INDEX / DIRECTORY / REVOLUT / V-DIG

Revolut V-DIG

DIGITAL INFRASTRUCTURE AUDIT UPDATED 2026-05-19
V-DIG Score 1.45 /10 E Revolut — BDS-1000 132
V-DIG 1.45

Evidence-only forensic audit. Scoring happens downstream — see the main dossier for the composite assessment.

V-DIG Audit — Revolut Ltd

Audit Phase: V-DIG (Digital Forensics / Technology Supply Chain) Target Entity: Revolut Ltd / Revolut Group Holdings Ltd Audit Date: 2026-05-01

Enterprise Technology Stack & Vendor Relationships

Cloud Infrastructure

Revolut operates a documented multi-cloud architecture anchored by two hyperscale providers. A 2021 partnership with Amazon Web Services (AWS) was publicly confirmed through fintech trade press as part of a cloud migration programme 1. Google Cloud Platform (GCP) serves as a secondary cloud provider, confirmed through Google’s published customer story 2. Neither AWS nor GCP is an Israeli-origin vendor. Both hyperscalers operate availability zones within Israel, but no public disclosure confirms that Revolut routes traffic or stores data through Israeli-region infrastructure as a deliberate design choice. The company’s use of these platforms is documented as general global cloud infrastructure. Revolut’s broader financial position — a $45 billion valuation following an $800 million raise in August 2024 3 and a UK banking licence granted by the Prudential Regulation Authority in July 2024 4 — confirms the scale of the enterprise underpinning these infrastructure choices.

Observability & Monitoring

Datadog (NASDAQ: DDOG; US-origin, co-founded by French engineers) is confirmed as Revolut’s observability and infrastructure monitoring platform via a Datadog published customer reference 5. Datadog maintains an R&D office in Tel Aviv, but is classified as a US-origin vendor and is not an Israeli-founded or Israeli-controlled company. No Israeli-origin observability or monitoring tool has been identified in Revolut’s documented stack.

Communications

Twilio (US-origin, San Francisco) was confirmed as Revolut’s customer communications and SMS/OTP delivery platform as of 2020 6. Twilio is a US-founded, NYSE-listed company with no Israeli origin.

Identity Verification / KYC

Onfido (UK-origin, founded in London) was confirmed as an identity document verification and facial liveness provider for Revolut through a 2019 Onfido press release 7. Onfido was subsequently acquired by Entrust (US) in 2024. It is not an Israeli-origin vendor. Jumio (US/German-origin) has also been referenced in fintech trade press as an identity verification tool used by Revolut in certain markets 8. Neither vendor has Israeli origins.

Edge & Network Security

Cloudflare (US-origin, NYSE: NET) is referenced in published case study materials as providing DDoS mitigation and edge security services to Revolut 9. Cloudflare is a US-founded company with no Israeli origin.

Israeli-Origin Cybersecurity Vendors — Specific Verification

Each of the following Israeli-origin or Israeli co-founded vendors was individually investigated against press release archives, Revolut’s published tech blog, annual reports, and fintech trade press:

Internal Technology Stack

Revolut’s engineering blog documents use of Kotlin, gRPC, Apache Kafka, and PostgreSQL as core internal stack components 14. These are open-source or US-origin tools. No Israeli-origin technology components appear in Revolut’s documented internal stack.

Procurement & Systems Integrators

No confirmed systems integrator, digital transformation consultancy, or IT outsourcing partner has been publicly identified for Revolut that has mandated or deployed Israeli-origin technology on Revolut’s behalf. No public evidence identified.

Surveillance, Biometrics & Retail Technology

Facial Recognition & KYC Biometrics

Revolut uses selfie and facial liveness-check technology as part of its regulated KYC onboarding flow. The confirmed and publicly documented vendor for this function is Onfido (UK-origin) 7 8, which uses passive facial liveness detection — a standard regulated KYC function distinct from surveillance-grade facial recognition. Onfido’s technology is not classified as a mass-surveillance or law enforcement biometric product.

No verified use of the following Israeli-origin biometric or surveillance vendors has been identified in connection with Revolut:

Predictive Analytics & Internal ML

Revolut operates internal machine learning pipelines for fraud detection and anti-money laundering (AML), as documented in its tech blog 14 15. These are proprietary internal models, not procured from Israeli-origin vendors, and are deployed for standard regulated financial crime controls rather than surveillance purposes.

