Upwork

Target Profile

• Company: Upwork Inc.
• Jurisdiction: Delaware, USA (incorporated); NASDAQ-listed (ticker: UPWK)
• Headquarters: San Francisco, CA (historical); Chicago, IL (primary operational hub as of 2022–2023); remote-first workforce model adopted 2020
• Sector: Digital labour marketplace / Software-as-a-Service (SaaS)
• Relevant operating footprint: Global digital platform; no physical offices, data centres, or facilities in Israel or the occupied Palestinian territories; AWS primary cloud infrastructure; Google Cloud (Vertex AI) for generative AI workloads; Israeli-resident users served via standard marketplace directory and VAT-compliant digital services
• Key executives or governance actors: Hayden Brown (President & CEO, from January 2020); Kevin Harvey (Benchmark Capital, Upwork board member from at least 2018 IPO; post-June 2025 status unconfirmed); Dana L. Evan (Audit Committee, appointed June 2025); Glenn Kelman (appointed June 2025)
• BDS-1000 score: 114
• Tier: E (0–199)

Executive Summary

Upwork Inc. is a Delaware-incorporated, NASDAQ-listed digital labour marketplace that intermediates freelance contracts between independent workers and client organisations globally. It has no physical manufacturing, no supply chain for goods, and no kinetic or defence-sector product line of any kind. The BDS-1000 audit found no direct military contracting, no provision of technology to Israeli state or defence entities, no physical presence in Israel or the occupied Palestinian territories, and no targeted civil society campaign against the company.

The audit’s two substantive findings are confined to the V-DIG and V-POL domains. In V-DIG, Upwork has a confirmed historical relationship with AU10TIX — an Israeli-origin identity verification company — active until approximately mid-2024, when a serious credential exposure led to the relationship’s described discontinuation. Upwork also maintains an ongoing confirmed payment integration with Payoneer, an Israeli-founded payments company, as a freelancer earnings-withdrawal option. Both are procurement-side relationships in which Upwork is the buyer, not a technology provider to Israel. No verified Israeli cybersecurity vendor relationships (Wiz, Check Point, SentinelOne, CyberArk, or others claimed in prior research) were substantiated from primary sources. In V-POL, the audit documents a well-evidenced asymmetry between Upwork’s documented response to Russia’s 2022 invasion of Ukraine — which included a named public statement, $1 million donation, full operational suspension, and CEO blog post identifying Russia as aggressor — and its documented non-response to the Gaza conflict from October 2023 onward, which consisted of internal “team safety” communications only, with no equivalent public commitment, donation, or operational modification.

The composite BDS-1000 score is 114 (Tier E). This reflects a company with no military supply relationship, no provision of technology to Israeli state entities, a minor and transactional economic footprint in Israel, and a political profile characterised by selective silence rather than active advocacy or financing. The V-DIG domain is the score’s primary driver; its contribution is moderated by the procurement-only character of the Israeli-origin vendor relationships (Customer Cap applies) and by the low magnitude of those relationships relative to Upwork’s overall technology spend.

Timeline of Relevant Events

Corporate Overview

Upwork Inc. is the product of the 2013 merger of two Silicon Valley-born freelance marketplace platforms — Elance (founded 1999) and oDesk (founded 2003) — with no Israeli founding history, co-founding capital, or institutional backing.¹ The merged entity adopted the Upwork brand in 2015 and completed a NASDAQ IPO in October 2018. The company is incorporated in Delaware and has operated under a remote-first workforce model since 2020, with its primary operational hub identified as Chicago, Illinois in recent SEC filings.⁹

Upwork’s commercial model is the intermediation of labour contracts between independent freelancers and client organisations across more than 180 countries. Revenue is derived from marketplace service fees (charged to both freelancers and clients as a percentage of contract value) and from subscription and enterprise product revenues. The company reported full-year 2023 revenue of approximately $689.7 million.²¹ Its two principal operating subsidiaries are Upwork Global Inc. and Upwork Escrow Inc., both Delaware-incorporated; no Israeli-domiciled subsidiary, branch, or joint venture appears in any SEC filing reviewed.⁹

The platform’s technology infrastructure relies on AWS as primary cloud provider, confirmed by SEC filings and an engineering case study documenting migration to Kubernetes on AWS EKS with Calico zero-trust network security.²² Google Cloud’s Vertex AI platform supports Upwork’s generative AI product “Uma,” launched in 2023.^{10 11} Upwork’s largest institutional shareholders are standard US index and active fund managers — Vanguard, BlackRock, and T. Rowe Price — reflecting ordinary NASDAQ mid-cap index exposure rather than strategic ownership.²³

Benchmark Capital, a significant pre-IPO investor documented in the 2018 S-1, established a dedicated Israel-focused investment practice in the early 2000s, and founding General Partner Kevin Harvey held a board seat at Upwork from at least the time of the IPO.^{1 24} These facts constitute investor-level context; no provision of the corporate charter, governance documents, or SEC filings transmits a state-aligned mandate to Upwork as a portfolio company.

