Ryanair

Target Profile

• Company: Ryanair Holdings plc
• Jurisdiction: Ireland (EU)
• Headquarters: Swords, County Dublin, Ireland
• Sector: Commercial aviation (low-cost carrier)
• Relevant operating footprint: Scheduled passenger services across 40+ countries; network concentrated in the EU, United Kingdom, and North Africa (Morocco); direct routes to Tel Aviv Ben Gurion Airport (TLV) and Ramon Airport (Eilat)
• Key executives or governance actors: Michael O’Leary (Group CEO, significant personal shareholder)
• BDS-1000 score: 147
• Tier: E

Executive Summary

Ryanair Holdings plc is a pure-play low-cost scheduled passenger carrier, incorporated in Ireland and dual-listed on Euronext Dublin and Nasdaq. Its BDS-1000 composite score of 147 (Tier E) places it at the lowest end of the scoring spectrum — a finding that reflects the structure of its business model rather than any exculpatory political stance.

The dominant driver of the score is V-ECON, where Ryanair’s direct operation of scheduled services to Tel Aviv Ben Gurion Airport (TLV) and Ramon Airport (Eilat) constitutes confirmed, recurring commercial activity extracting revenue from the Israeli travel economy. This is a transactional relationship — standard route market operations — with no evidence of Israeli capital investment, acquisition activity, R&D presence, or infrastructure integration that would elevate it beyond the “Sustained Trade” rubric band.

V-POL contributes a small secondary score reflecting the business-as-usual normalisation implicit in treating Israel as a standard commercial market in corporate disclosures and annual reports. No political advocacy, lobbying, donations, state honours, settlement operations, or crisis asset mobilisation directed at any party to the conflict has been identified across the full audit period (October 2023 – April 2026). Ryanair’s public communications on the conflict have been limited to operational safety advisories.

V-DIG scores negligibly. Ryanair operates a largely proprietary and AWS-based technology stack; no Israeli-origin software vendor has been positively identified, and no digital services are provided to any Israeli state or security entity.

V-MIL scores zero. Every sub-category of the military audit returned no positive evidence. Ryanair has no defence contracts, no dual-use products, no munitions involvement, and no pathway into this domain consistent with its civilian LCC operating model.

The overall picture is of a company with a commercially routine but factually confirmed transactional relationship with the Israeli aviation market — one that was demonstrably suspended on safety grounds during the acute conflict period and resumed on commercial grounds thereafter. Evidence limits are modest: Israeli route-specific revenue is not publicly disclosed, board composition data extends only to the FY2024 governance cycle, and the theoretical possibility of incidental Israeli-origin tooling in Ryanair’s enterprise stack cannot be entirely excluded from the V-DIG analysis. None of these gaps materially threatens the Tier E classification.

Timeline of Relevant Events

Corporate Overview

Ryanair Holdings plc is Europe’s largest low-cost carrier by passenger volume, operating scheduled passenger services across more than 40 countries. The group is incorporated under Irish law, headquartered in Swords, County Dublin, and dual-listed on Euronext Dublin and Nasdaq (ticker: RYAAY).¹² Its primary Air Operator’s Certificate (AOC) is issued by the Irish Aviation Authority under EASA frameworks.

The group’s operating subsidiaries include Ryanair DAC (the principal Irish-licensed carrier), Ryanair UK (a separate CAA-licensed entity established post-Brexit to preserve UK cabotage rights), Buzz (a Polish-registered subsidiary operating Central and Eastern European routes), and Lauda Europe (a Vienna-based subsidiary operating under an Austrian AOC, acquired from the estate of Niki Lauda).¹³ A Malta Air subsidiary was previously used for fleet and crew structuring but has been reabsorbed into the Ryanair DAC umbrella.¹³

The group’s commercial strategy is built entirely around high-frequency, high-density short-haul scheduled passenger services, ancillary revenue maximisation, and aggressive cost discipline. It operates an all-Boeing 737 fleet — currently 737-800 and 737 MAX 8/10 variants — and has no cargo, freight, or long-haul business. CEO Michael O’Leary has held the role since 1994 and retains a meaningful personal shareholding; institutional ownership is concentrated among large European and US asset managers including Baillie Gifford, Vanguard, and BlackRock-family funds.²

