V-DIG Audit — Porsche AG

Audit Phase: V-DIG Domain Audit Target Entity: Dr. Ing. h.c. F. Porsche AG (Porsche AG) Parent Entity: Volkswagen Group / Porsche Automobil Holding SE Audit Date: 2026-05-01 Evidence Base: Training data through April 2026; live web retrieval unavailable for all queries. All findings are sourced to publicly available corporate disclosures, filings, and trade press as documented in training data. See Evidence Gaps for structural limitations.

Enterprise Technology Stack & Vendor Relationships

Core Disclosed Technology Partners

Porsche AG’s publicly documented enterprise technology stack is anchored by three major non-Israeli-origin vendors. Microsoft entered a strategic partnership with Porsche in 2021 to develop a cloud-connected vehicle platform on Microsoft Azure, covering in-vehicle connectivity, customer data integration, and digital services infrastructure ¹. SAP provides enterprise resource planning across the broader Volkswagen Group under a group-level agreement that applies to Porsche AG as a VW subsidiary ². Palantir Technologies (US-origin) was confirmed as a data analytics partner in 2022, with the relationship covering manufacturing analytics and supply-chain optimisation ³. Porsche AG’s annual and sustainability reports through 2023 do not disclose any additional named enterprise technology vendors beyond these primary relationships ⁴⁵.

Israeli-Origin Software & Cybersecurity Vendors

• Check Point Software: No public evidence identified of any licensing, subscription, or integration relationship between Porsche AG and Check Point. Check Point is broadly deployed across the German automotive sector, but no Porsche-specific contract or deployment has been publicly disclosed in any corporate filing, newsroom release, or trade press report within training data ⁴⁵.
• Wiz: No public evidence identified. Wiz’s known major European automotive clients have not publicly included Porsche AG as of the training-data cutoff.
• SentinelOne: No public evidence identified of a Porsche AG deployment or licensing relationship.
• CyberArk: No public evidence identified of privileged access management or identity security deployment at Porsche AG.
• Palo Alto Networks: No public evidence identified of Palo Alto Networks being named as a Porsche AG vendor in any disclosed filing, press release, or trade report, despite the firm’s broad enterprise firewall and SASE market presence in European manufacturing.
• Claroty: No public evidence identified. Claroty’s OT/ICS security platform is known to have been deployed in European manufacturing environments, but no Porsche-specific relationship appears in the public record.
• Nice / Verint: No public evidence identified of call-centre analytics, workforce monitoring, or contact-centre platform deployments by Porsche AG using either Nice or Verint products.

None of Porsche AG’s publicly disclosed primary enterprise technology vendors — Microsoft, SAP, or Palantir — are Israeli-origin firms ¹³².

Procurement & Systems Integration

Porsche Digital GmbH, the group’s in-house digital unit headquartered in Stuttgart, leads major technology delivery programmes ⁶. No public evidence identified that Porsche Digital’s named integration or consultancy partners have mandated or deployed Israeli-origin technology as part of Porsche AG-specific engagements. Accenture and Capgemini are known VW Group-level IT systems integrators, but no specific Porsche AG programme deploying Israeli-origin technology through these integrators has been publicly documented in corporate filings, integrator case studies, or trade press within training data ⁷.

Structural Evidence Gap

Porsche AG’s contracted managed security service providers (MSSPs) are not publicly disclosed in any filing or press release. It is structurally not possible, from public records alone, to determine whether any MSSP engaged by Porsche deploys Israeli-origin technology (e.g., Check Point, CyberArk) as part of a bundled service. Additionally, the OT/ICS security vendors deployed at Porsche’s Zuffenhausen and Leipzig manufacturing plants — where Claroty, Dragos, Nozomi, or comparable platforms might be in use — are not named in any public corporate disclosure. Resolution of both gaps requires procurement-level disclosure or direct vendor confirmation.

Surveillance, Biometrics & Retail Technology

Facial Recognition & Biometric Identification

No public evidence identified of Porsche AG deploying facial recognition, biometric identification, behavioural analytics, or gait analysis technologies of Israeli origin — including Trigo, BriefCam, AnyVision/Oosto, or Trax — at dealerships, manufacturing facilities, or corporate premises. Porsche AG operates a relatively exclusive, low-volume retail model compared to mass-market automotive OEMs; no press reporting, NGO investigation, or retail technology trade publication within training data documents Israeli-origin biometric or video analytics technology in this context ⁴⁵.