Third-Party Surveillance Deployment

No evidence has been identified that Israeli-origin surveillance or monitoring technologies reach Revolut via third-party platforms, managed security services, or bundled enterprise suites. No public evidence identified.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Data Centre Operations in Israel

Revolut launched retail financial services in Israel in approximately 2022 16. Serving customers in Israel imposes data residency and regulatory obligations under Israeli financial law. However, no public disclosure — including Revolut’s annual reports 17, investor materials, or trade press coverage — specifies whether Revolut co-locates in Israeli data centres directly or routes Israeli customer data through AWS or GCP Israeli availability zones. AWS launched its Israel (Tel Aviv) region in 2023; GCP has also announced Israeli infrastructure. Any use of these regions for Israeli customer data would constitute indirect hyperscaler infrastructure use rather than direct data centre operation or lease. No direct data centre operation or co-location agreement in Israel publicly confirmed.

Project Nimbus Participation

Project Nimbus is the Israeli government’s $1.2 billion cloud contract awarded jointly to Google Cloud and AWS in 2021, providing core cloud infrastructure to Israeli government ministries, the IDF, and other state bodies. Revolut is a documented customer of both AWS 1 and GCP 2, but commercial cloud customers of these hyperscalers are entirely separate from the Project Nimbus contracting structure. Project Nimbus contracts are between the Israeli state and the cloud providers as prime contractors; enterprise customers of those same cloud platforms have no Nimbus contractual relationship or subcontractor status. No public evidence that Revolut participates in, is a subcontractor under, or has any contractual relationship with Project Nimbus or any comparable Israeli state cloud programme.

Sovereign Cloud & State Infrastructure

Revolut is a consumer and SME financial services provider. It is not a cloud services vendor, telecommunications infrastructure operator, or data sovereignty supplier. It does not offer infrastructure resilience or cloud capabilities to state institutions as a commercial product. No public evidence identified.

Defence, Intelligence & Security Sector Technology Relationships

Military & Intelligence Contracts

Revolut is a retail and business banking fintech with no documented defence or intelligence contracting activity. No verified contracts, partnerships, service agreements, or operational relationships between Revolut and the Israeli Ministry of Defence, Israel Defence Forces (IDF), Mossad, Shin Bet, or any other Israeli state security body have been identified in any source class reviewed, including Israeli MoD procurement records, Jane’s defence reporting, or Reuters and FT defence coverage 17 4. No public evidence identified.

Dual-Use Technology Provision

No public reports, official confirmations, or researcher documentation of Revolut’s commercially available technology — including its payments infrastructure, KYC systems, fraud-detection models, or data platforms — being deployed for military, intelligence, or law enforcement surveillance applications within Israel or the occupied Palestinian territories have been identified. No public evidence identified.

Offensive Cyber & Weapons Technology

Revolut develops no offensive cyber capabilities and is not a cybersecurity product vendor. Its technology portfolio consists entirely of consumer and business financial services products. No public evidence identified.

AI, Algorithmic & Autonomous Systems

Internal AI/ML Deployment

Revolut’s AI and ML capabilities are deployed internally across four documented use cases: fraud scoring, credit decisioning, FX rate optimisation, and customer support automation 14 15. These are internal commercial systems subject to standard financial services regulation. The fraud detection machine learning infrastructure is described in Revolut’s tech blog as proprietary and internally maintained 15.

AI Provision to State or Military Bodies

No verified provision of AI/ML platforms, trained models, inference services, or algorithmic decision-making infrastructure to Israeli state bodies, military units, or security agencies has been identified. No public evidence identified.

Training Data Provenance

No public reports or researcher documentation of Revolut’s AI models being trained on data derived from Israeli civilian populations, intercepted communications, biometric surveillance datasets, or military-sourced data have been identified. No public evidence identified.

Autonomous Systems & Lethal Applications

Autonomous weapons, lethal decision systems, and autonomous drone technologies are entirely outside Revolut’s business domain and product portfolio. No public evidence identified and not applicable.

Technology Ecosystem & R&D Footprint

Engineering Offices & R&D Centres

Revolut’s documented engineering and product offices span: London (HQ), Vilnius (Lithuania, major engineering hub), Kraków (Poland), Bucharest (Romania), Porto (Portugal), and Bengaluru (India), as evidenced by its careers pages, annual report entity disclosures, and LinkedIn company presence 17 14. No Israeli engineering office, innovation lab, accelerator presence, or R&D centre has been identified in public sources. A structural evidence gap exists: subsidiary-level company registrations in smaller jurisdictions are not always prominently publicised, and the absence of public announcement does not conclusively rule out a small operational presence. No public evidence of an Israeli R&D centre identified.

Acquisitions

Revolut’s acquisition history, as reflected in Crunchbase and corporate filings, includes Nobly (UK POS, acquired pre-2020), Splice Machine (US data platform, 2023), and a small number of other transactions 18. No acquisition of an Israeli-origin technology company has been identified in any reviewed source. No public evidence identified.

