Morrisons - Digital Audit

Enterprise Technology Stack & Vendor Relationships

Morrisons’ disclosed cloud/software stack centres on Google Cloud, using BigQuery, Cloud Run and Gemini models to power an in-app AI Product Finder that launched 9 July 2025 and remains current ¹². Mastek has built a scalable cloud-native platform for Morrisons on AWS in an engagement described as ongoing ³, and Morrisons separately used Amazon Connect to scale call-centre operations remotely during the COVID-19 period in 2020, though whether this AWS use remains active today is not confirmed by further sourcing ⁴. Tata Consultancy Services (TCS) is named as Morrisons’ digital-transformation partner for loyalty, marketing, e-commerce and retail systems ⁵. NCR Voyix was contracted on 29 April 2025 to supply point-of-sale software across approximately 13,000 checkout lanes in around 500 stores under a five-year SaaS agreement ⁶. Vusion Group, a French firm, supplies electronic shelf label and digital pricing infrastructure across the Morrisons estate ⁷. Separately, TCS is reported to provide infrastructure to Israel’s financial and governmental systems, including involvement in Project Nimbus, per a Salam collective report summarized by Middle East Monitor and TRT World ⁸⁹, and TCS’s own press material confirms its BaNCS software powers Israel’s first fully digital bank ¹⁰; however, no source connects Morrisons’ UK TCS engagement to TCS’s Israel-facing government or Nimbus-related business lines, which are documented as separate business units. No public evidence identified of Morrisons holding direct licensing or subscription relationships with Check Point, Wiz, SentinelOne, CyberArk, Nice, Verint, Claroty, or Palo Alto Networks.

Surveillance, Biometrics & Retail Technology

Morrisons’ loss-prevention stack is built on Auror, a retail crime intelligence platform, supplemented by ANPR, body-worn cameras and a “Subject Recognition” capability ¹¹¹². Auror is a New Zealand-founded company headquartered in Auckland, and no Israeli-origin ownership or underlying technology basis has been identified for the platform ¹³¹⁴. Morrisons’ own privacy policy discloses that its Facial Recognition Technology (FRT) creates a biometric template for each Person of Interest Watchlist image to compare against in-store CCTV footage ¹⁵, though the vendor or technology origin of this specific FRT component is not identified in available sources, and no named Israeli vendor such as Trigo, BriefCam, AnyVision/Oosto, or Trax surfaced in connection with Morrisons. No public evidence identified linking Morrisons to Trigo, BriefCam, AnyVision/Oosto, or Trax specifically, and No public evidence identified of Israeli-origin predictive policing, sentiment analysis, social-media monitoring, or workforce-surveillance tools in use at Morrisons. No public evidence identified that Israeli-origin biometric or surveillance technology reaches Morrisons indirectly via Auror, NCR Voyix, or other named platform providers.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

No public evidence identified that Morrisons operates, leases, or co-locates any data-centre infrastructure in Israel, and No public evidence identified of direct Morrisons participation in Project Nimbus or any comparable Israeli government cloud programme. As a contextual, vendor-level matter, Morrisons’ primary cloud providers - Google Cloud and Amazon Web Services ¹²³⁴ - are the same two companies contracted to deliver Project Nimbus to the Israeli government, military and security services under a $1.2 billion agreement signed in 2021 with an initial seven-year term and potential extension to 23 years ¹⁶¹⁷¹⁸; this is a group-level fact about Google and Amazon generally, and no source ties Morrisons’ specific contracted cloud tenancy or region to the Nimbus programme or to Israeli government workloads. No public evidence identified that Morrisons provides sovereignty or resilience services to Israeli state or military bodies, consistent with Morrisons’ position as a customer of cloud vendors rather than a provider of infrastructure to third parties.

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of any contract, partnership, or service agreement between Morrisons and the Israeli Ministry of Defence, the IDF, Israeli intelligence agencies, or other state security bodies. No public evidence identified of Morrisons’ commercial technology being deployed for military, intelligence, or law-enforcement surveillance purposes in Israel or the Occupied Palestinian Territories. No public evidence identified of Morrisons developing, selling, licensing, or maintaining offensive cyber capabilities, zero-day tools, or digital weapons systems.

AI, Algorithmic & Autonomous Systems

Morrisons’ only disclosed generative-AI deployment is the customer-facing, Gemini-based Product Finder built with Google Cloud for UK in-store navigation, a consumer application with no reported Israel or military nexus ¹². No public evidence identified of Morrisons providing AI/ML, computer vision, or autonomous decision-support systems to Israeli state, military, or security bodies. No public evidence identified that Morrisons’ AI models or platforms have been trained on, or given access to, civilian population data, intercepted communications, or surveillance-derived datasets originating from Israel or the OPT. No public evidence identified of Morrisons providing autonomous target-generation, threat-detection, or tracking systems to Israeli military or security forces.

Technology Ecosystem & R&D Footprint

No public evidence identified of Morrisons operating R&D facilities, engineering offices, innovation labs, or accelerator programmes in Israel, and No public evidence identified of Morrisons acquiring any Israeli-origin technology company or making strategic investments in Israeli tech startups or venture funds. No public evidence identified of patent portfolios, licensing agreements, or co-development arrangements between Morrisons and Israeli-domiciled entities or research institutions such as Technion, Hebrew University, or the Weizmann Institute. At the ownership level, Morrisons has been owned by US private-equity firm Clayton, Dubilier & Rice (CD&R) since 2021, and CD&R’s Europe chairman delivered a keynote at an Israel Private Markets Summit in Tel Aviv, evidencing firm-level engagement with the Israeli investment ecosystem ¹⁹; however, no source identifies any CD&R fund investment in an Israeli surveillance, cyber, AI, SIGINT, or military-technology firm, nor any Morrisons-specific tie arising from this. Board-level review found CEO Rami Baitiéh, who joined in November 2023 after a 28-year Carrefour career and prior service as a French Air Force/Space Reserve colonel, with no Israel-linked defence, settlement-NGO, or Israeli tech-investment affiliations identified ²⁰. Chairman Andrew Higginson’s career at Unilever, Guinness, Tesco, Poundland, N Brown, and BSkyB likewise shows no Israel-related affiliations identified ²¹.

Civil Society Scrutiny & Regulatory History

Morrisons has been named in Palestine Solidarity Campaign correspondence and in BDS-aligned reporting concerning the sourcing of produce labelled “Produce of Israel” and alleged mislabelled settlement-origin goods, dated 2013 and 2020 ²²²³²⁴; these campaigns concern agricultural and food sourcing rather than technology provision, and fall outside the technology-supply-chain scope of this audit. No public evidence identified of any boycott, divestment, or sanctions campaign against Morrisons specifically citing its technology relationships with Israel. Morrisons does not appear in the OHCHR Database of Business Enterprises maintained pursuant to Human Rights Council resolutions 31/36 and 53/25, which as of its September 2025 update lists 158 enterprises from 11 countries, and Morrisons was not named among the enterprises cited in available secondary reporting on that database ²⁵²⁶²⁷. No public evidence identified of regulatory inquiries, legal challenges, export-control actions, or sanctions-related investigations involving Morrisons’ technology sales or services to Israeli state entities.

End Notes