V-DIG Audit: The Body Shop

Audit Phase: V-DIG (Digital Forensics — Technology Supply Chain) Audit Date: 2026-05-01 Target: The Body Shop International Limited

Enterprise Technology Stack & Vendor Relationships

The Body Shop is a mid-market cosmetics retailer with no publicly documented role as a technology provider or technology-intensive operator. Its enterprise IT stack has not been disclosed in any annual report, CSR filing, or corporate technology partnership announcement accessible within the research base.

Israeli-Origin Software & Services: No public evidence identified of The Body Shop holding verified licensing, subscription, or integration relationships with any Israeli-origin software or cybersecurity vendor — including but not limited to Check Point, Wiz, SentinelOne, CyberArk, NICE, Verint, or Claroty. No corporate disclosures, press releases, technology partnership announcements, or trade press reports documenting such relationships were identified ¹².

Scale of Dependency: No public evidence identified. The Body Shop does not publish an IT vendor list or technology stack disclosure in its annual reports or CSR filings. Technographic intelligence platforms such as Tracxn and Crunchbase hold partial commercial data ³⁴, but no specific Israeli-origin vendor relationships are documented in those sources within the scope of this research.

Procurement & Integrator Relationships: The Body Shop has engaged with retail IT platforms typical of mid-market cosmetics chains, but no evidence links any known systems integrator engaged by The Body Shop to the mandated or recommended deployment of Israeli-origin technology. The company underwent significant operational disruption following its February 2024 administration filing ¹⁵ and subsequent partial acquisition and restructuring ⁶. No public evidence identified of specific integrator mandates involving Israeli-origin technology either before or after administration. The 2023 acquisition by Aurelius Group, a German private equity firm ⁶⁷, introduced potential group-level technology procurement decisions that are not publicly documented, preventing assessment of any vendor changes arising from the change of ownership.

Evidence Gap: Internal IT vendor stack disclosure remains absent. Post-administration technology contracts (2024–2026) are not documented in publicly available records. Indirect exposure via managed security service providers cannot be confirmed or excluded on available evidence.

Surveillance, Biometrics & Retail Technology

Facial Recognition & Biometrics: No public evidence identified of The Body Shop deploying facial recognition, biometric identification, behavioural analytics, or gait analysis technologies from any Israeli-origin vendor — including Trigo, BriefCam, AnyVision/Oosto, or Trax. No trade press, NGO investigation, or retail technology publication documents such deployment ⁸⁹.

Predictive Analytics & Monitoring: No public evidence identified of The Body Shop using Israeli-origin predictive analytics, social media monitoring, or workforce surveillance tools. The specific in-store analytics or e-commerce personalisation platforms used by The Body Shop — including those supporting its loyalty programme — are not publicly documented, preventing assessment of indirect Israeli-origin technology exposure.

Third-Party Deployment: No public evidence identified of Israeli-origin surveillance or analytics technology reaching The Body Shop indirectly through third-party platform providers, managed security services, or bundled enterprise suites.

Source classes checked: retail technology trade press, NGO investigations, corporate disclosures, news media. No evidence found in any class.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Data Centre Operations in Israel: No public evidence identified of The Body Shop operating, leasing, or co-locating data centre infrastructure within Israel. The company’s known infrastructure footprint is consistent with a UK-headquartered retail operator ²⁸; no Israeli data centre presence has been documented in any corporate disclosure.

Government Cloud Contracts: No public evidence identified of The Body Shop participating in Project Nimbus or any comparable Israeli state-backed digital infrastructure programme. The Body Shop operates as a cosmetics retailer with no known cloud services division, no publicly documented role as a cloud service provider, and no credible basis in the public record for a relationship of this nature.

Data Sovereignty & Resilience Services: No public evidence identified. The Body Shop does not operate as a technology service provider. No data residency commitments, sovereign cloud arrangements, or cross-border data transfer agreements involving Israeli state entities were identified in any corporate filing or regulatory record ².

Source classes checked: government procurement portals, Project Nimbus public documentation, corporate filings, trade press. No evidence found in any class.

Defence, Intelligence & Security Sector Technology Relationships

Military & Intelligence Contracts: No public evidence identified of any contracts, partnerships, or service agreements between The Body Shop and the Israeli Ministry of Defence, the Israel Defense Forces (IDF), or Israeli intelligence agencies. The Body Shop has no known products, services, or technical capabilities that would plausibly support a defence or intelligence procurement relationship.

Dual-Use Technology Provision: No public evidence identified of The Body Shop’s commercially available technology being deployed for military, intelligence, or law enforcement surveillance applications within Israel or the occupied territories. The company’s commercial technology outputs — primarily retail, e-commerce, and loyalty systems — are not of a character that would ordinarily attract dual-use classification.

