Digital Audit: Delta Air Lines, Inc.

Audit Phase: Digital (Digital / Technology Forensics) Subject Entity: Delta Air Lines, Inc. (NYSE: DAL) Registered Address: 1030 Delta Boulevard, Atlanta, Georgia 30354, United States Audit Date: June 2026 Evidence Base: Published corporate disclosures, vendor case studies and press releases, US Senate correspondence and press releases, SEC proxy filings, trade and technology press, and biometric-policy reporting. All factual claims are drawn from publicly available sources cited in the End Notes.

Scope and directionality note: Digital assesses the digital/technology nexus to Israel. The serious case is the provision of surveillance, digital, data, or cyber technology to the Israeli state, military, or security services. The reverse direction - Delta procuring technology from Israeli-origin vendors - is a customer relationship and is recorded explicitly as such, weighted far lower than provision. No transitive guilt is imputed: an Israeli vendor’s other clients, its founders’ military backgrounds, or a parent group’s separate activities are not attributed to Delta. US-entity relationships (e.g. Amazon Web Services, CrowdStrike, Microsoft, Pangiam) are not Israeli-origin and are noted only for completeness or context. Any major cyberattack suffered by Delta is recorded as an event done to the company, not as provision.

Enterprise Technology Stack & Vendor Relationships

Strategic Cloud and Modernisation Relationship (Direction: Delta as customer; US/non-Israeli vendors)

In February 2021 Delta announced a multi-year agreement with IBM (US-origin) to lead its migration to the public cloud, with Amazon Web Services (AWS) as the designated cloud provider and a hybrid architecture built on Red Hat OpenShift Service on AWS (ROSA).¹² The programme was scoped to move approximately 1,300 applications to the cloud and modernise 32 core systems, with a stated goal of migrating around 90% of applications and databases to the public cloud by the end of 2024, using the IBM Garage methodology.¹² Trade reporting and a published IBM/CAST case study describe CAST Software (French-origin) as used to map and audit legacy application codebases during the migration.² None of these are Israeli-origin vendors; the relationship direction is Delta as customer.

CrowdStrike - Cybersecurity Endpoint (US-origin; event done to Delta)

On 19 July 2024 a defective CrowdStrike Falcon sensor update crashed an estimated 8.5 million Windows devices globally; Delta suffered the most severe airline impact, cancelling approximately 7,000 flights over five days and affecting more than one million customers.³⁴ Delta estimates the incident cost it more than US$500 million (reported as roughly US$170 million in reimbursements and crew costs plus US$380 million in further refunds and SkyMiles outlays) and sued CrowdStrike in Fulton County Superior Court, Georgia, alleging gross negligence and wilful misconduct; CrowdStrike counter-sued, attributing severity to Delta’s own infrastructure.³⁴ A Georgia state judge subsequently allowed much of Delta’s suit to proceed.⁴ CrowdStrike is a US-headquartered company (Austin, Texas) and is not an Israeli-origin firm; this event was done to Delta and is recorded as digital context, not as provision.

NICE Systems / NICE CXone - Contact-Centre Platform (Israeli-origin; Direction: Delta as customer)

NICE Ltd. is an Israeli enterprise-software company headquartered in Ra’anana, Israel (Nasdaq/TASE: NICE). A first-party NICE case study identifies Delta Air Lines as a NICE CXone customer, with the deployment situated in Delta’s Reservations and Sales organisation and centred on CXone Workforce Optimization (WFO) and scheduling across multiple contact centres.⁵⁶ The case study describes a data-driven benchmarking exercise in which CXone WFO outperformed Delta’s incumbent proprietary scheduling tools, producing aligned schedules across six contact centres.⁵⁶ Direction is Delta as customer procuring a commercial SaaS contact-centre product. NICE’s Enlighten AI module is a component of the broader CXone suite; its specific independent deployment at Delta is addressed in the AI section below.