Domain Summaries

V-MIL: Military

Mechanism of Involvement

Ryanair has no involvement — direct, indirect, or historical — in any category of activity evaluated under the V-MIL domain. The audit systematically reviewed six sub-categories: direct defence contracting and procurement; dual-use products and tactical variants; heavy machinery, construction, and infrastructure; supply chain integration with defence primes; logistical sustainment and base services; and munitions, weapons systems, and strategic platforms. Each returned no positive evidence.¹⁴

The structural reason for this null finding is Ryanair’s business model. The airline is a pure-play civilian passenger carrier operating exclusively under civil Air Operator Certificates issued by the Irish Aviation Authority and overseen by EASA. Its published terms and conditions explicitly exclude the carriage of dangerous goods beyond standard IATA passenger categories.¹⁴ It has no cargo or freight division, which eliminates the primary route by which troop-lift, materiel transport, or logistics contracts typically enter a commercial airline’s revenue base. It does not own or operate airports, does not undertake airfield construction, and does not provide ground-infrastructure services, precluding any military construction or base-services pathway.¹⁵

Ryanair’s fleet consists entirely of Boeing 737-800 and 737 MAX 8/10 aircraft operated in standard commercial passenger configuration.¹⁶ The airline has no recorded involvement in modification programmes, special-mission conversions, or technology-transfer activity associated with dual-use aerospace capabilities. Its major fleet order — up to 300 737 MAX 10 aircraft, announced in 2023 — is documented purely as a commercial passenger-capacity purchase.³

Ryanair’s primary supply chain relationships are with Boeing (aircraft) and CFM International (LEAP-1B engines for 737 MAX variants). Both Boeing and CFM are significant defence primes or subsidiaries thereof. However, Ryanair’s relationship with these companies is exclusively as a commercial end-user customer purchasing civil-certified aircraft and engines. No contractual arrangements, joint ventures, data-sharing agreements, or co-development programmes constituting integration into a defence supply chain have been identified.¹⁶ MRO activities are conducted through third-party providers and Ryanair’s internal technical organisation; no MRO partner has been identified performing defence work on Ryanair’s behalf or under a shared facility arrangement with military end-use.

Ryanair does operate scheduled services to airports co-located with or proximate to military facilities — including Dublin, Brussels Charleroi, and Torp Sandefjord — but no evidence indicates these operations service military tenants or functions.¹⁵ Jet fuel is purchased through standard commercial bulk contracts with no identified link to military fuel supply chains or defence logistics frameworks.

The airline’s regulatory and legal history is extensive but confined entirely to civil aviation, consumer protection, labour relations, and competition law. No export licence applications, denials, or violations; no sanctions-related findings; no dual-use export control proceedings; and no arms-embargo breaches have been identified in any jurisdiction.¹⁴

Counter-Arguments and Evidence Limits

The most plausible challenge to a zero V-MIL score concerns Ryanair’s supplier relationships with Boeing and CFM International, both of which derive substantial revenues from defence programmes. One could argue that commercial revenues from Ryanair contribute, at several degrees of remove, to Boeing’s and CFM’s capacity to pursue defence contracts. The rubric, however, requires evidence of Ryanair’s own integration into a defence supply chain — not the existence of a defence business in the supply chain above it. The customer relationship runs in the opposite direction: Ryanair is a buyer of civilian-certified products, not a contractor or partner in any defence programme.

A second potential challenge concerns Ryanair’s presence at airports co-located with military facilities. In theory, revenue paid as landing fees to such airport operators could cross-subsidise military infrastructure. No evidence has been identified that any such cross-subsidy exists; airport-operator finances in the identified cases are subject to EU state-aid rules that generally require separation of commercial and public-service accounts.¹⁷ This argument is speculative and unsupported by any evidence in the audit record.

No civil society investigation, NGO report, or journalistic inquiry has raised concerns about Ryanair’s involvement in defence contracting, arms supply chains, dual-use technology, or military operations. The absence of any third-party allegation, in a context where Ryanair faces sustained and detailed civil society scrutiny in other domains (environment, labour, passenger rights), is itself meaningful corroborating evidence for the null finding. The primary evidence gap is the absence of a comprehensive audit of all Ryanair MRO subcontractor relationships; if any subcontractor performed defence work under arrangements opaque to public disclosure, that would not have been captured. The likelihood of material undisclosed defence activity in this context is assessed as very low.

