Waze

Target Profile

• Company: Waze Mobile Ltd.
• Jurisdiction: Israel (company registry no. 514100056); ultimate parent Alphabet Inc., Delaware, USA
• Headquarters: Ra’anana / Tel Aviv metropolitan area, Israel (R&D); Mountain View, California, USA (corporate governance via Google LLC / Alphabet Inc.)
• Sector: Consumer navigation software; location-based services; digital advertising
• Relevant operating footprint: Israeli R&D and engineering centre (retained as explicit condition of 2013 acquisition); active navigation service in Israel, the West Bank, and globally; Waze for Cities government data-sharing programme with confirmed Israeli municipal and ministry partners; prior Waycare data-sharing partnership; Carbyne third-party emergency dispatch integration
• Key executives or governance actors: Christopher Phillips (VP & GM, Google Geo, post-2022 restructuring); Neha Parikh (former CEO, departed December 2022); co-founders Uri Levine, Ehud Shabtai (Unit 8200 alumni, post-acquisition emeritus); Noam Bardin (co-founder / former CEO, departed 2021)
• BDS-1000 score: 673
• Tier: Tier B (600–799)

Executive Summary

Waze Mobile Ltd. is an Israeli-origin consumer navigation company founded in 2006, acquired by Google LLC in 2013 for approximately $1.03–1.3 billion, and operated ever since as a wholly owned subsidiary of Alphabet Inc. with its core engineering base retained in Tel Aviv. Its BDS-1000 composite score of 673 places it in Tier B, reflecting a company whose involvement with Israeli state structures is real, documented, and multi-layered — but whose primary exposure derives from its foundational economic identity and data-infrastructure role rather than from direct military supply.

The score is anchored by the V-ECON domain (8.50), where Waze satisfies the Israeli-Nexus Floor through co-occurrence of Israeli founding, active Israeli legal and tax registration, and an R&D operation explicitly preserved as a term of the acquisition. A landmark NIS 800 million (approximately USD 230 million) intellectual property transfer tax paid to the Israeli treasury upon acquisition and ongoing employer-side tax contributions confirm active, recurring economic participation in Israeli state revenue. The V-DIG domain (6.50) captures the data-exposure dimension: Waze’s real-time crowdsourced location pipeline is operated by an Israeli-registered engineering entity, with documented downstream data flows into Waycare (police resource deployment), Carbyne (emergency dispatch), and Waze for Cities government partners; October 2023 coordination with IDF Home Front Command to disable live traffic features confirms operational responsiveness to Israeli military-security requests. The V-POL domain (4.71) documents sustained algorithmic asymmetry — the “Avoid Dangerous Areas” routing feature, Palestinian mapping underrepresentation, and the structural consequences of the December 2022 merger placing Waze within the Google Geo division that services Project Nimbus. The V-MIL domain contributes negligibly (0.12): Waze is a software-only product with no defence contracts, no procurement relationship with Israeli military primes, and only incidental civilian-product touchpoints with the IDF.

Material evidence gaps constrain the analysis: the contractual basis for IDF Home Front Command coordination in October 2023 is not publicly established; the full roster of Israeli government bodies enrolled in Waze for Cities is not publicly disclosed; and whether Waze user data is technically accessible to Project Nimbus clients under the current Geo division architecture has not been confirmed. These gaps affect precision, not direction.

