V-DIG Technographic Audit

Waze Mobile Ltd.

Audit Phase: V-DIG Domain Audit Date: May 2025 Scope: Israeli-origin technology relationships, dual-use data flows, cloud infrastructure, civil society scrutiny, and AI/algorithmic systems

Enterprise Technology Stack & Vendor Relationships

Corporate Structure & Acquisition Context

Waze Mobile Ltd. is a wholly-owned subsidiary of Alphabet Inc., acquired by Google in June 2013 for a reported $1.03–1.3 billion.¹² The company retains its Tel Aviv–area R&D headquarters and operates as a semi-autonomous product team within Google’s Maps and Geo division. All technology procurement at the infrastructure level is therefore mediated through Google’s group-wide vendor relationships; Waze does not publish independent procurement disclosures or technology stack filings.

Wiz (Cloud Security)

Alphabet entered advanced acquisition discussions with Wiz — an Israeli cloud security firm founded by veterans of IDF Unit 8200 — in mid-2024, initially at a reported valuation of approximately $23 billion.³ Those talks collapsed in July 2024.⁴ Alphabet subsequently completed a revised acquisition of Wiz at approximately $32 billion, which closed in March 2025.⁵ Wiz is now a wholly-owned Alphabet subsidiary. Because Waze’s backend infrastructure operates on Google Cloud Platform (GCP), and Wiz tooling is being integrated into GCP’s group-wide security architecture post-acquisition, Waze’s infrastructure is, as of 2025, secured in part by Wiz capabilities through parent-level integration.⁶⁷ This is an indirect, parent-level relationship; no direct Waze–Wiz procurement has been publicly documented.

Wiz’s founding team’s Unit 8200 origins have been reported in Israeli and international technology press.⁶⁷ Sacra Research (2023) characterised Wiz as representative of a broader pipeline of Israeli cybersecurity companies emerging from elite military intelligence units.⁷

Check Point Software Technologies

Check Point and Wiz announced a strategic partnership in 2024 to deliver combined cloud security coverage.⁸ Check Point’s founder Gil Shwed is widely reported as having IDF intelligence service origins, and the firm is the dominant enterprise network security vendor in the Israeli market. No public evidence has been identified of a direct contractual or licensing relationship between Waze Mobile Ltd. specifically and Check Point. Any relationship is inferential, based on Waze’s Tel Aviv operational footprint and the general prevalence of Check Point in Israeli enterprise environments.

CyberArk

CyberArk and Wiz announced a product integration partnership in 2024 covering privileged access management and cloud identity visibility.⁹ No public evidence has been identified of a direct Waze–CyberArk contractual relationship. The inference in prior reporting flows from the Wiz–CyberArk integration and broader Israeli enterprise norms, not documented Waze procurement.

SentinelOne, NICE, Verint, Palo Alto Networks

No public evidence identified of any direct or indirect relationship between Waze Mobile Ltd. and SentinelOne, NICE Systems, Verint, or Palo Alto Networks. Associations asserted in prior AI-generated reporting on this subject are inferential and are not supported by documented procurement, partnership announcements, or credible press coverage. These claims are discarded.

Procurement & Systems Integration

No public evidence identified of named systems integrators engaged specifically by Waze for IT or operational transformation programmes. Prior reporting has referenced Israeli integrators (Matrix IT, Ness Technologies) in the context of Israeli police and military IT; no credible link to Waze procurement has been documented. Source classes checked include corporate filings, trade press, and procurement databases.

Surveillance, Biometrics & Retail Technology

Facial Recognition & Biometric Systems

No public evidence identified of Waze deploying or integrating facial recognition, biometric identification, behavioural analytics, or gait analysis technologies from any vendor. Waze is a consumer navigation application with no retail, physical-access, or identity-verification function that would contextually require such systems.

Predictive Analytics: Waycare / Rekor

Waze and Waycare — an Israeli AI traffic analytics firm — maintained a documented data-sharing partnership from approximately 2019, under which Waycare ingested Waze traffic data feeds for predictive traffic management and to assist emergency and police resource deployment.¹⁰ Waycare was acquired by US-listed Rekor Systems in 2021.¹¹ The post-acquisition status of the Waze–Waycare data relationship is not confirmed in public sources. The documented use case is traffic flow optimisation and emergency dispatch support; broader characterisations of this arrangement as predictive policing directed at specific communities are editorial inferences not supported by the cited primary source.¹⁰

Carbyne: Emergency Dispatch Integration

The Carbyne emergency-dispatch platform — an Israeli startup with reported backing from investor entities associated with former Israeli Prime Minister Ehud Barak — markets integration with mapping and navigation data, including Waze feeds, into 911 and emergency dispatch dashboards.¹²¹³ This constitutes a documented third-party use of Waze data within emergency services command systems. The data flow is: Waze public data → Carbyne platform → dispatch operators.¹² This is a downstream third-party integration, not a direct Waze procurement of Carbyne surveillance capabilities. Carbyne’s product line includes real-time caller location, multimedia streaming from the field, and situational awareness tools.¹³