Workforce & Facility Monitoring

No public evidence identified of Israeli-origin predictive analytics, social media monitoring, or workforce surveillance tools deployed by Porsche AG at any facility. The Palantir analytics engagement ³ relates to manufacturing and supply-chain data and is US-origin; no Israeli-origin equivalent has been publicly disclosed.

Customer & Retail Analytics

No public evidence identified of Israeli-origin customer analytics, shelf-intelligence, or in-store tracking systems deployed at Porsche retail outlets. Porsche’s authorised dealer network operates with a degree of commercial independence across markets, and dealer-level use of third-party retail analytics platforms — including Israeli-origin tools — would not appear in Porsche AG corporate filings and cannot be verified from training data alone. This constitutes a structural evidence gap.

Third-Party & Bundled Deployment

No public evidence identified of Israeli-origin surveillance or analytics technologies reaching Porsche AG indirectly via managed security services, third-party platform providers, or bundled enterprise software suites ⁵⁶.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Primary Cloud Infrastructure

Porsche AG’s primary disclosed cloud infrastructure runs on Microsoft Azure, established under the 2021 connected vehicle platform partnership ¹. No Israel-specific Azure data residency arrangement, regional endpoint, or sovereign cloud configuration has been publicly documented for Porsche AG. The VW Group Annual Report confirms the group’s cloud strategy is anchored to major hyperscaler platforms ⁷.

Data Centre Operations in Israel

No public evidence identified of Porsche AG operating, leasing, or co-locating data centre infrastructure within Israel. Porsche AG’s Sustainability Report and Annual Report contain no reference to Israeli data centre assets or regional cloud nodes ⁴⁵.

Government Cloud Programmes

Porsche AG is an automotive manufacturer with no publicly documented participation in government cloud initiatives. No evidence identified of involvement with Israel’s Project Nimbus or any comparable state-backed digital infrastructure programme. No Israeli government procurement record, tender disclosure, or official announcement links Porsche AG to state cloud contracting in any capacity ⁴⁷.

Digital Sovereignty & Resilience Services

No public evidence identified of Porsche AG providing services marketed or contracted to ensure digital sovereignty, data residency, or infrastructure resilience for Israeli state institutions, military bodies, or government-affiliated entities.

Defence, Intelligence & Security Sector Technology Relationships

Military & Intelligence Contracts

No public evidence identified of any contract, partnership, or service agreement between Porsche AG and the Israeli Ministry of Defence, Israel Defence Forces (IDF), Israeli domestic intelligence (Shin Bet), foreign intelligence (Mossad), signals intelligence (Unit 8200), or any other Israeli state security body. No Israeli MoD procurement disclosure, defence directory entry, or trade press report within training data names Porsche AG in this context ⁴⁷.

Dual-Use Technology Provision

No public evidence identified of Porsche AG’s commercially available technology — including vehicle platforms, software systems, or data analytics capabilities — being reported, confirmed, or documented as deployed for military, intelligence, or law enforcement surveillance applications within Israel or the occupied Palestinian territories.

Offensive Cyber & Weapons Systems

No public evidence identified. Porsche AG is an automotive OEM with no publicly documented involvement in offensive cyber capability development, zero-day exploit tooling, or digital weapons systems. The company’s disclosed technology activities — vehicle development, manufacturing analytics, customer connectivity — have no publicly documented dual-use military application ⁴⁵³.

Export Control & Sanctions Record

No public evidence identified of regulatory inquiries, export control actions, or sanctions-related investigations involving Porsche AG’s technology sales or services to Israeli state entities. No EU export control database entry, German BAFA licensing record, or US BIS Entity List reference implicates Porsche AG in controlled technology transfers to Israel or occupied territories within training data ⁴⁵.

AI, Algorithmic & Autonomous Systems

AI Provision to State or Military Bodies

No public evidence identified of Porsche AG providing artificial intelligence, machine learning, computer vision, or autonomous decision-support systems to Israeli state, military, or security bodies. Porsche AG’s disclosed AI and algorithmic activity is focused on three internal domains: autonomous and assisted-driving vehicle development, manufacturing process optimisation (via the Palantir partnership), and customer experience personalisation ³⁶. None of these programmes has been publicly linked to Israeli state or military customers.

Training Data & Dataset Provenance

No public evidence identified of Porsche AG’s AI models or platforms being trained on, or provided access to, civilian population data, intercepted communications, or surveillance-derived datasets originating from Israel or the occupied territories ⁵⁶.

