V-DIG Audit: Wilko Online (CDS Superstores)

Audit Phase: V-DIG Domain Audit Target Entity: Wilko Online (operated by CDS Superstores International Ltd) Prepared: 2026-05-01

Prefatory Note on Evidence Standard

This audit is based exclusively on the research memo supplied. The memo’s principal finding is that no live web research could be conducted during the research session due to tool failure, and that several claims in a prior upstream report (attributed to a Gemini-based research pass) were assessed by the researcher as unsupported or contradicted by their own cited sources. Accordingly:

• Claims confirmed with high confidence from public record are presented as findings with appropriate qualification.
• Claims from the prior Gemini report that the researcher explicitly assessed as unsupported, fabricated, or sourced incorrectly are flagged inline.
• Where the researcher’s conclusion is “No public evidence identified,” that conclusion is reproduced faithfully.
• No claims have been supplemented, extrapolated, or invented beyond what the memo provides.

Enterprise Technology Stack & Vendor Relationships

Corporate Background & Infrastructure Basis

The Range (CDS Superstores International Ltd) acquired the Wilko brand, website, and intellectual property from PwC-appointed administrators in September 2023 for approximately £5 million¹². Wilko.com was relaunched using The Range’s pre-existing e-commerce infrastructure within weeks of acquisition. CDS Superstores subsequently acquired the Homebase brand in 2024, further consolidating multiple retail brands under a single digital and operational infrastructure³⁴. The company is a UK-domiciled private company controlled by Chris Dawson⁵, and files abbreviated accounts at Companies House (company number SC170362)⁶, meaning no detailed technology vendor disclosures are available via statutory filings.

Fulfilment & Digital Transformation Partners

Trade press reporting in 2023–2024 indicates that THG Fulfil (part of THG plc, a British entity) was engaged for logistics and fulfilment services in connection with the relaunched Wilko.com operation⁷. No Israeli-origin technology mandate has been documented in connection with this fulfilment relationship.

UST, a US-headquartered global IT services firm, has been reported in retail technology trade press as involved in digital transformation work for The Range and Wilko⁸. UST has a documented investment relationship with aiOla, an Israeli voice-agentic automation company headquartered in Herzliya, Israel⁸⁹. The research memo notes that the deployment of aiOla specifically within Wilko or The Range operational environments — warehouses, stores, or logistics — has not been confirmed by any cited source. The Retail Systems article describing a “new partnership to boost digital expansion”⁸ establishes the commercial relationship between UST and the CDS/Wilko entity; whether that engagement involves the aiOla product specifically is an unresolved evidence gap.

Cybersecurity Vendor Claims — Evidentiary Assessment

The prior Gemini report made several claims about cybersecurity vendor deployments at CDS Superstores. The research memo assessed each against the cited sources:

• Check Point Quantum Spark: Claimed as deployed by CDS Superstores, citing a Check Point product press release¹⁰. The researcher assessed this as having no evidentiary basis in the cited source, which is a generic product announcement containing no reference to CDS, The Range, or Wilko. The CVE-2024-24919 vulnerability documentation for Check Point Security Gateways¹⁰ similarly contains no CDS/Range/Wilko connection. The claim is flagged as unsupported or potentially fabricated by the researcher.

• SentinelOne: Claimed as deployed at The Range, citing a job posting on SentinelOne’s own Greenhouse recruitment board[^14 — excluded per memo, root domain only]. The researcher assessed this as a category error: the cited source is a SentinelOne internal job advertisement, not a The Range hiring notice. The claim is flagged as unsupported by the cited source.

• CyberArk: Cited in the prior Gemini report as “highly likely” for CDS given enterprise complexity, with no direct source. The research memo notes this is explicitly speculative inference, not evidence, and does not meet verification standards.

• Imperva: Claimed without a source connecting Imperva to CDS/Range/Wilko. The research memo found no source cited that establishes this connection.

No corporate filing, procurement record, press release, or regulatory disclosure publicly links CDS Superstores or The Range to Check Point, SentinelOne, CyberArk, Imperva, or any other named Israeli-origin cybersecurity vendor as confirmed clients or licensees.

E-Commerce & Personalisation Vendors

• Riskified (Tel Aviv, Israel; NASDAQ: RSKD): The prior Gemini report claimed The Range is a Riskified client, citing a D.A. Davidson conference transcript¹¹ and a buyer’s kit PDF. The research memo notes that conference transcripts may name-drop clients without formal disclosure, and that buyer’s kit PDFs are marketing collateral rather than client disclosures. The claim is unconfirmed. The memo notes that Riskified’s SEC filings and earnings call transcripts represent the appropriate verification route¹¹.