BriefCam / Municipal Surveillance Infrastructure

BriefCam — an Israeli video analytics firm subsequently acquired by Canon in 2018¹⁴ — is documented as a component of Israeli municipal surveillance infrastructure, including within Jerusalem’s “Mabat 2000” integrated CCTV command centre.¹⁵ No direct technical integration between Waze and BriefCam has been publicly documented. Prior reporting asserting that Waze and BriefCam data streams feed into shared municipal dashboards relies on the Stop the Wall “Digital Walls” report¹⁵, which documents Mabat 2000 broadly but does not establish a verified technical data link to Waze outputs.

No public evidence identified of Waze deploying sentiment analysis, social media monitoring, or internal workforce surveillance tools.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Platform Infrastructure

Waze operates on Google Cloud Platform (GCP) as part of its Alphabet subsidiary relationship.¹ Waze does not publish independent data residency disclosures; its infrastructure posture is embedded within Google’s group-wide GCP architecture. Waze’s principal engineering base remains in Tel Aviv¹¹⁶, and data serving Israeli users is likely processed within Israeli GCP infrastructure, though Waze-specific data residency cannot be publicly disaggregated from Google’s general infrastructure disclosures.

Project Nimbus

Project Nimbus is a verified Israeli government cloud infrastructure contract, reported at approximately $1.2 billion, jointly awarded to Google Cloud and Amazon Web Services in 2021.¹⁷¹⁸¹⁹ The contract covers cloud services for Israeli government ministries, and has been reported to include the Israeli Ministry of Defence within its scope.¹⁷¹⁸

Google Cloud is the verified Google-side awardee.¹⁹ Google’s own blog confirmed its selection to provide cloud services “to digitally transform the State of Israel.”¹⁹ Investigative reporting by +972 Magazine documented the contract’s structure in October 2021¹⁸ and published what it described as the full text of the secret contract in 2024.²⁰ The 2024 reporting identified provisions characterised as preventing Google and Amazon from refusing service to Israeli government entities.²⁰

Waze Mobile Ltd. is not a named party to Project Nimbus. The relationship is structural: Waze runs on GCP, and GCP (via Google Cloud Israel) is the Nimbus contractor. The prior AI report’s framing of Waze as having an independent Nimbus relationship is not accurate; the correct characterisation is that Waze’s underlying cloud platform is operated by the Nimbus contractor, and to the extent Israeli GCP regions serve Waze workloads, those regions were established under Nimbus commitments.¹⁹

One additional source cited in prior reporting — a Guardian article dated 2025-10-29 concerning contractual “wink clause” provisions[^note-s41] — post-dates verifiable training coverage and cannot be confirmed as a real publication. It is flagged as unconfirmed and has not been relied upon in this audit.

Employee Protest & Internal Dissent

Google employees staged sit-in protests at Google offices in April 2024 specifically targeting Project Nimbus, resulting in the termination of 28 employees according to The Verge²¹ and additional firings subsequently reported by NPR.²² The “No Tech For Apartheid” campaign²³ and associated employee organising have explicitly named Google Cloud and Project Nimbus as the primary objects of concern; Waze is not individually named as a primary target.²³²⁴

Data Sovereignty & Resilience Services

No public evidence identified that Waze specifically markets or contracts data sovereignty or resilience services to Israeli state or military bodies. This function operates at the Google Cloud platform level, not as a Waze product offering.

Defence, Intelligence & Security Sector Technology Relationships

Direct Military & Intelligence Contracts

No public evidence identified of direct contracts between Waze Mobile Ltd. and the Israeli Ministry of Defence, the Israel Defense Forces (IDF), or Israeli intelligence agencies (Mossad, Shin Bet/Shabak, Aman).

Civil Defence Integration: Bomb Shelter Routing

Waze’s Israeli application includes a documented “Shelter” search feature enabling users to locate the nearest public bomb shelter during missile alert periods.²⁵ The feature requires a georeferenced database of shelter locations. Prior reporting has asserted “API-level integration between Waze and the Ministry of Defense’s emergency data systems.” The documented reality is that Israeli municipalities and the IDF Home Front Command publish shelter location data, and Waze’s Israeli engineering team incorporated this into the app.²⁵ Whether this constitutes a formal contractual API relationship with the Ministry of Defence, or simply reflects use of publicly available civil defence datasets, cannot be determined from public sources.