Autonomous & Lethal Systems

No public evidence identified of Porsche AG supplying autonomous targeting systems, automated threat-classification tools, or autonomous tracking infrastructure to any military or security force, Israeli or otherwise. Porsche AG’s autonomous systems work — conducted through Porsche Digital GmbH and in collaboration with the VW Group’s broader autonomous vehicle research — is civil and commercial in scope ⁶⁸.

Algorithmic Discrimination & Profiling

No public evidence identified of Porsche AG’s algorithmic or AI systems being deployed in ways documented by civil society organisations, regulators, or academic researchers as enabling population profiling, discriminatory targeting, or ethnicity-based classification in any jurisdiction ⁵.

Technology Ecosystem & R&D Footprint

Israeli R&D Facilities

No public evidence identified of Porsche AG operating research and development facilities, engineering offices, innovation labs, or accelerator programmes within Israel. Porsche Digital GmbH’s publicly documented technology hub network spans Stuttgart, Berlin, Atlanta, and other locations; no Israeli office, lab, or co-working presence has been publicly announced as of the training-data cutoff ⁶⁸. The VW Group Annual Report, which covers group-level R&D investments and facility locations, contains no reference to Israeli R&D infrastructure attributable to Porsche AG ⁷.

Corporate Venture & Startup Investment

Porsche Ventures, the corporate venture capital arm, has a publicly documented portfolio concentrated in European and North American startups spanning mobility, energy, and deeptech sectors ⁹. No Israeli startup investment has been publicly confirmed in Porsche Ventures’ disclosed portfolio through 2024. The full Porsche Ventures portfolio is not comprehensively published; early or seed-stage investments in Israeli startups would not necessarily generate public press coverage, constituting a structural evidence gap ⁹¹⁰.

Acquisitions & Strategic Investments

No public evidence identified of Porsche AG or Porsche SE acquiring Israeli-origin technology companies or making strategic investments in Israeli technology startups, Israeli venture funds, or Israeli technology accelerator programmes ¹⁰. Porsche SE’s Annual Report, which documents the holding company’s investment activities, contains no disclosed Israeli technology asset ¹⁰.

Patent & Intellectual Property Co-Development

No public evidence identified of significant patent portfolios, co-development arrangements, or licensing agreements between Porsche AG and Israeli-domiciled entities or research institutions — including the Technion (Israel Institute of Technology), Hebrew University of Jerusalem, or Weizmann Institute of Science. A targeted co-assignee filing search at the European Patent Office or USPTO for Porsche AG and Israeli institutions could not be conducted due to search tool unavailability and represents a structural evidence gap ⁴.

VW Group Umbrella Contracts

Volkswagen Group negotiates group-wide enterprise technology agreements — including the disclosed SAP and Microsoft relationships — that bind Porsche AG as a subsidiary ⁷². If any current or future group-level agreement includes Israeli-origin technology vendors, it may apply to Porsche AG without generating a Porsche-specific press release. VW Group’s full vendor list is not publicly disclosed, and this gap cannot be resolved from public records alone.

Civil Society Scrutiny & Regulatory History

NGO & Academic Investigations

No public evidence identified of any published NGO investigation, academic study, or UN Special Rapporteur report specifically addressing Porsche AG’s technology relationships with the Israeli state, its operations in occupied territories, or its provision of technology to bodies engaged in surveillance or control of Palestinian populations. Major technology-sector civil society investigations documented in training data — including Amnesty International Tech, Access Now, Human Rights Watch technology reports, and Privacy International research — do not include Porsche AG as a named subject in this context ⁵.

Boycott, Divestment & Sanctions Campaigns

No public evidence identified of organised boycott, divestment, or sanctions (BDS) campaigns specifically targeting Porsche AG in relation to technology provision to Israel or operations in occupied territories. The BDS movement’s publicly documented corporate targets, as reflected in training data, have focused primarily on defence contractors, technology firms with direct Israeli government contracts, and mass-market consumer goods companies. Porsche AG does not appear in this category in available training data ⁴⁵.

Regulatory & Legal Actions

No public evidence identified of regulatory inquiries, legal challenges, export control enforcement actions, or sanctions proceedings involving Porsche AG’s technology transfers, sales, or services to Israeli state entities or to entities operating in occupied territories ⁴⁷.

Live Civil Society Database Gap

Databases maintained by Who Profits Research Center, AFSC Investigate, Don’t Buy Into Occupation, and comparable civil society registries — which constitute the primary reference sets for corporate-level technology provision scrutiny — could not be queried due to search tool unavailability during research. These registries must be consulted directly before this section can be considered complete. Any assessment of civil society classification of Porsche AG in this domain should treat the above findings as provisional pending live database checks.

End Notes