Named Entities and Evidence Map

V-DIG: Digital

Mechanism of Involvement

Ryanair’s digital footprint is substantial — it is one of Europe’s most digitally self-sufficient airlines — but its V-DIG score is negligible because the relevant question is not the scale of its digital operations but whether those operations involve provision of technology, data, or digital infrastructure to Israeli state, military, or security entities. No such provision has been identified.¹⁸

Ryanair’s core technology strategy is built around Ryanair Labs, its in-house product engineering organisation headquartered in Dublin with an additional hub in Madrid. Labs employs several hundred engineers, data scientists, and UX designers and is responsible for ryanair.com, the mobile app, and internal tooling.¹⁸ The airline uses Navitaire (now an Amadeus company) as its passenger service system for reservations, check-in, and departure control. Amazon Web Services (AWS) is identified as the primary cloud infrastructure provider, with significant workloads including the booking engine and analytics platforms migrated to AWS.¹⁹ Microsoft Azure and Microsoft 365 are present for productivity and identity management functions.

The most significant V-DIG finding in the audit is Ryanair’s facial biometric verification programme, applied to passengers booking through third-party online travel agencies (OTAs) such as eDreams, Kiwi.com, and Lastminute.com. Passengers originating from OTAs are required to submit facial imagery to verify identity before check-in proceeds.²⁰ Ryanair frames this as fraud prevention; critics, including the European Consumer Organisation BEUC and Spain’s data protection authority AEPD, characterise it as a disproportionate competitive deterrent against OTA-sourced bookings.^{5 9} The AEPD has launched a formal investigation under GDPR Article 9 regarding whether the collection of facial biometric data satisfies the explicit consent requirements for special-category data.⁹

This biometric programme is legally and technically significant in the EU context but is entirely unrelated to Israel or the Israel-Palestine conflict. It is deployed against OTA-sourced passengers across Ryanair’s European network; there is no evidence it operates differently for passengers booking Israeli routes, and no evidence it involves data-sharing with any Israeli entity, government, or security service.

Ryanair’s use of machine learning for dynamic pricing and personalised ancillary recommendations is well-documented and commercially driven.¹⁸ CEO Michael O’Leary has publicly described AI as a lever for further cost reduction and ancillary conversion.²¹ These systems are standard revenue management tools without defence or dual-use application. No AI or algorithmic system deployed by Ryanair in safety-critical aviation operations beyond standard manufacturer-supplied avionics has been identified.

Ryanair operates across more than 40 European countries; its primary data processing entities are incorporated in Ireland, making the Irish Data Protection Commission (DPC) its lead GDPR supervisory authority. No participation in sovereign cloud programmes, government-directed data localisation arrangements, or cloud infrastructure relationships with Chinese, Russian, or non-Western hyperscalers has been identified.¹⁹

The scoring rationale for V-DIG (I=1.50, M=1.00, P=1.00) reflects a conservative ceiling rather than a confirmed floor: no specific Israeli-origin software vendor has been positively identified in Ryanair’s stack. The impact score of 1.50 acknowledges the theoretical possibility of incidental Israeli-origin tooling within an enterprise stack of this scale — consistent with the rubric’s Band 1.0–2.0 (passive commercial consumption) — while the absence of confirmed Israeli-origin procurement makes a score of 0.0 technically defensible. In composite terms, this uncertainty is immaterial: V-DIG contributes only 0.03 to the BDS-1000 score.

Counter-Arguments and Evidence Limits

The principal challenge to the near-zero V-DIG score would be the discovery of an undisclosed Israeli-origin software or data vendor in Ryanair’s enterprise stack. Ryanair does not publicly disclose a comprehensive vendor list; enterprise stacks of this scale routinely incorporate dozens of third-party SaaS and analytics tools that may not be individually identified in public-facing documentation. If a material Israeli-origin vendor were embedded in Ryanair’s checkout flow, analytics infrastructure, or cybersecurity tooling, the audit would not have captured it. This gap is inherent to the available evidence base and is acknowledged in the scoring confidence notes.

A second potential challenge concerns the myRyanair digital identity platform, which stores passenger personal data including stored payment credentials and preferences. If any component of this platform or its hosting infrastructure involved Israeli-origin technology, that would represent a closer digital relationship than currently scored. No evidence supports this hypothesis; the platform is operated by Ryanair Labs under AWS infrastructure and Irish data protection law.