Verint Systems - Compliance / Analytics (Israeli-linked R&D; relationship not evidenced)

Verint Systems is incorporated in the US (Nasdaq: VRNT) and maintains major R&D operations in Herzliya, Israel. No public, first-party source was identified confirming a Verint deployment within Delta’s environment; product-comparison pages that mention both do not establish a contract. No public evidence identified of a direct Delta–Verint relationship.

Israeli-Origin Cybersecurity Vendors (Check Point, CyberArk, Wiz, SentinelOne, Palo Alto Networks)

No public evidence was independently identified confirming a licensing, subscription, or integration relationship between Delta and any of the following Israeli-origin or Israeli-founded cybersecurity vendors: Check Point Software Technologies (Tel Aviv), CyberArk (Petah Tikva), Wiz (Israeli-founded, acquired by Google in 2025), SentinelOne (founded in Tel Aviv by Tomer Weingarten and Almog Cohen), or Palo Alto Networks (co-founded by Israeli national Nir Zuk; US-headquartered). General reporting confirms these firms’ Israeli founding lineage, but none was linked to Delta’s stack in any independently sourced record reviewed. A widely repeated lead that Delta migrated to SentinelOne after the July 2024 CrowdStrike outage was not corroborated by any Delta disclosure, SEC filing, or first-party vendor source. No public evidence identified.

Claroty - OT/ICS/CPS Security (Israeli-origin; board-level overlap confirmed; Delta deployment not evidenced)

Claroty is an industrial cyber-security company established by the Israeli cyber venture foundry Team8; Claroty’s own materials describe its research organisation as drawn from veterans of the Israel Defense Forces’ Unit 8200.⁷ Claroty maintains a documented aviation-sector offering.⁸ A board-level overlap between Delta and Claroty is confirmed from primary sources: David (Dave) DeWalt - founder and CEO of the venture firm NightDragon and former CEO of McAfee and FireEye - serves on Delta’s Board of Directors (see Defence section) and joined Claroty as Chairman of the Board (announced February 2017); the same Claroty release identifies his Delta board role at that time.⁷ No public evidence was identified of a direct Claroty deployment within Delta’s operational-technology or industrial-control environment; the relationship at Delta is a confirmed shared-director overlap, not an evidenced procurement.

Procurement Transparency Constraints

Delta is a publicly listed company subject to SEC disclosure but is not subject to public-procurement transparency for its commercial IT and security vendors. Vendor relationships below the level of named, publicly announced partnerships or vendor case studies are not in the public domain, and the full security/IT vendor stack is undisclosed. This is the principal evidence gap in this domain.

Surveillance, Biometrics & Retail Technology

Biometric Terminal and Digital ID Deployments (Direction: Delta as customer; US/non-Israeli vendors)

Delta opened the first fully biometric terminal in the United States at Hartsfield-Jackson Atlanta International Airport (Terminal F, Maynard H. Jackson International Terminal) on 30 November 2018, operating “curb-to-gate” facial matching in partnership with US Customs and Border Protection (CBP) and the Transportation Security Administration (TSA).⁹ The original international-terminal matching was performed against the CBP traveller-verification database; contemporaneous reporting attributes the underlying CBP matching technology to NEC (Japan-origin) and identifies CBP as the database operator, with no Israeli vendor named.⁹

For the subsequent Delta Digital ID / TSA PreCheck Touchless ID programme, biometric matching is supplied by Pangiam, a US company founded by former DHS and CBP officials; Pangiam acquired the US computer-vision startup Trueface in 2021 to provide the facial-recognition algorithms.¹⁰ The programme, confirmed at Atlanta’s Domestic South Terminal in October 2021, links SkyMiles and TSA PreCheck members’ face biometrics via the Fly Delta app, with reported sign-up of roughly 15,000 members per week at that time.¹⁰ It was later expanded to additional hubs including Detroit, Salt Lake City (October 2024) and Reagan National.¹¹ Neither Pangiam nor Trueface is an Israeli-origin entity; in February 2024 Pangiam was acquired by US defence-AI contractor BigBear.ai, a US (not Israeli) supply-chain change.¹⁰ Direction throughout is Delta as customer.