Domain Summaries

V-MIL: Military

Mechanism of Involvement

No mechanism of military involvement has been identified. Upwork Inc. is a digital labour marketplace platform; it does not manufacture, design, distribute, or license any physical product. The entire scope of the V-MIL domain — direct defence contracting, dual-use product variants, heavy machinery and construction equipment, supply chain integration with defence prime contractors, logistical sustainment and base services, and munitions and weapons systems — is structurally inapplicable to Upwork’s business model as disclosed in its SEC filings.^{9 1}

No public evidence has been identified of any direct contract, tender award, framework agreement, or memorandum of understanding between Upwork and the Israeli Ministry of Defence (IMOD), the Israel Defence Forces (IDF), Israel Prison Service, Israel Border Police, or any other Israeli state security body. Upwork does not appear in SIBAT (Israel Defence Export and Defence Cooperation Directorate) listings, international defence exhibition catalogues, or any defence procurement registry. No corporate press release, government announcement, or trade press report detailing defence cooperation between Upwork and any Israeli defence entity has been identified.²⁵

The assessment of supply chain integration with Israeli defence prime contractors — Elbit Systems, Israel Aerospace Industries (IAI), Rafael Advanced Defense Systems, and Israel Military Industries — also returns a null finding. Upwork does not manufacture components, sub-systems, raw materials, or specialist manufacturing services for any customer, military or civilian.⁹ The audit identified that certain institutional investors hold shares in both Upwork and Elbit Systems within the same portfolio — for example, the Oregon State Treasury OPERF fund, the NJ Police and Firemen’s Retirement System, and the New York State Common Retirement Fund.^{26 27 28} These are passive, market-driven co-holdings managed by third-party asset managers. They do not constitute a supply relationship, do not create any operational or contractual link between Upwork and Elbit, and Upwork does not control or direct Elbit’s defence production in any form.

Some freelancers on the Upwork platform list “Elbit Systems” as prior employment in individual career histories. This reflects workers’ backgrounds before transitioning to freelancing; it does not constitute a corporate supply or contractual relationship between Upwork Inc. and Elbit Systems.²⁹ No joint development programme, co-production agreement, technology transfer, or licensed manufacturing arrangement between Upwork and any Israeli defence firm was identified in USPTO patent assignments, Israeli Patent Authority records, press releases, or SEC material agreement disclosures.⁹

Upwork’s Q3 2022 10-Q discloses that in March 2022 the company suspended all operations in Russia and Belarus in compliance with US government sanctions and its own corporate assessment.^{30 31} No equivalent suspension or restriction has been enacted regarding Israel, but the V-MIL analysis concerns physical military supply — a category in which no Upwork activity was found regardless of geographic context.

Civil society databases that systematically catalogue companies supporting the Israeli occupation return negative results for Upwork. The Who Profits Research Center database does not list Upwork as a profiled company.³² Amnesty International’s May 2023 “Automated Apartheid” report addresses facial recognition in the West Bank, focusing on AnyVision/Oosto; Upwork is not named.³³ Human Rights Watch’s April 2021 “A Threshold Crossed” report on Israeli apartheid does not name Upwork.³⁴ The BDS Movement’s published targets list does not include Upwork, and no institutional divestment decision specifically citing Upwork’s defence sector activities has been identified.

Counter-Arguments and Evidence Limits

The most significant evidence gap in this domain is Upwork’s non-disclosure of client identity data. The platform does not publish the identities of enterprise clients or the nature of work contracted through its marketplace. It is therefore impossible to independently verify from public sources whether Israeli defence contractors — Elbit Systems, IAI, Rafael, or others — hold active enterprise client accounts on Upwork and, if so, what services they procure. This gap cannot be closed without regulatory disclosure or investigative access to Upwork’s internal records. If confirmed, such relationships would most appropriately score in V-DIG (talent intermediation as a digital platform function) rather than V-MIL, which concerns physical military supply.