Timeline of Relevant Events

Corporate Overview

Waze Mobile Ltd. is an Israeli-founded, Israeli-registered consumer navigation software company that has operated as a wholly owned subsidiary of Google LLC (itself a subsidiary of Alphabet Inc., NASDAQ: GOOGL/GOOG) since June 2013.[^1] The company was founded in 2006 under the name FreeMap Israel by Ehud Shabtai, Uri Levine, and Amir Shinar, and built a crowdsourced, community-edited navigation application that by the time of its acquisition was the most-used navigation application in Israel and a significant consumer product globally.[^1][^2]

The acquisition price of approximately $1.03–1.3 billion made it one of the largest technology exits in Israeli history, and its downstream effects on Israeli startup formation and investment appetite are extensively documented in Israeli technology press.[^2][^28] A reported competing approach from Facebook is said to have collapsed because Facebook demanded relocation of the engineering team to Menlo Park — a condition the founders declined, signalling the depth of the Israeli R&D anchoring.[^2] The Google acquisition therefore explicitly preserved Israel as the company’s engineering centre, a commitment that has been maintained continuously through to available reporting.[^1]

Since the December 2022 restructuring, Waze no longer has an independent CEO or leadership structure; it operates as a product line within Google’s Geo division under VP & GM Christopher Phillips.[^20][^21] Alphabet does not separately report Waze revenues or operational figures; all financial results are consolidated within the Google Services segment.[^29] Waze’s primary revenue mechanism is hyperlocal digital advertising — Branded Pins, Zero-Speed Takeover placements, and Promoted Search — delivered through the navigation interface to its global user base.

Domain Summaries

V-MIL: Military

Mechanism of Involvement

Definitional scope. The V-MIL domain assesses direct defence contracting, tactical product provision, defence prime supply chain integration, logistical sustainment of military installations, and munitions or weapons platform involvement. Waze is a free consumer navigation application distributed through commercial app stores. It produces no physical goods, holds no export licences for controlled goods, appears in no IMOD procurement registry, and has no identified defence prime supply relationship with Elbit Systems, Israel Aerospace Industries, Rafael Advanced Defense Systems, or any other Israeli or international defence manufacturer. For the purposes of V-MIL scoring, this product class is structurally outside the domain’s core scope.[^1]

October 2023 traffic data disabling. The most operationally significant documented interaction between Waze and the Israeli military-security apparatus is the October 2023 disabling of live crowdsourced incident and traffic features following the Hamas attacks. Multiple sources confirm this was done in coordination with, or in response to requests from, the IDF Home Front Command, which cited operational security concerns about adversary use of real-time crowd-movement data.[^25] This action was also taken by Google Maps and Apple Maps. It constitutes a compliance response by a commercial entity to a state or military request — not a formal supply agreement, not a procurement transaction, and not a kinetic contribution. The legal basis — whether a voluntary decision, a formal Israeli Emergency Regulations order, or a directive from the National Cyber Directorate — was not publicly established by Waze or Google.[^25][^30]

The Qalandia incident and soldier use of the consumer application. The February 2016 incident at Qalandia refugee camp, in which two Israeli reserve soldiers navigated into the camp using the standard commercial Waze application, is the most concrete documented intersection of Waze and IDF personnel in an operational setting.[^8] Then-Defence Minister Moshe Ya’alon publicly criticised soldiers for using civilian navigation applications, confirming that IDF command did not officially sanction the practice and that the use was informal and unsanctioned.[^8] This classification — incidental civilian-product use by military personnel — means the incident does not establish a supply, licensing, or service relationship between Waze and the IDF. A second reported routing incident in 2017 follows the same pattern.[^9] These events are evidence of product reach, not of military contracting.

Shin Bet “Waze-like” navigation application. A Jerusalem Post report from 2024 described a Shin Bet-developed GPS navigation application for IDF ground forces operating in Gaza, characterised as functioning similarly to Waze in its user-interface conventions and incorporating Blue Force Tracking and hazard alerting.[^31] The report explicitly identifies this as a Shin Bet-developed tool, not a Waze product or licensed Waze derivative. The data source for this application’s underlying maps is not disclosed in the cited reporting. Any inference that this application was built on Waze datasets, APIs, or codebases is not supported by the source and is not recorded as a verified finding.