The AEPD biometric investigation is an ongoing regulatory proceeding as of the audit date; its outcome is unknown. An adverse finding with significant remedial requirements could affect Ryanair’s data processing practices but would not alter the V-DIG score’s Israel-relevance dimension, as the programme is not connected to Israel. Ryanair’s NIS2 exposure as a critical transport infrastructure operator is noted; no cybersecurity breach notification or NIS2 compliance enforcement action has been publicly identified.

Named Entities and Evidence Map

V-ECON: Economic

Mechanism of Involvement

V-ECON is the dominant scoring domain for Ryanair, generating the highest V-Domain Score (2.06) and therefore the V_MAX value that anchors the composite BDS-1000 calculation. The finding rests on a single well-evidenced structural fact: Ryanair directly operates scheduled passenger services to and from Tel Aviv Ben Gurion Airport (TLV) and Ramon Airport (Eilat) under its own Air Operator’s Certificate, generating recurring transactional revenue from the Israeli travel economy.^{22 23}

The mechanism of economic involvement is entirely transactional. Ryanair sells tickets to Israeli-origin and Israel-destined passengers, pays landing and handling fees to Ben Gurion and Ramon airport operators, and generates ancillary revenue (seat selection, bags, priority boarding) from the same passenger population. This is a direct commercial relationship in which Ryanair extracts revenue from the Israeli market as a matter of standard route operations. There is no capital investment flowing in the opposite direction: no Israeli R&D centre, no acquisition of Israeli companies, no data centre or cloud infrastructure in Israel, and no physical offices or operational assets located in Israeli territory beyond transient aircraft turnarounds.^{22 23}

The rubric classification of Sustained Trade (Band 3.1–3.9) for Impact is correct and well-grounded. The relationship is multi-year, direct, and recurring — not incidental or one-time. The temporary suspension of Israeli services following the October 2023 Hamas attack, and their phased resumption from mid-2024 onward, confirms that the relationship was interrupted purely by safety and airspace considerations rather than any policy decision, and that commercial resumption was the default outcome once conditions permitted.²² This pattern — suspension as operational response, resumption as commercial default — is precisely the conduct described by the rubric’s Business-as-Usual and Sustained Trade bands.

The Magnitude score of 4.50 (Modest Presence) reflects the structural position of Israeli routes within Ryanair’s overall network. Israel is one market among 40+ country destinations served by an airline carrying over 180 million passengers annually.²⁴ Ryanair’s public financial reporting does not disaggregate revenue by individual country, so the precise revenue share attributable to TLV and Eilat routes cannot be directly measured. The estimate of “modest presence” is inferred from the confirmed multi-year service history and the relative scale of Israel’s aviation market against Ryanair’s total network. The suspension period (October 2023 – mid-2024) demonstrates that the Israeli market is not operationally indispensable to Ryanair; the group absorbed the suspension without reporting a material financial impact attributable to this specific market.⁷

The Proximity score of 7.50 reflects the direct commercial relationship: Ryanair itself is the operating entity contracting with Israeli airport operators and selling directly to Israeli-market passengers. There is no intermediary, subsidiary, or franchise arrangement that would create distance between Ryanair Holdings plc and the Israeli economic relationship.²²

Ryanair’s broader economic structure reinforces the absence of deeper Israeli integration. The airline’s primary capital commitment is to its Boeing fleet order book, with no identified Israeli investment, joint venture, or acquisition activity.²⁵ Its operational network beyond Israel is concentrated entirely within OECD and EU-adjacent geographies; its most distant non-EU/UK exposure is North Africa (principally Morocco), with no operational presence in Libya, Algeria, or other jurisdictions of heightened V-ECON concern.²⁴ The group is incorporated in Ireland, subject to Irish corporate tax law and transitioning to the OECD Pillar Two 15% minimum effective rate.²⁶ No profit-shifting arrangements, transfer pricing disputes, or tax authority actions involving jurisdictions of V-ECON concern have been identified.

The multi-subsidiary group structure (Ryanair DAC, Ryanair UK, Buzz, Lauda Europe) was motivated by EU airline ownership and control rules and post-Brexit cabotage considerations, not by Israeli market considerations.¹³ No special-purpose entity, holding structure, or financial instrument associated with Israeli capital markets or Israeli state investment has been identified in available corporate filings.