A second gap concerns SIBAT, Israel’s defence export directorate. Its listings are largely classified or distributed only in physical form at defence exhibitions; no publicly accessible searchable version was available to independently confirm or deny Upwork’s presence. Similarly, Israel’s online tender portal (tender.gov.il) could not be searched with sufficient granularity to confirm or deny any Upwork service contract with Israeli state or security bodies.

An unverified claim from a prior research document characterises ImpersonAlly, an Israeli identity verification startup, as “trusted by Upwork,” sourcing this to an AI Week startup exhibition page.³⁵ This claim could not be confirmed through Upwork’s corporate disclosures, press releases, or SEC filings. ImpersonAlly does not appear in Upwork’s publicly disclosed vendor or technology partner lists and has been excluded from scored findings throughout this audit.

What would need to change for the V-MIL score to increase materially? Evidence of a direct contractual relationship between Upwork and an Israeli defence body or prime contractor — a signed agreement, a government tender award, a corporate press release, or an SEC material agreement disclosure — would change the analysis. Evidence of Upwork’s platform being used to staff IDF or Israeli intelligence programmes on a systematic and documented basis would also be material, though it would score in V-DIG. No such evidence has been identified.

Named Entities and Evidence Map

V-DIG: Digital

Mechanism of Involvement

The V-DIG domain contains the most substantive verified Israeli-origin technology vendor relationships in the entire audit. Upwork’s digital involvement with Israeli-origin entities operates exclusively on the procurement side: Upwork as a buyer or user of services provided by Israeli-origin companies, not as a provider of technology or services to Israeli state, military, or intelligence bodies.

AU10TIX — Confirmed Historical Identity Verification Vendor. AU10TIX is an Israeli identity intelligence company — a subsidiary of ICTS International (Amsterdam-listed) — headquartered in Hod Hasharon, Israel, providing document forensics and multi-modal biometric face-matching for identity verification. Identity verification is a material operational function for Upwork, required to maintain platform integrity, comply with KYC/AML obligations, and detect fraud. In June 2024, Wired reported that AU10TIX had suffered a serious credential exposure: administrative login credentials for a logging platform had been left publicly accessible for approximately 18 months.¹⁴ Dark Reading confirmed the exposure.¹⁵ A TrustCloud breach summary independently identified Upwork, alongside Fiverr and Uber, as named clients whose user identity verification data — including biometric metadata and document verification records — appeared in the exposed AU10TIX logs.¹⁶ This constitutes the strongest verified Israeli-origin technology vendor relationship in the audit, established through three independent sources. Public reporting suggests Upwork transitioned away from AU10TIX following the breach disclosure, approximately mid-2024.¹⁶ The replacement identity verification vendor is not publicly named in any Upwork press release, legal document, or SEC filing reviewed.

Payoneer — Confirmed Ongoing Payment Integration. Payoneer is an Israeli-founded company, now NYSE-listed, that provides international payment and money transfer services. Payoneer’s role as an Upwork earnings-withdrawal option is confirmed by the official Payoneer/Upwork partnership page, multiple Upwork Support articles on Payoneer withdrawals, and a Payoneer Q1 2021 investor release referencing the Upwork relationship.^{37 38 39} The relationship functions as a payment integration allowing freelancers globally to withdraw earnings to Payoneer accounts. This is the more durable of the two confirmed Israeli-origin vendor relationships, as it remains active and is structurally embedded in Upwork’s payment architecture for a global freelancer population.

Unverified Claims — Multiple Israeli Cybersecurity Vendors. The prior research stage surfaced claims that Upwork uses Wiz, Check Point, SentinelOne, CyberArk, Palo Alto Networks, NICE, Verint, and Claroty internally. Each claim was traced to its underlying source and assessed against primary records. In every case, the claimed evidence consisted of Upwork marketplace listings — skills categories for clients seeking specialists in those products — rather than disclosures of Upwork’s own procurement. No Upwork 10-K, 10-Q, data processing agreement subprocessor list, engineering case study, or press release names any of these vendors as Upwork’s own internal tools. All such claims are assessed as no public evidence identified and have been excluded from the scored findings.^{9 40}