Fetcherr - AI Revenue Management / Dynamic Pricing (Israeli-origin; Direction: Delta as customer)

Delta uses Fetcherr, an Israeli AI startup, for AI-driven dynamic fare pricing. Fetcherr was founded in 2018–2019 and is headquartered in Netanya, Israel; its founders are Roy Cohen (CEO), Dr Uri Yerushalmi (Chief AI Officer) and Robby Nissan (Chief Strategy Officer), and the company employs roughly 100 staff in Israel.¹² Fetcherr markets a “Large Market Model (LMM)” generative pricing engine.¹² Delta has publicly described the technology as a pricing “super analyst” and stated it was applying machine-learning-managed pricing to approximately 3% of fares with a target of around 20% of its domestic network by the end of 2025.¹³¹⁴ This is the most prominent Delta–Israeli technology relationship and is addressed further in the AI section. Direction is Delta as customer. (The associated US Senate “surveillance pricing” inquiry is recorded under Civil Society Scrutiny below.)

Israeli-Origin Surveillance / Biometric Vendors (Oosto/AnyVision, BriefCam, Trigo)

No public evidence was identified that Delta has deployed facial-recognition, video-analytics, or autonomous-retail technology of Israeli origin within its own operations. Oosto (formerly AnyVision, Israeli) appears in industry commentary on biometric trends but is not Delta’s matching engine (Pangiam/Trueface is).¹⁰ BriefCam (Israeli video-analytics firm, acquired by Canon) is reported deployed in shared airport infrastructure at LaGuardia’s Terminal B (operated by LaGuardia Gateway Partners), where Delta does not operate (Delta uses Terminals C and D); no direct Delta procurement of BriefCam was identified. Trigo (Israeli autonomous-retail) has no documented aviation application and no Delta relationship identified. No public evidence identified of direct Delta deployment of any of these.

No public evidence was identified of Delta using Israeli-origin predictive-policing, workforce-surveillance, sentiment-analysis, or social-media-monitoring tools.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Data Centre Operations in Israel

No public evidence was identified that Delta operates, leases, or co-locates data-centre infrastructure within Israel. Delta’s disclosed cloud strategy is anchored on AWS (a US-entity relationship) hosted in US-based AWS regions, following the IBM-led migration described above.¹²

Project Nimbus & Israeli State Cloud Infrastructure

Not applicable. Project Nimbus is the Israeli-government cloud contract awarded to Amazon Web Services and Google Cloud to provide cloud and AI services to Israeli government ministries and bodies. Delta is a commercial consumer of AWS as a cloud platform; it is neither a party to, participant in, nor sub-provider under Project Nimbus, and its commercial AWS use does not make it a Nimbus participant. No public evidence was identified of Delta involvement in any Israeli state-backed digital-infrastructure programme.

Data-Sovereignty or Resilience Services to Israeli State Institutions

No public evidence identified. Delta is a commercial airline and does not operate as a cloud-service or data-residency provider to any state body, Israeli or otherwise.

Defence, Intelligence & Security Sector Technology Relationships

Military & Intelligence Contracts

No public evidence was identified of any contract, partnership, or service agreement between Delta and the Israeli Ministry of Defence, the Israel Defense Forces (IDF), or Israeli intelligence agencies (Mossad, Shin Bet, or Unit 8200-linked state bodies).

Provision of Technology / Data to the Israeli State or Military

No public evidence was identified of Delta providing surveillance technology, data, software, cloud capacity, or digital services to the Israeli state, military, or security services. This is the directionally serious Digital case, and no qualifying evidence of it was found. No public evidence identified.