Project Nimbus: parent-level context, not Waze-specific. Google LLC holds the Project Nimbus cloud infrastructure contract, awarded in 2021 and valued at approximately $1.2 billion jointly with Amazon Web Services, covering Israeli government entities including the Ministry of Defence.[^16][^17] As a Google subsidiary, Waze runs on Google Cloud Platform. However, no public evidence specifically identifies Waze data, APIs, or services as a named deliverable within the Project Nimbus contract scope, and the contract’s technical annexes have not been made public.[^16][^17] The relationship is structural and inferential, not directly documented.

Waycare/Rekor supply chain. The documented data partnership between Waze and Waycare — an Israeli-founded traffic analytics company — is the most materially relevant supply-chain-adjacent finding in V-MIL. Waze shared crowdsourced traffic data with Waycare, which aggregated it for municipal transport agencies and emergency management purposes.[^13] Waycare was subsequently acquired by Rekor Systems, a US ALPR technology company with US law enforcement and transport agency contracts, for approximately $61 million in 2021.[^14] No verified documentary evidence from procurement records or investigative reporting establishes that Waze-sourced data flowing through the Waycare/Rekor pipeline was operationally used by Israeli security forces for surveillance or predictive policing of Palestinian populations. Rekor’s SEC filings identify no Israeli security force contracts for Waycare-derived Waze data within available training data.

Waze for Cities in a military-logistical context. Waze’s government data-sharing programme operates with confirmed Israeli municipal partners including Tel Aviv, Haifa, and the Ministry of Transport.[^32] This is a civilian traffic-management programme; no verified public evidence identifies the Israel Police or IDF as named programme participants in Waze’s official documentation. The distinction between municipal traffic agencies and national security institutions is material to any V-MIL logistical sustainment assessment.

Counter-Arguments and Evidence Limits

The strongest argument for a higher V-MIL score rests on indirect structural connections: Waze’s infrastructure sits within the same Google Cloud that holds the Nimbus contract; its Israeli R&D base is co-located with a dense network of Israeli defence technology actors; and its crowdsourced data has a documented pathway (via Waycare) into emergency services command systems. These connections are real but inferential rather than documentary. The audits consistently apply a principle of not attributing parent-level acts transitively to Waze where no public evidence establishes Waze as a named party.

The most significant evidence gaps are: (a) the contractual basis for October 2023 IDF Home Front Command coordination has not been publicly disclosed; (b) the full list of Waze for Cities Israeli government partners is not public; (c) whether Waze-origin data is technically accessible to Project Nimbus military clients under the current Geo division architecture is unconfirmed. None of these gaps is likely to move V-MIL materially, given the product class: a software navigation application is definitionally outside the kinetic, physical-supply, and procurement-award categories that anchor V-MIL high scores.

For the V-MIL score to change substantially, evidence would need to emerge of: a named Waze deliverable in Project Nimbus technical annexes; a verified licensing relationship between Waze and the Shin Bet application; or a confirmed direct data-supply relationship between Waze and IDF operational units for targeting or surveillance. None of these has been identified.

Named Entities and Evidence Map

V-DIG: Digital

Mechanism of Involvement

Data architecture and Israeli pipeline. Waze’s core technical function is the real-time collection, processing, and distribution of precise GPS-derived location data and crowdsourced incident reports from a large global user base. The engineering operation responsible for this pipeline is based in Tel Aviv (Ra’anana), and Waze Mobile Ltd. — the Israeli-registered legal entity — is the direct operator and architect of this system.[^1][^33] This is not a subsidiary-level support function: it is the primary technical activity of the company. The Israeli R&D base is not merely a heritage artefact but the ongoing engineering centre for a live system that processes real-time location data for a large user base including the entire Israeli market. This characteristic places Waze squarely within the Data-Exposure Principle floor of the V-DIG rubric: a controller of real-time precise location data at scale, with principal engineering operations in an Israeli-controlled pipeline.