• Dynamic Yield (Tel Aviv, Israel; acquired by Mastercard 2022): The prior Gemini report claims The Range appears as a client on Dynamic Yield’s website. The research memo assessed this as the single highest-plausibility Gemini claim, noting that The Range’s use of a personalisation platform is commercially credible and that Dynamic Yield’s client page does list major retailers. However, the current status of any Range–Dynamic Yield relationship post-Mastercard acquisition cannot be confirmed without live access to the Dynamic Yield client page. This claim is flagged for priority manual verification rather than inclusion as a finding.

• Yotpo (Tel Aviv, Israel): Claimed by the prior Gemini report, citing a GetApp software directory listing. The research memo assessed this as unsupported: GetApp is a comparison platform and does not publish client relationships between vendors and named retailers.

Surveillance, Biometrics & Retail Technology

Video Analytics

BriefCam is an Israeli-founded video analytics company (established in Modi’in, Israel) acquired by Canon Inc. in 2018. It provides video synopsis, facial recognition capability, and behavioural analytics, and has documented deployments with UK law enforcement and some UK retail environments in general industry reporting. However, no specific deployment of BriefCam at CDS Superstores, The Range, or any Wilko-branded location has been confirmed in any public source⁷.

The prior Gemini report cited a BriefCam product datasheet as evidence of deployment at Wilko/Range. The research memo assessed this as unsupported: the datasheet contains no client-specific content and cannot serve as deployment evidence. A further claim that IMAC Group deploys BriefCam for The Range was assessed as unsupported, citing only the IMAC Group homepage with no linking case study, press release, or announcement connecting IMAC, BriefCam, and CDS/Range/Wilko.

Facial Recognition & Other Biometric Technologies

No public evidence has been identified for the deployment of facial recognition, behavioural biometrics, or any Israeli-origin biometric vendor — including AnyVision/Oosto, Trigo, or Trax — at any CDS Superstores, The Range, or Wilko-branded site.

Workforce & Customer Surveillance

No public evidence has been identified for predictive policing tools, sentiment analysis systems, social media monitoring platforms, or workforce surveillance technologies of Israeli origin at CDS Superstores, The Range, or Wilko Online. UK retail trade sources reviewed at the level of training data — including RTIH, Retail Gazette, Retail Systems, and Retail Technology Review — carry no documented case studies of Israeli surveillance technology at this entity¹²⁷.

Visual AI & Product Discovery

Syte (Tel Aviv, Israel): The prior Gemini report cited a WPP BAV Visual AI market report as evidence of Syte use by The Range. The research memo assessed this claim as not supported by the cited source, which is a general industry document on visual AI rather than a Syte client list. No public evidence of a Syte–Range/Wilko relationship has been identified.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Cloud Provider & Data Residency

CDS Superstores has not publicly disclosed its cloud provider arrangements. Based on standard UK retail practice and GDPR compliance requirements, commodity public cloud infrastructure — likely AWS or Microsoft Azure UK regions — is the operationally expected configuration, but no cloud provider contract has been disclosed by CDS Superstores in any public filing, press release, or corporate statement⁴⁶.

Israeli Data Centre or Co-Location Presence

No public evidence has been identified that CDS Superstores, The Range, or Wilko Online operates, leases, or co-locates data centre or server infrastructure in Israel.

Project Nimbus & Israeli State Cloud Participation

No public evidence has been identified that CDS Superstores participates in, benefits from, or is a party to Project Nimbus or any Israeli government cloud procurement initiative. Project Nimbus contracts are held by Google Cloud and AWS; CDS Superstores appears in no disclosed capacity in connection with those agreements.

Data Sovereignty Services to Israeli State Entities

No public evidence has been identified that CDS Superstores, The Range, or Wilko Online markets or provides data sovereignty services, cloud hosting, or data processing infrastructure to Israeli state institutions.

Defence, Intelligence & Security Sector Technology Relationships

No public evidence has been identified across any of the following categories:

• Military or intelligence contracts between CDS Superstores, The Range, or Wilko Online and the Israeli Ministry of Defence, the Israel Defense Forces, or Israeli intelligence agencies (Mossad, Shin Bet, Unit 8200, or affiliated entities).
• Provision of dual-use technology by CDS Superstores, The Range, or Wilko to Israeli state or military bodies.
• Development, sale, or licensing of offensive cyber capabilities by or through CDS Superstores, The Range, or Wilko Online.

Source classes reviewed at the level of training data include: Companies House filings for CDS Superstores⁶, UK Ministry of Defence public contract records, Israeli defence ministry public disclosures, and major UK and Israeli news archives. None contain references to CDS Superstores, The Range, or Wilko in a defence or intelligence context.