Project Nimbus — Indirect Cloud Infrastructure Exposure. Upwork is a confirmed AWS customer and a confirmed Google Cloud / Vertex AI customer.^{22 10} Project Nimbus is a confirmed $1.2 billion cloud services contract awarded in 2021 to Google Cloud and AWS to provide cloud and AI infrastructure to the Israeli government and military.⁴¹ Google Cloud employees staged internal protests over Project Nimbus in April 2024.⁴² Upwork is not a party to Project Nimbus and has not been reported as a participant, subcontractor, or affiliated entity by any source. The inference that Upwork’s AWS or Google Cloud expenditure contributes indirectly to Project Nimbus infrastructure applies equally to any enterprise customer of either platform. The specific prior-research claim that Upwork uses the il-central-1 AWS Israel region is unverified and speculative; no Upwork engineering disclosure or SEC filing confirms this.⁴³

Jumio — Confirmed Upwork Client, Not an Upwork Vendor. The prior analysis conflated two distinct relationships. Jumio is a US-incorporated identity verification company that is a confirmed Upwork client, using Upwork’s Lifted staffing service to hire IT staff and resolve an IT backlog.^{44 45} Jumio is not Israeli-origin. No evidence confirms that Upwork uses Jumio’s biometric/IDV product internally. The relationship runs in the opposite direction from what the prior analysis implied.

Counter-Arguments and Evidence Limits

The AU10TIX discontinuation, though reported consistently across independent sources, is not confirmed through a primary Upwork corporate disclosure. Upwork has not published a press release, support article, or SEC filing explicitly naming AU10TIX as a former vendor or announcing the transition to a replacement. The current identity verification vendor remains publicly unidentified. If the AU10TIX relationship continues in any modified form, or if a replacement Israeli-origin IDV vendor was adopted, the V-DIG score would need to be revisited. The subprocessor list at upwork.com/legal/subprocessors/ is the authoritative source but a live, current version confirming the named replacement could not be retrieved during research.⁴⁶

The Payoneer integration’s characterisation as a “strategic partnership” in some secondary sources is not fully established in public filings or press releases. The confirmed relationship is a payment withdrawal integration; whether it involves formal commercial revenue-sharing beyond standard payment processing arrangements is not established from primary sources. This does not alter the scoring — a confirmed direct commercial integration with an Israeli-founded company is what the proximity criterion measures — but it affects interpretation of the depth of the relationship.

No verified Upwork relationship with any Israeli cybersecurity vendor was found, despite the prior research memo’s extensive claims in that area. The V-DIG score is therefore driven by two relationships — one historical (AU10TIX) and one ongoing (Payoneer) — both of which are procurement-side. The score would increase materially only if evidence emerged of Upwork providing technology or services to Israeli state, defence, or intelligence bodies, or if verified procurement relationships with multiple additional Israeli-origin vendors were confirmed through primary sources.

The absence of any NGO-targeted investigation specifically examining Upwork’s technology vendor relationships from a human rights or BDS standpoint is itself a limit on evidence quality. No Amnesty International, Human Rights Watch, Who Profits, AFSC Investigate, or Al-Haq report specifically investigates Upwork’s digital supply chain in the context of the occupation. The audit is therefore reliant on breach disclosure reporting, corporate filings, and payment documentation rather than independent civil society forensics.

Named Entities and Evidence Map

V-ECON: Economic

Mechanism of Involvement

Upwork’s economic relationship with Israel is characterised by a standard, transactional digital services provision model with no indicators of strategic market designation, physical investment, or outsized economic contribution. The audit found no Israeli subsidiary, no Israeli office or data centre, no Israeli-domiciled acquisition, no disclosed Israel-specific revenue figure, and no Israeli government designation characterising Upwork as a key economic actor.

The most concrete economic indicator is Israeli VAT compliance. Under Israel’s Extension Order for Value Added Tax (Amendment No. 23, enacted 2019), Upwork is obligated to collect and remit 17% Israeli VAT on digital service fees charged to Israeli-resident users.^{4 5 52} This obligation is structurally identical to Upwork’s VAT compliance under EU, UK, Australian, and comparable digital services tax regimes globally. It reflects the existence of Israeli-resident users on the platform but does not constitute a permanent establishment, an Israeli legal entity, or a special economic relationship under OECD or Israeli tax authority definitions. The VAT flow is a cost-of-compliance obligation rather than a strategic economic contribution.

A second indicator is the Israel-specific marketplace directory page (upwork.com/hire/il/), consistent with Upwork’s standard practice of maintaining country-specific pages for dozens of markets globally.⁵³ Israel is not identified as a named strategic market, regional hub, or growth priority in any annual report, investor presentation, or earnings release.^{9 21} The page is a platform taxonomy and SEO feature, not a strategic commercial designation.