IDF Home Front Command coordination, October 2023. Calcalist/CTech reporting documents that the October 2023 disabling of Waze’s live traffic features in Israel and Gaza was coordinated with or responsive to IDF Home Front Command requests.[^25][^34] The stated rationale was preventing adversaries from inferring population concentrations or troop movements from crowdsourced traffic data. This event demonstrates that Waze’s operational data layer — the live traffic and incident feed that constitutes the product’s primary value — is subject to command-responsive control by Israeli military-security authorities under wartime conditions. This is not a hypothetical data-access pathway; it is a documented operational relationship that has been exercised.

Waycare downstream data flow. The documented Waze–Waycare data-sharing partnership, confirmed by GovTech, established a direct feed of Waze crowdsourced traffic data into Waycare’s predictive analytics platform, which was deployed in part for police resource deployment and emergency management.[^13] After Rekor Systems acquired Waycare in 2021, the post-acquisition continuation of the Waze data feed is not publicly confirmed, but the pre-2021 data pathway is documented.[^14] The documented use case encompasses police resource optimisation, placing Waze data upstream of law enforcement operational systems.

Carbyne emergency dispatch integration. The Carbyne emergency dispatch platform — an Israeli startup — markets integration of Waze mapping data into 911 and emergency dispatch dashboards, with Carbyne’s platform enabling real-time caller location, multimedia streaming, and situational awareness for field responders.[^35][^36] This constitutes a confirmed downstream third-party integration of Waze location data into emergency services command infrastructure. The data flow is Waze public data → Carbyne platform → dispatch operators. This is not a direct Waze procurement of Carbyne surveillance capabilities; it is a downstream use of Waze’s public data layer, but one that places Waze data in operational use within Israeli emergency command systems.

Waze for Cities and Israeli government partners. Waze’s formal government data-exchange programme has confirmed Israeli partners including Tel Aviv, Haifa, and the Israeli Ministry of Transport, with the Haifa case study documenting real-time Waze data used to operate dynamic traffic signal optimisation at key intersections.[^32] The full list of Israeli government bodies enrolled in the programme — including whether national security agencies participate — is not publicly disclosed. The programme operates on a mutual exchange model; the precise terms of data-sharing with Israeli government partners are not in the public domain.

“Avoid Dangerous Areas” routing: algorithmic dual-use effects. The 7amleh “Mapping Segregation” report documents that Waze’s “Avoid Dangerous Areas” feature classifies Palestinian Authority-administered Areas A and B under the Oslo Accords as zones to be avoided during route calculation for Israeli users, while no equivalent functionality routes Palestinian users away from Israeli military installations, settler-only roads, or checkpoint concentrations.[^19] This routing logic functionally imports Israeli military area designations — the Oslo-derived Area A/B/C framework, enforced on the ground by the IDF — into civilian navigation decisions, producing a differential operational reality for Israeli and Palestinian users traversing the same geography. The IDF’s own public acknowledgment that the 2016 Qalandia soldiers had disabled this feature confirms the feature was active at the time and presupposes its routine operation for Israeli users.[^8]

GPS jamming and IDF operational security concerns. GPS jamming operations affecting Israeli airspace from 2024 onward produced documented disruptions to location-based services including Waze.[^37] Israeli Hayom reported GPS disruptions in Tel Aviv in April 2024 as Israel prepared for potential Iranian aerial action.[^38] Separately, Calcalist reported IDF operational security concerns about troop movement patterns being potentially inferrable from Waze crowdsourced data, indicating some form of coordination between Waze and IDF Home Front Command to manage these risks.[^34] The contractual or regulatory basis for this coordination is not publicly disclosed.

Wiz acquisition and GCP security architecture. Alphabet’s acquisition of Wiz — an Israeli cloud security firm founded by Unit 8200 veterans, which closed in March 2025 at approximately $32 billion — has resulted in Wiz tooling being integrated into GCP’s group-wide security architecture.[^23][^24] Because Waze’s backend runs on GCP, Waze’s infrastructure is,