Counter-Arguments and Evidence Limits

The strongest challenge to the V-ECON scoring would be evidence that Israeli routes represent a materially higher share of Ryanair’s revenue than the “modest presence” magnitude estimate assumes. Ryanair does not publicly disaggregate country-level passenger or revenue data, so this cannot be directly verified or falsified from public sources. If Israeli routes generated, for example, 5–8% of group revenue rather than the sub-2% implied by a proportional route-count analysis, Magnitude could reach 5.0–5.5, raising V-ECON to approximately 2.3–2.5. This remains within Tier E and does not affect the tier classification or composite interpretation. The scoring confidence note acknowledges this uncertainty at moderate confidence.

A second challenge concerns the possibility of undisclosed commercial relationships with Israeli entities beyond standard airport operations — for example, fuel supply arrangements with Israeli state-owned energy companies, or ground handling contracts with Israeli defence-affiliated entities. No evidence of any such arrangement has been identified. Ryanair’s fuel procurement is conducted through rolling commodity hedging programmes with international financial institution counterparties; specific counterparties are not publicly disclosed beyond broad references in financial filings.²⁷ The absence of evidence here is an inherent audit limitation rather than a positive finding of absence.

The temporary suspension of Israeli services in October 2023 could be read as demonstrating that the Israeli market relationship is shallow and easily severable. This interpretation supports a lower Magnitude estimate. The counter-reading — that a commercial airline suspending services to an active conflict zone is a standard safety response with no policy content — is better supported by the audit evidence, including the parallel communication pattern observed during the Russia-Ukraine airspace closure.²³

Named Entities and Evidence Map

V-POL: Political

Mechanism of Involvement

Ryanair’s V-POL score (V-Domain Score 1.46) reflects a business-as-usual posture — the treatment of Israel as a standard commercial market in corporate communications and operational planning, with no active political advocacy in any direction. This is the rubric’s Band 3.1–4.0 finding, and the audit evidence supports it with high confidence across all V-POL sub-categories.

The most concrete expression of this posture is found in Ryanair’s annual reports: Israel appears as a route market grouped with Mediterranean and Middle East destinations, described in standard commercial terms (passenger volumes, route frequencies) with no geopolitical framing, no special partnership language, and no distinction from other markets.^{23 28} This treatment is consistent across FY2023 and FY2024 filings and represents the passive normalisation that the Business-as-Usual band is designed to capture.

Ryanair’s public communications on the October 2023 Hamas attack and subsequent conflict were limited to two categories of statement: (a) operational advisories announcing the suspension of TLV services on airspace safety grounds, and (b) subsequent operational advisories confirming phased service resumption.^{22 29} No statement of political solidarity with Israeli victims, Palestinian civilians, or any state actor was issued. This communication pattern is consistent with CEO Michael O’Leary’s documented public persona, which engages geopolitically only where direct aviation commercial interests or EU regulatory matters are at stake. The parallel comparator — Ryanair’s public communications on the Russia-Ukraine airspace closure — followed identical operational-only messaging.²³

On lobbying and political financing, the audit is thorough and returns null findings. Ryanair is registered in the EU Transparency Register and its documented lobbying focus areas are: Single European Sky implementation, airport slot regulations, EU Emissions Trading System positioning, post-Brexit bilateral air service agreements, and consumer rights regulations applicable to low-cost carriers.³⁰ No lobbying activity on Israel-Palestine policy, anti-BDS legislation, settlement trade rules, or related geopolitical advocacy at EU, UK, or Irish national level has been identified. No corporate donations to Israeli parastatal organisations, settlement infrastructure groups, or military welfare and veterans’ funds (such as Friends of the IDF or equivalent) have been identified in annual report disclosures, Companies Registration Office filings, or NGO investigative reports.²⁸

On governance and brand heritage, no evidence has been identified of Ryanair accepting Israeli state honours or awards, hosting Israeli government officials in formal non-commercial partnership capacities, sponsoring Israeli state-backed cultural campaigns (including Hasbara-linked initiatives), or being listed as a partner in Israeli Ministry of Tourism promotional programmes.³¹ Ryanair’s institutional partnerships are strictly aviation-regulatory and commercial: EASA, the Irish Aviation Authority, and the European Low Fares Airline Association (ELFAA).³¹

The Proximity score of 7.50 for V-POL reflects the same structural fact as in V-ECON: it is Ryanair Holdings plc itself — not a subsidiary, intermediary, or franchise partner — that is the direct commercial operator treating Israel as a standard market in its corporate communications. The Exclusive Partner Political Acts rule does not apply because Ryanair operates its Israeli routes directly rather than through an exclusive dealer or distributor.

