Subway - Digital Audit

Enterprise Technology Stack & Vendor Relationships

Subway’s point-of-sale technology has transitioned from NCR to PAR Technology, whose EverServ 7000 hardware and cloud-based Brink POS software now serve as the chain’s primary POS platform ¹²³. No public evidence identified of Israeli ownership, R&D centre, or acquisition history connecting either PAR Technology or NCR to Israel. PAR Technology’s 2021 acquisition of loyalty and customer-engagement platform Punchh, valued at roughly $500 million, expanded PAR’s guest-engagement offerings across its quick-service restaurant client base ⁴⁵⁶. No public evidence identified specifically confirming that Punchh powers Subway’s “MyWay Rewards” loyalty programme, and no Israeli-origin ownership or technology was found for Punchh. No public evidence identified of licensing or subscription relationships between Subway and Israeli-origin cybersecurity vendors including Check Point, Wiz, SentinelOne, CyberArk, NICE, Verint, Claroty, or Palo Alto Networks. No public evidence identified of any named systems integrator such as Accenture, Deloitte, Capgemini, Infosys, or TCS holding a Subway-specific engagement, nor of any integrator recommending or mandating Israeli-origin technology as part of a Subway programme. Subway’s franchisee-owned purchasing cooperative, the Independent Purchasing Cooperative (IPC), selected ArrowStream as its strategic supply-chain technology partner ⁷, and the underlying franchise-system procurement and data-standards architecture is documented in a joint GS1 US case study ⁸. Subway’s technology leadership has included Chief Information Officer Dave Blankenship, who announced his transition out of the company at the end of 2025 ⁹¹⁰¹¹, and Global Chief Digital and Information Officer Donagh Herlihy, appointed in 2021 to lead the company’s digital-experience strategy ¹²¹³. Subway maintains publicly posted privacy policies governing both its corporate operations and its Subway Cares Foundation charitable arm ¹⁴¹⁵.

Surveillance, Biometrics & Retail Technology

The only Subway-linked reference to facial recognition identified in available sources is a Harvard Business Review teaching case, “Subway: Are Automated Vending Machines and Facial Recognition the Future?,” which poses a hypothetical, unresolved strategic question about whether Subway’s “Grab & Go” smart-fridge vending units should adopt facial-recognition technology, and does not document an actual deployment ¹⁶. No public evidence identified of Subway’s actual use of Trigo, BriefCam, AnyVision/Oosto, or Trax retail-analytics or computer-vision technologies. No public evidence identified of Israeli-origin predictive-policing, sentiment-analysis, social-media-monitoring, or workforce-surveillance tools used by Subway. No public evidence identified of Israeli-origin biometric or analytics tools reaching Subway indirectly through managed security services or bundled third-party suites.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

No public evidence identified that Subway operates, leases, or co-locates data-centre infrastructure in Israel. No public evidence identified of Subway participation in Project Nimbus or any comparable Israeli government cloud initiative. No public evidence identified of Subway providing data-sovereignty, residency, or resilience services to Israeli state or military institutions, consistent with Subway’s structural position as a technology consumer rather than a cloud or infrastructure provider.

Defence, Intelligence & Security Sector Technology Relationships

No public evidence identified of any contract, partnership, or service agreement between Subway and the Israeli Ministry of Defence, the IDF, or Israeli intelligence agencies. No public evidence identified of Subway’s commercial technology - including its POS, loyalty, or vending systems - being deployed for military, intelligence, or law-enforcement surveillance purposes in Israel or the Occupied Palestinian Territory. No public evidence identified of Subway developing, selling, licensing, or maintaining offensive cyber capabilities.

AI, Algorithmic & Autonomous Systems

No public evidence identified of Subway providing artificial intelligence, machine-learning, or computer-vision systems to Israeli state, military, or security bodies. Subway’s only documented AI-adjacent retail initiative - facial recognition for “Grab & Go” smart-fridge vending - remained, per the Harvard Business Review teaching case, an unresolved internal strategic question as of 2024 rather than a confirmed deployment ¹⁶. No public evidence identified of Subway’s platforms being trained on, or granted access to, surveillance-derived datasets originating from Israel or the Occupied Palestinian Territory. No public evidence identified of Subway providing autonomous targeting or tracking systems of any kind.