Upwork’s corporate structure confirms no financial exposure through ownership. The company has no Israeli parent entity or Israeli institutional controlling shareholder. Its global profit flows to US-domiciled entities — primarily Upwork Global Inc. (Delaware) — and ultimately to publicly traded shareholders.^{1 9} No Israeli sovereign bonds, Israeli-domiciled equities, or Israel-focused investment funds appear in Upwork’s disclosed asset portfolio. The largest institutional shareholders are standard US-based index and active fund managers.²³

The Gaza Sky Geeks partnership — active approximately 2018 through at least 2021 — represents a documented positive economic contribution to Palestinian digital development. The Upwork Foundation provided $100,000 in 2021 and $50,000 in 2020 to support Freelance Academy programming connecting Gaza-based digital workers to global freelance markets.^{2 3} This initiative is framed as economic development and digital inclusion. Its current operational status following the documented destruction of Gaza’s telecommunications and digital infrastructure from late 2023 onward is unknown; no Upwork public statement addresses the partnership’s status post-October 2023.

Palestinian users face documented structural payment barriers that are not of Upwork’s own making but that are relevant to understanding Upwork’s economic relationship with the Palestinian digital economy. PayPal’s non-availability in the Palestinian territories is a PayPal corporate decision, not an Upwork policy.⁵⁴ Broader barriers — restricted banking infrastructure, high wire transfer costs, connectivity disruption — are documented by the World Bank Palestinian Digital Economy Assessment and 7amleh Center research as systemic features of the occupation’s economic architecture.^{55 56} The 2024 7amleh report documents platform account disruptions for Palestinian users during the October 2023–2024 conflict period, including identity verification barriers and financial access problems.⁵⁷ No official Upwork policy statement specifically addresses Gaza account handling during the conflict period.

Upwork’s service suspension asymmetry is an economically relevant documented fact. The company suspended all operations in Russia and Belarus following the February 2022 invasion of Ukraine, a decision requiring formal investor guidance withdrawal.⁶ No equivalent service modification has been publicly announced for Israel, the West Bank, or Gaza. This asymmetry is factually accurate; no evidence characterises it as driven by Israeli economic interests rather than by the absence of applicable sanctions.

Counter-Arguments and Evidence Limits

The magnitude of Upwork’s Israeli-market activity is genuinely unknown. Upwork does not disclose country-level revenue; its 10-K filings segment revenue only as “United States” and “International.”^{9 21} International revenue represented approximately 30–32% of total revenue across 2022–2023, but no Israel-specific figure is estimable from any publicly available source. Israel could be proportionally more significant than the minimum implied by the confirmed indicators (VAT compliance, marketplace directory page), or it could be a genuinely minor market consistent with that conservative baseline. The M score of 2.50 is anchored on confirmed anchors only; it may modestly understate scale if Israel proves to be a disproportionately active international market.

The Israeli Corporations Authority registry was identified as a relevant verification source, but no live registry search was possible to independently confirm the absence of an Upwork branch or representative office registration in Israel.⁵⁸ This is a structural gap in confirmation rather than evidence of a hidden presence; SEC filings are the authoritative disclosure vehicle and confirm no Israeli legal entity.

A prior research report cited Psagot Investment House, an Israeli institutional investor, as holding Upwork equity. This specific claim is sourced only to secondary and aggregated documents and cannot be independently verified against any primary SEC filing or Israeli regulatory disclosure. Israeli institutional investors holding small index-tracking positions in NASDAQ-listed stocks is broadly consistent with global investment practice but the specific holding is unconfirmed. It has not been used in scoring.

The structural gap regarding settlement-address verification is noted but limited in its scoring significance. Israeli government-issued identity documents for West Bank settlement residents list settlement addresses without distinction from addresses within the Green Line; Upwork’s identity verification architecture does not apply a geopolitical filter distinguishing settlement from Green Line addresses.⁵⁹ This is a documented structural characteristic of the verification system. No Upwork policy document addresses this explicitly, and no civil society organisation has published findings specifically characterising this as an Upwork-driven contribution to settlement economics.

