO and Academic Reports. Who Profits documents that Tempo Beverages (Israeli beverage distributor) has commercial agreements with PepsiCo as exclusive distributor of various beverage products to the Palestinian Authority. This explicitly lists PepsiCo as a “partner” company ¹¹. Who Profits historically documented SodaStream’s operations at the Mishor Adumim industrial zone in the West Bank prior to its 2015 relocation to Rahat ¹²¹³. The Don’t Buy Into Occupation coalition 2024/2025 reports reference Sabra (now wholly owned by PepsiCo) in the context of BDS boycott campaigns ¹⁴. The UN OHCHR Business and Human Rights Database search did not find PepsiCo, SodaStream, or Sabra explicitly named as listed entries in the 2025 iteration of the settlement activities database ¹⁵¹⁶.

Boycott and Divestment Campaigns. Following PepsiCo’s acquisition of SodaStream in 2018-2019, BDS-aligned campaigns publicly called for boycotts of PepsiCo consumer products, citing the acquisition as providing revenue and commercial legitimacy to an Israeli commercial brand with historical West Bank factory operations ¹⁷. Sabra has been subject to BDS boycott campaigns citing Strauss Group’s historical IDF support ⁸¹⁷. PepsiCo has not issued a public statement specifically addressing or responding to BDS demands related to the SodaStream acquisition in any identified filing, press release, or investor communication.

Historical Controversies. In January-February 2014, Oxfam and SodaStream brand ambassador Scarlett Johansson publicly parted ways after Oxfam cited SodaStream’s continued operation of a factory in the occupied West Bank as incompatible with Oxfam’s humanitarian policy positions. This controversy predates PepsiCo’s acquisition by approximately four years ¹⁸.

Regulatory and Legal Actions. No regulatory inquiries, legal challenges, export control enforcement actions, sanctions designations, or U.S. Treasury OFAC-related proceedings involving PepsiCo’s technology sales, services, or digital supply chain vis-à-vis Israel or Israeli entities have been identified. PepsiCo is not listed on the OFAC Specially Designated Nationals list, nor is it the subject of any identified BIS export control action relating to its technology activities.

ESG and Human Rights Disclosures. PepsiCo publishes annual ESG disclosures under its PepsiCo Positive (pep+) framework and maintains a Human Rights Policy ¹⁹²⁰. These disclosures address supply chain labour standards, environmental impact, and human rights risk in agricultural supply chains. They do not contain specific disclosures regarding the company’s enterprise technology vendor relationships, cybersecurity supply chain, or digital ecosystem from a human rights or political risk perspective.

End Notes