GPS jamming operations affecting Israeli airspace from 2024 onward — in the context of regional escalation — produced documented disruptions to location-based services including Waze.²⁶²⁷ Israeli Hayom reported GPS disruptions in Tel Aviv in April 2024 as Israel prepared for potential Iranian aerial action.²⁷ These disruptions highlight the operational dependency of navigation services on GPS signal integrity in contested airspace, and have generated documented concern among Israeli users of Waze.²⁶

IDF Operational Security Concerns

Calcalist Tech reported that the IDF has experienced operational security concerns related to soldiers’ use of Waze, with troop movement information potentially inferrable from crowdsourced traffic data.²⁸ The report indicates that some form of coordination between Waze and IDF Home Front Command occurs to manage these risks, but the precise nature and any contractual basis for this coordination are not publicly detailed.²⁸

Dual-Use Data Flows

Three documented or partially documented channels exist through which Waze data enters systems with defence or security sector applications:

Waycare/Rekor: Waze data feeds ingested by Waycare for police resource deployment and emergency management.¹⁰¹¹
Carbyne: Waze mapping data integrated into Israeli emergency dispatch infrastructure.¹²¹³
Connected Citizens Program (Waze for Cities): Waze’s government data-sharing programme, under which real-time traffic and incident data are shared with municipal and state agencies.²⁹³⁰ The roster of specific Israeli police or municipal partners enrolled in this programme is not publicly listed.

The 7amleh “Mapping Segregation” report (2022) identifies Waze’s “Avoid Dangerous Areas” routing algorithm as operationally relevant in the West Bank context, routing users around Palestinian population centres classified as Area A.³¹³² This constitutes an NGO-documented finding of navigational functionality with differential effects on Palestinian and Israeli users; it does not represent an official confirmation of deliberate dual-use design.

Offensive Cyber & Weapons Technology

No public evidence identified. Waze is a consumer navigation application. There is no credible public reporting of Waze developing, licensing, or maintaining offensive cyber capabilities or any form of digital weapons system.

AI, Algorithmic & Autonomous Systems

Internal AI/ML Systems

Waze uses machine learning internally for route optimisation, estimated time of arrival (ETA) prediction, traffic modelling, and incident detection based on crowdsourced driver reports.¹ These are consumer-facing capabilities delivered through Waze’s standard product. No public evidence identified of Waze providing AI or ML systems specifically to Israeli state, military, or security bodies.

Algorithmic Effects on Palestinian Populations

The 7amleh “Mapping Segregation” report (2022) documents the following algorithmic findings concerning Waze’s operation in the West Bank:³¹³²

The “Avoid Dangerous Areas” feature routes users around Palestinian population centres in Area A of the West Bank, which are classified under the Oslo Accords as under Palestinian Authority civil and security control. The routing logic thereby functionally reinforces Israeli military-imposed movement restrictions.
Palestinian villages and internal road networks are inconsistently or incompletely mapped relative to Israeli settlements.
The application does not provide Palestinian users with alerts regarding checkpoint locations, settler-only roads, or settler violence incidents, though it provides Israeli users with security-relevant routing adjustments.

The Jerusalem Quarterly (Institute for Palestine Studies, Issue 96, Winter 2023) includes academic analysis of mapping technologies and spatial politics in East Jerusalem and the West Bank, providing broader scholarly context for the navigational gaps documented by 7amleh.³³

The existence of the Palestinian navigation application Doroob — designed specifically to route around checkpoints and settler roads that Waze does not surface — was reported by the Times of Israel (2019)³⁴ and CBC News (2019)³⁵, corroborating the functionality gap identified in the 7amleh analysis.

Training Data & Model Development

No public evidence identified that Waze’s AI models have been trained on or provided access to civilian population data, intercepted communications, or surveillance-derived datasets beyond what is collected through normal, consented app usage. No data-sharing arrangements between Waze and Israeli intelligence or military research bodies for model training purposes have been publicly documented.

Autonomous Systems & Lethality

No public evidence identified. This finding applies categorically — Waze produces no systems with autonomous targeting or kinetic application.

Technology Ecosystem & R&D Footprint

Israeli R&D Headquarters

Waze’s primary R&D and engineering operations are based in the Tel Aviv metropolitan area (Ra’anana), retained by Google following the 2013 acquisition.¹²¹⁶ This is the company’s principal engineering hub globally, with reported headcount in the hundreds of engineers. Google’s broader workforce reductions in 2023–2024 reportedly produced some contraction at the Tel Aviv office, though the facility remains operational as of available reporting.¹

The prior AI report’s characterisation of the Tel Aviv office as maintaining a “closed loop” of Unit 8200 recruitment is an editorial inference. Israel’s universal conscription system means that IDF service is a baseline qualification for a large proportion of the Israeli technology workforce; no Waze-specific recruitment policy preferencing military intelligence veterans has been publicly documented.