The Magnitude score of 3.20 reflects minor recurring normalisation with no discrete political acts to measure. Ryanair does not actively affirm, celebrate, or distinguish its Israeli market relationship in political terms; the “act” captured by the Business-as-Usual band is the absence of differentiation rather than an affirmative political choice. This is the lowest-intensity conduct within the scored range.

CEO Michael O’Leary’s personal philanthropy and advocacy profile, reviewed through Irish Times business coverage, Forbes and Bloomberg profiles, and NGO donor databases, shows no evidence of personal donations to Israeli advocacy organisations, the Jewish National Fund, FIDF, or equivalent bodies on either side of the conflict through April 2026.³¹ O’Leary’s identified philanthropic activities relate to Irish agricultural and land interests and general Irish business and aviation causes.

No Ryanair board member has been identified holding a seat or advisory role on pro-Israel or pro-Palestinian lobbying organisations, geopolitical pressure groups, or state-aligned academic institutions related to the conflict. The audit acknowledges that board composition data extends only to the FY2024 corporate governance cycle; this represents a modest evidence gap for the period following the FY2024 filing date.³¹

Counter-Arguments and Evidence Limits

The principal counter-argument to the Business-as-Usual scoring is that the mere operation of commercial services to Israel — confirmed in V-ECON and reflected in V-POL’s Treatment as Standard Market sub-category — constitutes a form of tacit political endorsement that should score higher than Band 3.1–4.0. The rubric’s architecture rejects this argument by design: bands 4.1 and above require affirmative conduct (active suppression of accountability, discriminatory HR governance, exclusive partner political acts, or crisis asset mobilisation) that is absent from the audit record. The Business-as-Usual band exists precisely to score companies whose only identified conduct is transactional normalisation without political content.

A second challenge concerns the sufficiency of the audit methodology for V-POL sub-categories relying on internal governance evidence. Employee HR enforcement actions concerning Israel-Palestine speech, internal content moderation policies on Ryanair’s digital properties, and granular supply chain sourcing for in-flight retail products are not publicly disclosed. Ryanair’s V-POL audit explicitly acknowledges these limitations: no independent audit of in-flight supply chain sourcing in relation to settlement goods has been identified, and Ryanair does not disclose granular in-flight hospitality purchasing data.³² If undisclosed internal HR or supply chain policies were found to systematically discriminate or suppress accountability in relation to the conflict, the V-POL score would require upward revision. The absence of evidence here is a genuine gap, not a confirmed absence.

The Ukraine comparator — Ryanair offering free or discounted flights for Ukrainian refugees after Russia’s February 2022 invasion — is the only identified instance of Ryanair mobilising commercial assets in a conflict-adjacent humanitarian context.²³ The absence of an equivalent gesture in relation to the Israel-Gaza conflict (for any party) is factually noted but is not scored as a positive finding in either direction; it is cited solely for comparative framing of the company’s typical conduct.

Named Entities and Evidence Map

Cross-Domain Counter-Arguments and Evidence Limits

The composite score of 147 (Tier E) is structurally robust against the most plausible upward challenges. The scoring model’s architecture — where V_MAX anchors and other domains contribute at a 20% weight — means that even significant upward adjustments to V-DIG or V-POL would have limited composite effect; V-ECON would need to increase substantially to move the tier.

The most consequential unresolved uncertainty is Israeli route revenue as a proportion of group revenues. If TLV and Eilat routes were to represent a materially higher revenue share than the “modest presence” assumption, V-ECON Magnitude could rise from 4.50 to 5.0–5.5, producing a V-ECON score of approximately 2.3–2.5 and a composite BRS of approximately 160–170. This remains within Tier E. The full-year FY2025 results or a future investor presentation disaggregating route-level revenue would be the evidence needed to resolve this uncertainty.

A second cross-domain consideration is the governance evidence gap identified in V-POL. Board composition data is current only to FY2024; the absence of identified affiliations after that date is an audit limitation rather than a confirmed finding. For V-MIL and V-DIG, the absence of Israeli-related evidence is corroborated by the absence of any third-party allegation in the civil society record — an important cross-check given that Ryanair is subject to sustained NGO and journalistic scrutiny in other domains. The absence of a military or digital-domain allegation against Ryanair is unlikely to reflect a systematic blind spot in civil society monitoring.