Named Entities and Evidence Map

V-POL: Political

Mechanism of Involvement

Upwork’s most extensively documented geopolitical political act is its March 2022 response to Russia’s invasion of Ukraine. The company issued a named public statement — “Statement from Upwork on the Invasion of Ukraine” — explicitly describing the conflict as a “senseless war against Ukraine,” identifying Russia as the aggressor, and announcing full operational suspension in Russia and Belarus alongside a $1 million donation to Direct Relief for Ukrainian humanitarian aid.⁶ CEO Hayden Brown published a personal blog post reinforcing the public stance.⁶⁰ The suspension was significant enough to require a formal guidance withdrawal from Upwork’s investor relations channel.⁶ This Ukraine response is independently tracked by civil society monitors⁶¹ and represents the company’s clearest demonstration that it is institutionally capable of making politically significant, geographically specific decisions when it chooses to do so.

Following the October 7, 2023 Hamas attacks and the subsequent Israeli military campaign in Gaza, Upwork issued no equivalent named public statement. Industry reporting from Staffing Industry Analysts noted in late 2023 that Upwork communicated internally about “team safety” but explicitly declined to make public statements on the conflict.¹⁸ The CEO’s October 2023 communication, referenced in Upwork investor relations, addressed employee safety without naming an aggressor or committing to operational responses comparable to those applied to Russia.¹⁷

The asymmetry between these two documented corporate responses is the primary V-POL finding. For Ukraine: named press releases, CEO blog post, $1 million donation, guidance withdrawal, operational suspension, product-level features to help affected freelancers, employee donation matching, and civil society tracking.^{6 60 61} For Gaza through April 2026: no named statement, no equivalent donation to Palestinian humanitarian organisations, no operational change, no documented product-level accommodation for Palestinian freelancers experiencing payment disruption.^{17 18} The asymmetry is not mere inaction — it is inaction against a documented activist baseline, meeting the BDS-1000 rubric Band 2.1–3.0 definition of selective silence or double standard.

No lobbying activity by Upwork related to Israel-Palestine policy, anti-boycott legislation, or comparable foreign policy advocacy has been identified in disclosed Senate Lobbying Disclosure Act filings.⁶² Upwork’s documented federal lobbying is focused on worker classification legislation (California AB5 and federal analogs) and platform regulation — core commercial interests for a company whose business model depends on the legal status of independent contractor relationships.⁶²

No corporate donation by Upwork Inc. to AIPAC-affiliated PACs, the Friends of the Israel Defence Forces (FIDF), the Jewish National Fund (JNF), or settlement-supporting organisations has been identified in public records. Upwork’s most prominently documented humanitarian donation is the $1 million contribution to Direct Relief International for Ukraine relief in March 2022.⁶ No equivalent donation to Gaza or Palestinian humanitarian relief organisations — including UNRWA, Doctors Without Borders, or the Palestinian Red Crescent — has been publicly announced through April 2026.⁶³

Benchmark Capital, Upwork’s pre-IPO venture investor, established a dedicated Israel-focused investment practice (“Benchmark Israel”) in the early 2000s, and founding General Partner Kevin Harvey held a board seat at Upwork from at least the time of the 2018 IPO.^{1 24} These facts are documented and material as investor-level context. However, the characterisation of these facts as embedding an “Economic Zionist mandate” in Upwork’s corporate DNA is an inference not supported by any provision of Upwork’s corporate charter, SEC filings, or public governance documents. It is assessed as analytical inference and excluded from scored findings.^{1 9}

The documented payment difficulties for Palestinian freelancers — particularly those based in Gaza — reported by The Guardian in November 2024 represent a concrete platform-governance concern.¹⁹ User-reported forum threads further document withdrawal problems for conflict-affected users.⁶⁴ These difficulties appear to arise from the intersection of Upwork’s standard payment infrastructure with the physical destruction of Gaza’s banking and telecommunications systems, rather than from documented platform-level policy decisions specifically targeting Palestinian users. The absence of a conflict-specific payment accommodation for Palestinian freelancers — of the type documented for Ukrainian freelancers in 2022 — is a gap in the public record but is not supported by evidence of affirmative platform-level exclusion.

Counter-Arguments and Evidence Limits

The most substantial counter-argument to the V-POL score is that the Ukraine response and the Gaza non-response may be explained by a factor other than selective sympathy: sanctions. Upwork’s Russia/Belarus suspension was explicitly described as compliance with US government sanctions.³⁰ No equivalent US government sanctions against Israel exist. On this interpretation, the asymmetry reflects legal obligation and compliance-driven decision-making rather than a politically motivated double standard. This interpretation is plausible and cannot be definitively excluded.