Offensive Cyber & Weapons Technology: No public evidence identified. The Body Shop does not operate in any domain adjacent to offensive cyber capability development, directed energy, autonomous weapons, or related fields.

Source classes checked: defence directories, parliamentary records, investigative journalism, NGO reports. No evidence found in any class.

AI, Algorithmic & Autonomous Systems

AI/ML Provision to State Bodies: No public evidence identified of The Body Shop providing artificial intelligence, machine learning, computer vision, or autonomous decision-support systems to Israeli state, military, or security bodies. The Body Shop has no publicly documented AI research programme of material scale ⁸³.

Training Data & Model Development: No public evidence identified of The Body Shop’s AI models or platforms being trained on surveillance-derived datasets originating from Israel or the occupied territories. The company’s use of AI — to the extent it is documented at all — appears limited to consumer-facing applications such as product recommendation and e-commerce personalisation, none of which involve publicly disclosed Israeli-origin data or infrastructure partnerships.

Autonomous Systems & Lethality: No public evidence identified. The Body Shop holds no known autonomous systems or lethality-adjacent technology portfolio, and there is no credible basis in the public record for such a relationship.

Source classes checked: academic repositories, patent databases, corporate R&D disclosures, investigative journalism. No evidence found in any class.

Technology Ecosystem & R&D Footprint

Israeli R&D Centres: No public evidence identified of The Body Shop operating research and development facilities, engineering offices, innovation labs, or accelerator programmes within Israel. The company’s R&D activity has historically been concentrated at its UK headquarters in Littlehampton, West Sussex ⁸, and — during the L’Oréal ownership period (2006–2017) — within L’Oréal’s wider European R&D network. The subsequent acquisition by Natura &Co (2017–2023) and then Aurelius Group (2023) ⁶⁷ produced no documented shift toward Israeli R&D infrastructure.

Acquisitions & Investments: No public evidence identified of The Body Shop acquiring any Israeli-origin technology company or making strategic investments in Israeli technology startups or venture funds at any point in its corporate history. Crunchbase and Tracxn profiles for The Body Shop do not document any Israeli technology acquisitions or co-investments ³⁴.

Patent & Intellectual Property: No public evidence identified of significant patent portfolios, licensing agreements, or co-development arrangements between The Body Shop and Israeli-domiciled entities or Israeli academic research institutions — including the Technion, Hebrew University of Jerusalem, or the Weizmann Institute of Science.

Post-Administration R&D Continuity: Following the February 2024 administration filing ¹⁵ and the partial rescue of the brand, the ongoing R&D capacity and vendor relationships of the restructured entity are not publicly documented. Any portfolio-level technology decisions made by Aurelius Group following the 2023 acquisition ⁶⁷ that may affect The Body Shop’s R&D footprint remain unverifiable on available evidence.

Source classes checked: patent databases, Crunchbase, corporate filings, trade press. No evidence found in any class.

Civil Society Scrutiny & Regulatory History

NGO & Academic Reports: No public evidence identified of published NGO investigations, academic studies, or UN reports specifically addressing The Body Shop’s technology relationships with the Israeli state or its operations in the occupied territories. The Body Shop has been subject to broader ethical consumer scrutiny — primarily regarding animal testing policy reversals, supply chain labour standards, and the consequences of successive ownership changes — but no technology-specific civil society investigation has been identified ⁹¹⁰.

Boycott & Divestment Campaigns: The BDS Movement’s published materials do not list The Body Shop as a primary target of boycott or divestment campaigns on grounds related to technology provision to Israeli state entities ⁹. The Body Shop has historically been strongly associated with ethical consumerism and cruelty-free principles ⁸, and has not been publicly named in BDS technology-related campaigns. No public evidence identified of organised boycott campaigns specifically related to Israeli technology provision by The Body Shop.

The Who Profits research database ¹⁰ has not, within the scope of this research, published a profile specifically documenting The Body Shop as a corporate participant in Israeli military or settlement economy technology supply chains. A direct live query of that database was not possible and this finding should be treated as provisional pending live-source verification.

Regulatory & Legal Actions: No public evidence identified of regulatory inquiries, legal challenges, export control actions, or sanctions-related investigations involving The Body Shop’s technology sales or services to Israeli state entities. Companies House filings for The Body Shop International Limited ² document the administration and restructuring process but contain no technology export or sanctions-related disclosures.

Administration & Ownership Context: The February 2024 administration ¹⁵ and Aurelius acquisition ⁶⁷ represent material changes to corporate governance. No civil society body has, on available evidence, raised technology-related concerns specifically arising from the change of ownership or the restructured entity’s procurement decisions.

Source classes checked: BDS Movement publications, Who Profits database, UK regulatory filings, EU export control records, investigative journalism. No evidence found in any class.

End Notes