The audit methodology for V-POL explicitly notes that live web search was unavailable during research; all V-POL findings derive from training knowledge through April 2026. This limitation is inherent to the research environment and is most material for V-POL sub-categories that depend on current-affairs evidence (e.g., post-FY2024 board appointments, statements issued after the audit date). The risk of a material V-POL finding being generated after April 2026 is possible but cannot be quantified from available evidence.

Named Entities and Evidence Map

BDS-1000 Score

Composite BDS-1000 Score: 147 — Tier E

V-ECON is the V_MAX domain (2.06). The three remaining domain scores sum to 1.49 and contribute at a 20% weight (0.298). The BRS formula yields: ((2.06 + 0.298) / 16) × 1000 = 147.

V-MIL scores zero because no military activity of any kind was identified; the result is the arithmetic floor of the rubric. V-DIG scores 0.03 — negligible in composite terms — reflecting conservative scoring of theoretical incidental Israeli-origin tooling; no confirmed Israeli-origin vendor was identified. V-ECON scores 2.06 on the basis of confirmed direct scheduled services to Israeli airports, classified as Sustained Trade with a direct commercial relationship (P=7.50) and modest network presence (M=4.50). V-POL scores 1.46 on the Business-as-Usual band: Israel treated as a standard route market with no active political engagement in any direction.

Confidence, Limits, and Open Questions

High confidence findings:

• V-MIL = 0.00: Zero positive evidence across all sub-categories; corroborated by absence of any third-party allegation
• V-DIG near-zero: No Israeli-origin vendor or digital provision to Israeli state/security sector confirmed
• V-POL business-as-usual band: Null findings consistent across all V-POL sub-categories; communications pattern documented

Moderate confidence findings:

• V-ECON Magnitude (M=4.50): Israeli route-specific revenue is not publicly disclosed; magnitude inferred from network scale comparison; the suspension period supports a “non-strategic” assessment of market importance

Open questions:

• What share of Ryanair group revenues derives from TLV and Eilat routes? (Undisclosed; would affect V-ECON Magnitude)
• Has board composition changed materially post-FY2024? (Evidence limited to FY2024 governance report)
• Are any Israeli-origin technology vendors present in Ryanair’s enterprise stack beyond what is publicly disclosed? (Cannot be confirmed or excluded from public evidence)
• What is the outcome of the AEPD biometric data processing investigation? (Pending as of audit date; does not affect Israel-dimension scoring)
• Has Ryanair made any public statement or taken any commercial action regarding the conflict after April 2026? (Outside audit scope)

Recommended Actions

The BDS-1000 Tier E classification indicates the lowest tier of identified engagement. Recommended actions should be proportionate to the validated score and its underlying evidence.

For researchers and civil society organisations: The V-ECON finding — confirmed direct scheduled services to Israeli airports, generating recurring revenue — is factually grounded and does not require amplification. Advocacy targeted at Ryanair should be specific to this operational relationship and should avoid overstating the nature of the connection (which is transactional, not infrastructural or political). The null V-MIL and near-null V-DIG findings should not be contested without new evidence.

For institutional investors applying ESG or conflict-sensitivity screens: The Tier E score and the V-ECON basis (Sustained Trade, no deeper integration) indicate Ryanair does not meet the threshold for exclusion under most standard conflict-economy screens. Engagement rather than divestment is the proportionate response at this tier. Investor engagement could usefully focus on route-level revenue disclosure, which would resolve the primary scoring uncertainty, and on the status of the AEPD biometric investigation, which is the most material pending regulatory risk in the V-DIG domain.

For Ryanair: The AEPD investigation into biometric data processing represents the most concrete near-term regulatory risk identified across the audit. Resolution of this matter — whether through modification of the OTA biometric programme or a negotiated compliance outcome — would reduce V-DIG regulatory exposure. No action is required from a BDS-1000 perspective that would not already be indicated by ordinary regulatory compliance obligations.

Score sensitivity note: The Tier E classification is robust. Upward adjustments consistent with the available evidence (M raised to 5.5 for V-ECON; I raised to 3.5 for V-POL) would produce a composite BRS of approximately 170–185, remaining within Tier E. A tier change would require the emergence of evidence supporting V-MIL activity, a significant Israeli digital provision relationship, or active political advocacy — none of which has any current evidential basis.

End Notes