However, Upwork’s public communications did not frame the Ukraine suspension purely as a sanctions-compliance exercise. CEO Brown’s blog post and the named press statement adopted moral language identifying Russia as the aggressor and framing the suspension as an ethical choice.^{60 6} The $1 million donation to Direct Relief, employee donation matching, and product-level support features for Ukrainian freelancers were discretionary acts beyond what sanctions required. The totality of the documented Ukraine response therefore exceeds what a purely compliance-driven explanation would predict, which preserves the validity of the double standard framing — even if part of the Ukraine response was sanctions-driven.

The claim in prior analytical reporting that “pro-Palestine keywords likely trigger safety flags” on Upwork’s platform is presented without documented evidence and has been assessed as speculation throughout this audit. No independent academic study, regulatory inquiry, or investigative journalism documents algorithmic suppression of pro-Palestine content on Upwork. This claim has been excluded from scored findings.

Board director Dana L. Evan’s prior service on Proofpoint’s board is noted; Proofpoint has documented R&D operations in Israel.⁶⁵ This is a prior board role involving a company with standard commercial technology activities in Israel; no complicity finding of the type relevant to this audit is documented for Proofpoint’s Israeli operations. The prior analytical framing characterising Evan’s Audit Committee role as “normalising the occupation” is an inference not supported by any direct statement or documented action, and has been assessed as such.

Kevin Harvey’s post-June 2025 board status should be confirmed via the most recent DEF 14A proxy filing; training data does not confirm his status following the June 2025 board refresh.²⁰ This is an open question in the governance record.

No dedicated BDS campaign targets Upwork. No institutional divestment decision specifically citing Upwork’s political conduct has been identified. The V-POL score of 0.61 on the composite reflects the passive, omission-based character of Upwork’s political profile; it is not the score of a company engaged in active state advocacy or direct political financing of Israeli institutions.

Named Entities and Evidence Map

Cross-Domain Counter-Arguments and Evidence Limits

The most consequential shared limitation across all four domains is Upwork’s non-disclosure of client and vendor identity data at a granular level. The platform does not publish the identities of enterprise clients, the nature of contracts, the geographic breakdown of revenue below US/International, or the full current subprocessor list in a form that permits independent verification of the absence of Israeli state, defence, or intelligence sector relationships. This is a structural evidence ceiling that applies equally to V-MIL (defence client claims), V-DIG (current IDV vendor), and V-ECON (Israeli revenue scale). The ceiling cannot be lowered without regulatory disclosure, investigative access to Upwork’s internal records, or whistle-blower reporting.

A second cross-domain concern is the systematic inapplicability of several rubric categories to a digital-only, no-manufacturing business model. The V-MIL, V-ECON, and V-DIG rubrics were designed to accommodate goods producers, logistics operators, and physical infrastructure companies. Much of the potential scoring surface in those domains is structurally inapplicable to Upwork — a circumstance that tends to suppress the score toward the lower end of the tier range without necessarily indicating that no concerns exist. Concerns identified in this audit are primarily about platform governance (payment access for Palestinian users, identity verification vendor relationships) and corporate political conduct (the Ukraine/Gaza asymmetry) rather than about physical supply chains.

The service suspension asymmetry has been acknowledged in both V-ECON and V-POL. Its interpretation as evidence of selective politics is contested by a sanctions-compliance explanation. The audit records the asymmetry as a documented fact, scores it in V-POL at the double-standard band, and notes the plausibility of the partial sanctions-compliance explanation as a counter-argument. Neither explanation can be definitively resolved from public sources alone.

Named Entities and Evidence Map

BDS-1000 Score

Composite BDS-1000 Score: 114 — Tier E (0–199)

The V-MIL domain scores zero across all three criteria: Upwork has no physical products, no defence contracts, and no kinetic supply chain; the entire V-MIL rubric scope is structurally inapplicable. The V-DIG domain is the primary score driver, with a confirmed direct procurement relationship with AU10TIX (now described as discontinued) and an ongoing Payoneer payment integration; the Customer Cap binds Impact to ≤3.9, and magnitude is suppressed by the immaterial share of Upwork’s technology spend that these relationships represent. V-ECON reflects direct digital services provision to Israeli users through VAT-compliant operations and a marketplace directory page, with no Israeli FDI, subsidiary, or office; magnitude is scored conservatively given the complete absence of disclosed Israel-specific revenue. V-POL captures the Ukraine/Gaza double standard — selective silence from a company that has demonstrated activist capacity — at low magnitude, as the finding is a passive omission rather than a high-frequency or high-dollar political act.