Venture & Strategic Investments

Revolut’s confirmed investors include SoftBank Vision Fund and Tiger Global Management 19. No publicly confirmed investment by Revolut into Israeli technology venture funds, Israeli startups, or Israeli-domiciled technology entities has been identified. No public evidence identified.

Patents & Academic Co-Development

No co-development arrangements, patent licensing agreements, or joint R&D relationships between Revolut and Israeli academic institutions — including the Technion–Israel Institute of Technology, Hebrew University of Jerusalem, or Weizmann Institute of Science — or any Israeli-domiciled entity have been identified in patent databases or public disclosures. No public evidence identified.

Israeli Tech Ecosystem Hiring

No verified sourced report documents systematic or intentional recruitment from the Israeli technology ecosystem into Revolut’s engineering workforce. Individual employee-level background data is not a reliable audit input. No public evidence of organised or material Israeli tech ecosystem hiring identified.

Civil Society Scrutiny & Regulatory History

NGO Documentation & Academic Reports

The Who Profits Research Center, an Israeli NGO that maintains a corporate database documenting company involvement in Israeli settlement infrastructure and military occupation-related activities, does not list Revolut in its published corporate profiles across fintech, digital payments, and banking technology categories 20. No Who Profits profile on Revolut identified.

The BDS National Committee’s published campaign targets 21 focus primarily on weapons manufacturers, agricultural exporters, and major technology companies (Google, Amazon, HP, Microsoft, Hewlett Packard Enterprise) with direct operational, contractual, or infrastructural ties to Israeli military bodies or settlement enterprises. Revolut is not listed as a BDS campaign target. No public evidence identified.

Amnesty Tech, Access Now, and the Electronic Frontier Foundation — all of which have published surveillance and technology accountability reporting relating to Israel and the occupied territories — have not published material specifically examining Revolut’s technology supply chain relationships. No public evidence identified.

Boycott & Divestment Campaigns

No organised BDS or divestment campaign specifically targeting Revolut on grounds of Israeli technology relationships has been identified in NGO communications, activist publications, trade union motions, or social media campaigns reviewed in training data. No public evidence identified.

Regulatory & Legal Actions

Revolut’s regulatory history includes several actions, none of which relate to Israeli technology relationships:

No regulatory inquiries, export control actions, sanctions-related investigations, or legal challenges involving Revolut’s technology relationships with Israeli state entities or Israeli-origin technology vendors have been identified in any reviewed source class.

End Notes

Footnotes

  1. https://www.fintechfutures.com/2021/revolut-aws-cloud-migration/ ↩ ↩2

  2. https://cloud.google.com/customers/revolut ↩ ↩2

  3. https://www.reuters.com/business/finance/revolut-raises-800-million-45-billion-valuation-2024-08-15/ ↩

  4. https://www.ft.com/content/revolut-banking-licence-uk-2024 ↩ ↩2 ↩3

  5. https://www.datadoghq.com/customers/revolut/ ↩

  6. https://www.twilio.com/blog/revolut-customer-communications ↩

  7. https://onfido.com/press/revolut-partnership/ ↩ ↩2

  8. https://www.finextra.com/newsarticle/revolut-kyc-identity ↩ ↩2

  9. https://www.cloudflare.com/case-studies/revolut/ ↩

  10. https://www.checkpoint.com/press/ ↩

  11. https://investors.sentinelone.com/news-releases/ ↩

  12. https://www.paloaltonetworks.com/customers ↩

  13. https://investors.verint.com/news-releases ↩

  14. https://medium.com/revolut ↩ ↩2 ↩3 ↩4 ↩5

  15. https://techcrunch.com/2022/09/16/revolut-data-breach/ ↩ ↩2 ↩3 ↩4

  16. https://en.globes.co.il/en/article-revolut-israel-launch-1001426000 ↩

  17. https://find-and-update.company-information.service.gov.uk/company/08804411/filing-history ↩ ↩2 ↩3

  18. https://www.crunchbase.com/organization/revolut/acquisitions ↩

  19. https://www.bloomberg.com/news/articles/2021-07-15/revolut-raises-800-million ↩

  20. https://www.whoprofits.org/ ↩

  21. https://bdsmovement.net/Act-Now-Against-These-Companies-Profiting ↩

  22. https://register.fca.org.uk/s/firm?id=0014G00002W4eHNQAZ ↩

  23. https://www.thetimes.co.uk/article/revolut-sanctions-screening-failures ↩

  24. https://iapp.org/news/a/revolut-dpc-ireland-investigation/ ↩