Founders & IDF Background

Uri Levine is publicly documented as one of Waze’s co-founders and has been profiled in Israeli and diaspora Jewish press in the context of his entrepreneurial career.¹⁶ Training-data sources confirm IDF service for the Waze founders generally; however, specific unit affiliation (including Unit 8200) for all individual founders is not uniformly confirmed in verified public sources and should not be asserted without primary or authoritative journalistic sources explicitly naming the relevant unit.

Venture Funding & Investor Relationships

Prior to the Google acquisition, Waze was funded by Magma Venture Partners and Vertex Ventures Israel, among others.³⁶³⁷³⁸ Both are Israeli technology venture capital firms. Prior reporting characterises these firms as “deeply embedded in the military-industrial complex” — this is an editorial claim; both are general technology venture funds with Israeli portfolios, and no verified evidence of specific defence-sector investment mandates has been identified for either firm.³⁷³⁸

Post-Acquisition Independence & Alphabet Ecosystem

Following acquisition, Waze has not been documented as making independent acquisitions of Israeli technology companies. Its R&D footprint is integrated into Alphabet’s broader Maps and Geo ecosystem. The Wiz acquisition by Alphabet (March 2025)⁵ is the most significant recent event affecting the Israeli-technology composition of Waze’s parent company’s infrastructure stack. The strategic implications of Check Point/Wiz and CyberArk/Wiz partnership integrations⁸⁹ flow downward to Waze at the platform level.

Patent & Intellectual Property

Waze-related patents are filed under Google LLC / Waze Mobile Ltd. in the US Patent and Trademark Office.¹ No public evidence identified of co-development arrangements or IP licensing agreements between Waze and Israeli research institutions (Technion, Hebrew University, Weizmann Institute). Source classes checked: USPTO filings, academic partnership announcements, press releases.

Civil Society Scrutiny & Regulatory History

NGO Reports & Academic Analysis

7amleh — Arab Center for the Advancement of Social Media The 2022 “Mapping Segregation” report³¹³² is the most detailed civil society analysis specifically addressing Waze’s operational effects in Palestinian territories. Its core findings are documented in the AI/Algorithmic section above. The report names Waze alongside Google Maps as the primary navigation applications whose design and data choices have material effects on Palestinian freedom of movement. 7amleh’s 2023 digital rights report provides updated broader context on technology and Palestinian populations.³⁹

Stop the Wall — “Digital Walls” Report The Stop the Wall campaign report “Digital Walls”¹⁵ situates Waze within a broader documented ecosystem of Israeli digital surveillance infrastructure. However, the Waze-specific findings within this report are secondary to its primary coverage of biometric systems and CCTV infrastructure (including Mabat 2000/BriefCam). The report does not establish a verified technical data link between Waze outputs and BriefCam-based surveillance systems; prior reporting asserting such a link goes beyond what this source documents.

Institute for Palestine Studies — Jerusalem Quarterly Issue 96 (Winter 2023) of the Jerusalem Quarterly includes academic analysis of mapping technologies and spatial politics in East Jerusalem and the West Bank, providing scholarly context relevant to the navigational technology findings documented elsewhere in this audit.³³

No Tech For Apartheid The “No Tech For Apartheid” campaign²³ targets Google Cloud and Project Nimbus as its primary objects; Waze is not individually named as a primary campaign target, though it falls within the Google/Alphabet ecosystem that the campaign critiques. The campaign’s actions — including the April 2024 sit-in protests²⁴ and related reporting²¹²² — focus on Google Cloud’s contractual relationship with the Israeli state rather than on Waze’s navigation product specifically.

Untold Magazine A 2024 Untold Magazine analysis titled “Beyond Project Nimbus: How Silicon Valley Fuels Israel’s War Machine”⁴⁰ addresses the broader Alphabet/Google ecosystem in the context of Israeli military technology. Waze is addressed as part of this ecosystem.

Boycott, Divestment & Sanctions Activity

No public evidence identified of an organised boycott, divestment, or sanctions campaign specifically targeting Waze as an individual entity, distinct from broader Google/Alphabet-directed campaigns. The BDS movement and allied campaigning have targeted Google principally in the Project Nimbus context. Source classes checked: BDS Movement official website, SumOfUs, change.org petition databases, campaign press releases.

Regulatory & Legal Actions

No public evidence identified of regulatory inquiries, legal challenges, export control actions, or sanctions-related investigations specifically involving Waze’s technology sales or services to Israeli state entities. Source classes checked: EU regulatory databases, US Bureau of Industry and Security (BIS) actions, UK Information Commissioner’s Office, Israeli regulatory filings, major litigation databases.

Location Data Research

Academic research published at USENIX RAID 2019 examined location data leakage in Android mobile device internet traffic.⁴¹ Waze, as a location-dependent navigation application, is part of the broader ecosystem of applications whose data collection and transmission practices have been examined in this literature. No Waze-specific regulatory action arising from this research has been publicly documented.