The composite formula gives full weight to V-DIG (the highest domain score, V_MAX = 1.50) and applies a 0.2 multiplier to the sum of the other non-zero domain scores (1.60), producing a BRS of ((1.50 + 0.32) / 16) × 1000 = 114.

Confidence, Limits, and Open Questions

High confidence findings: V-MIL null result (structural inapplicability confirmed across multiple source classes); Ukraine/Gaza response asymmetry (documented across independent sources including named press releases, investor guidance, and trade media); AU10TIX as a historical Israeli-origin IDV vendor (three independent sources: Wired, Dark Reading, TrustCloud); Payoneer as ongoing Israeli-founded payment integration (multiple primary sources); no Project Nimbus participation; no Israeli subsidiary or R&D centre (confirmed across multiple 10-K filings); no BDS campaign targeting Upwork.

Moderate confidence findings: AU10TIX relationship described as discontinued following mid-2024 breach — plausible and reported consistently, but not confirmed through a primary Upwork corporate disclosure. Israeli-market revenue scale — confirmed as some activity exists (VAT compliance, marketplace directory) but the magnitude is genuinely unknown. Payoneer described as a “strategic partnership” in some sources — confirmed as a payment integration; commercial terms not publicly disclosed.

Low confidence / unresolved findings: Current Upwork identity verification vendor — publicly unidentified; subprocessor list not retrievable in current form. Whether Israeli defence contractors hold active enterprise client accounts on Upwork — cannot be confirmed or denied from public sources. Kevin Harvey’s post-June 2025 board status — unconfirmed in training data; requires verification via current DEF 14A proxy filing.

Open questions:

• What identity verification vendor replaced AU10TIX, and is it Israeli-origin?
• Does Upwork’s current live subprocessor list name any Israeli-origin vendors not identified in this audit?
• Has Upwork made any private or financial commitment to Gaza Sky Geeks post-October 2023?
• Has the Upwork Foundation made any donation to Palestinian humanitarian organisations during the 2023–2026 conflict period?
• What is the scale of Upwork’s Israeli-market revenue as a proportion of total international revenue?
• Has Upwork taken any undisclosed platform-level accommodation for Palestinian freelancers experiencing payment disruption?

Recommended Actions

For procurement-focused reviewers (V-DIG, score driver): The AU10TIX relationship, though described as discontinued, was active for multiple years and exposed user biometric metadata. Reviewers should retrieve the current live Upwork subprocessor list and current DPA to confirm the replacement identity verification vendor and assess whether any Israeli-origin successor vendor has been engaged.⁴⁶ If the replacement vendor is also Israeli-origin, the V-DIG score should be revisited. This is a targeted, achievable verification step that directly addresses the highest-confidence finding in the audit.

For political-risk reviewers (V-POL, score driver): The Ukraine/Gaza asymmetry is the most solidly documented concern and the one most likely to attract civil society attention. Monitor whether Upwork publishes any statement, donation, or operational modification in response to the Gaza conflict before any publication or investment decision. An equivalent response to Gaza would materially change the V-POL characterisation from Band 2.1–3.0 (double standard) toward Band 1–2.0 (consistent neutrality or positive engagement). The absence of any equivalent response through April 2026 is a confirmed finding.

For economic exposure assessment (V-ECON): The Israeli VAT compliance obligation and marketplace directory page confirm Israeli-resident user activity but provide no revenue scale information. Any reviewer requiring a quantified Israeli revenue exposure should contact Upwork investor relations directly for non-public segment data, noting that the company has no public obligation to disclose this figure. The conservative M score of 2.50 should not be elevated without a primary revenue disclosure.

For governance reviewers (V-POL board composition): Confirm Kevin Harvey’s post-June 2025 board status via the most recent DEF 14A proxy filing.²⁰ Assess Dana L. Evan’s Audit Committee remit in relation to any future platform governance decisions affecting Palestinian users or Israeli-origin vendor relationships. Neither finding currently changes the scoring, but board composition is a live governance variable.

For civil society engagement: No organised BDS campaign currently targets Upwork, and no major NGO has published a dedicated investigation of Upwork’s Israeli technology relationships. The AU10TIX breach disclosure, Palestinian payment access barriers, and the Ukraine/Gaza communication asymmetry represent three documented points of engagement that could form the basis of a civil society inquiry if an organisation wished to pursue one. The evidence base for such an inquiry is documented in this audit; the primary gap to close would be the current IDV vendor identity and the platform’s approach to Palestinian user payment accommodation.

End Notes