Technology Ecosystem & R&D Footprint

No public evidence identified of any Subway-operated R&D facility, engineering office, innovation lab, or accelerator programme in Israel. No public evidence identified of any Subway acquisition of an Israeli-origin technology company or strategic investment in an Israeli startup or venture fund. No public evidence identified of patent portfolios or co-development arrangements between Subway and Israeli-domiciled research institutions such as Technion, Hebrew University, or the Weizmann Institute. Subway has been wholly owned by Roark Capital, an Atlanta-based private-equity firm with roughly $37 billion in assets under management founded by Neal Aronson, since the acquisition - first announced in August 2023 and finalized in 2024 - closed ^{17181920212223}. No public evidence identified of Roark Capital or Neal Aronson holding equity stakes, board roles, or personal investments in Israeli surveillance, cyber, AI, SIGINT, or military-technology firms such as NSO Group, Cellebrite, Carbyne, AnyVision/Oosto, Wiz, Palantir, Check Point, SentinelOne, Verint, or NICE. Former Subway CEO John Chidsey led the company from 2019 until his announced transition at the end of 2024, subsequently continuing as CEO of Norwegian Cruise Line alongside prior board positions at HealthSouth and HCA Healthcare ²⁴²⁵. No public evidence identified of any Israel-related board or investment ties connected to Chidsey.

Civil Society Scrutiny & Regulatory History

A direct search of the OpenSanctions-hosted mirror of the OHCHR “List of Companies Linked to Illegal Settlement in the West Bank” dataset for “Subway” returned zero matching entities ²⁶²⁷, and the OHCHR’s own database and press materials on business enterprises operating in the Occupied Palestinian Territory were reviewed for context ²⁸²⁹³⁰. A free-text search of the Who Profits database for “Subway” returned no matches corresponding to the sandwich chain, surfacing only unrelated Israeli construction and agriculture firms that incidentally share the word “subway” ³¹. Multiple secondary sources confirm that Subway does not appear on the official BDS Movement priority-targets list, though it appears on informal, crowdsourced consumer boycott compilations, some driven by association with fast-food peers rather than by any Subway-specific finding ³²³³³⁴. Reporting on boycott campaigns has specifically distinguished Pizza Hut - cited for franchising inside West Bank settlements - from Subway, which has not been subject to the same allegation ³⁵. No public evidence identified of export-control, sanctions, or regulatory inquiries involving Subway’s technology sales or services to Israeli state entities. Subway operated approximately 21 to 23 franchised locations in Israel from 1992 until their closure in 2004 following the franchisee’s death, with an earlier reported attempt to resume operations noted in trade press in 2003 ³⁶³⁷. Reported comeback attempts followed in 2009, involving investor Gur Gal and a Herzliya Pituach lease with an aspirational plan for 130 stores, and again in 2014 with an announcement seeking new franchisees, but neither resulted in sustained re-entry, and a legal dispute between Gal and Subway was settled through confidential arbitration ³⁶³⁸³⁹. As of this audit, No public evidence identified that Subway currently operates any franchise location in Israel, and - absent Israeli operations - no evidence exists of any Subway-branded store, reseller, or licensee inside a West Bank, Golan, or East Jerusalem settlement ³²³³. A targeted review of the Albanese report “From economy of occupation to economy of genocide” (A/HRC/59/23) found no textual mention of Subway ⁴⁰. In January and February 2024, the LockBit 3.0 ransomware gang claimed to have exfiltrated hundreds of gigabytes of data from Subway’s internal “SBS” network, including employee salary data, franchise royalty payments, and restaurant turnover figures, threatening publication by 2 February 2024, while Subway stated it was investigating the claims ^4142434445. No public evidence identified linking this breach, the “SBS” system, or its hosting or processing location to Israeli jurisdiction or infrastructure.

End Notes