AI, Algorithmic & Autonomous Systems

AI Provision to State or Military Bodies

No public evidence has been identified for:

• AI or machine learning system provision by CDS Superstores, The Range, or Wilko to Israeli state, military, or security bodies.
• AI training data derived from Israeli civilian populations, surveillance of occupied territories, or military operational data used in any CDS/Range/Wilko AI system.
• Autonomous targeting systems, fire-control AI, or kill-chain decision support tools provided by CDS Superstores, The Range, or Wilko Online.

Retail AI & Personalisation — Israeli-Origin Vendors

The prior Gemini report identified three Israeli-origin AI/personalisation vendors as deployed by The Range or Wilko. The research memo’s assessment of each:

• Dynamic Yield (Mastercard, originally Tel Aviv): Structurally plausible as a retail personalisation vendor; cited source⁴ does not confirm the relationship. Flagged as the highest-priority unresolved claim requiring manual verification against Dynamic Yield’s live client page and Mastercard/Dynamic Yield press releases.

• Riskified (Tel Aviv; NASDAQ: RSKD): Commercially plausible as a fraud-management vendor for a UK e-commerce retailer. The conference transcript¹¹ and buyer’s kit cited by Gemini do not constitute client confirmation. Verification against Riskified SEC filings (Form 20-F, earnings call transcripts) is required before any finding can be recorded¹¹.

• Syte (Tel Aviv): Claim assessed as unsupported by the cited source, which is a general WPP market report on visual AI, not a Syte client list.

Automated Decision-Making

No public evidence has been identified of automated decision-making systems of Israeli origin deployed by CDS Superstores, The Range, or Wilko that affect employment, consumer credit, access to services, or other consequential domains subject to UK GDPR Article 22 obligations.

Technology Ecosystem & R&D Footprint

R&D Facilities & Engineering Offices

CDS Superstores is a UK-domiciled private retail group. No R&D facilities, engineering offices, innovation labs, or technology accelerator programmes operated by CDS Superstores, The Range, or Wilko in Israel are documented in any public record⁴⁵⁶.

Israeli Technology Acquisitions

No acquisitions of Israeli-origin technology companies by CDS Superstores have been publicly reported⁴⁵.

Academic & Research Institution Linkages

No patent filings, technology licensing agreements, sponsored research arrangements, or co-development partnerships with Israeli research institutions — including the Technion–Israel Institute of Technology, Hebrew University of Jerusalem, or the Weizmann Institute of Science — have been identified in connection with CDS Superstores, The Range, or Wilko Online.

Venture, Accelerator & Ecosystem Participation

No participation by CDS Superstores, The Range, or Wilko in Israeli government-sponsored technology programmes, Israel Innovation Authority initiatives, bilateral UK–Israel tech accelerators, or Israeli venture ecosystems has been documented in any public source. The company’s retail acquisition strategy — acquiring distressed UK retail brands (Wilko¹², Homebase³) — shows no technology-sector or Israeli-market orientation.

Technology Supply Chain Note

The UST–aiOla investment relationship⁸⁹ represents the only documented structural linkage between the CDS/Wilko technology supply chain and an Israeli-origin technology company. As noted in the Enterprise Technology Stack section, the operational deployment of aiOla within CDS/Range/Wilko environments specifically remains an unresolved evidence gap. No other Israeli-origin vendor appears in the confirmed technology supply chain.

Civil Society Scrutiny & Regulatory History

BDS & NGO Campaign Activity

No public evidence has been identified of BDS Movement campaigns, War on Want investigations, Palestine Solidarity Campaign (PSC) actions, or any other civil society or NGO activity specifically targeting CDS Superstores, The Range, or Wilko Online on grounds of Israeli technology relationships or commercial ties with Israeli state entities. CDS/Range/Wilko does not appear on any published BDS campaign target list reviewed at the level of training data.

Regulatory & Legal Proceedings

No public evidence has been identified of:

• UK Information Commissioner’s Office (ICO) enforcement actions against CDS Superstores, The Range, or Wilko relating to Israeli technology vendor relationships or cross-border data transfers.
• UK Competition and Markets Authority (CMA) or Financial Conduct Authority (FCA) proceedings involving Israeli technology relationships.
• UK export control or sanctions-related investigations or actions involving CDS Superstores’ technology procurement or sales.
• Legal challenges by civil society organisations relating to Israeli technology use by CDS/Range/Wilko.

Prior Regulatory History (Non-Israel)

The Wilko brand’s corporate collapse in August 2023 — which led to the PwC administration and subsequent acquisition — was the subject of parliamentary scrutiny regarding the treatment of employees and pensioners¹²¹². This regulatory and parliamentary attention relates to employment and insolvency matters and has no bearing on Israeli technology relationships.

End Notes