Passenger Data - APIS and PNR Obligations

Delta operates commercial passenger service to Tel Aviv (Ben Gurion Airport, TLV), which it resumed and repeatedly suspended/resumed across 2024–2025 amid the regional security situation (most recently resuming JFK–TLV service from 1 September 2025).¹⁵¹⁶ Like all international carriers, Delta’s operations to Israel are subject to mandatory Advanced Passenger Information System (APIS) and Passenger Name Record (PNR) data-sharing obligations under international aviation frameworks and applicable bilateral agreements. These are legal requirements binding all carriers operating international routes to Israel and do not represent discretionary technology provision or a commercial contract with Israeli state security bodies. No public evidence was identified of Delta technology being reported or confirmed as deployed for military, intelligence, or surveillance applications in Israel or the Occupied Palestinian Territories beyond these universal carrier obligations.¹⁵¹⁶

Board-Level Security-Sector Overlap - Dave DeWalt

Delta board member David (Dave) DeWalt is a current director of Delta Air Lines, confirmed in Delta’s 2025 definitive proxy statement (DEF 14A), where he sits on the Audit Committee and chairs the Corporate Governance Committee.¹⁷ DeWalt is the founder and CEO of the cyber-focused venture firm NightDragon and is concurrently Chairman of the Board of Claroty, the Team8-founded Israeli industrial cyber-security company with documented Unit 8200 research lineage.⁷¹⁷ This is a confirmed dual-directorship overlap between Delta and an Israeli-founded cyber-security firm; it is recorded as a board-level connection. No public evidence was identified that this overlap has resulted in Claroty technology being deployed within Delta, nor that Delta provides any technology to Israeli state bodies through it.

Offensive Cyber Capability

No public evidence identified. Delta is a commercial airline; it does not develop, license, or sell offensive cyber capability. Delta was itself the victim of the July 2024 CrowdStrike-update disruption (recorded above), an event done to Delta with no nexus to provision of technology to Israel.

AI, Algorithmic & Autonomous Systems

Dynamic Pricing AI - Fetcherr (Israeli-origin; Direction: Delta as customer)

Delta’s deployment of Fetcherr’s generative “Large Market Model” pricing engine is its most publicly documented engagement with an Israeli-origin AI vendor.¹²¹³¹⁴ Delta stated it was applying machine-learning-managed pricing to roughly 3% of fares with a target of approximately 20% of the domestic network by end-2025, characterising the tool as a decision-support “super analyst” for fare optimisation.¹³¹⁴ In response to a US Senate inquiry (below), Delta publicly stated it does not use, test, or plan any fare product that “targets customers with individualized prices based on personal data,” that it does not share personal information with Fetcherr, and that the AI relies on aggregated data (demand forecasts, competitive offers, route performance) rather than individual consumer profiles.¹⁴¹⁸ The boundary between aggregate demand modelling and individual profiling remains a live regulatory question. Direction is Delta as customer.

Contact-Centre AI - NICE Enlighten (Israeli-origin; component of confirmed CXone deployment)

NICE’s Enlighten AI module (sentiment detection, agent guidance, post-call analytics) is a standard component of the NICE CXone suite that Delta is confirmed to use.⁵⁶ No first-party source independently confirms Enlighten’s specific deployment at Delta beyond the broader CXone case study; its presence is plausible given the confirmed CXone/WFO integration but is not separately evidenced. No public evidence identified beyond the CXone deployment.

AI/ML Provision to Israeli State Bodies

No public evidence identified. No public evidence was identified of Delta providing AI capability, model access, datasets used to train models, or inference services to any Israeli state, military, or security body.

Model Datasets & Surveillance-Derived Data

No public evidence identified. No public evidence was identified that Delta’s AI models have been trained on, or given access to, civilian population data, intercepted communications, or surveillance-derived datasets from Israel or the Occupied Palestinian Territories.

Autonomous Systems & Lethality

No public evidence identified. Delta is a commercial airline with no documented autonomous weapons, targeting, or lethal-autonomy systems.

Technology Ecosystem & R&D Footprint

Israeli R&D Facilities

No public evidence was identified that Delta operates any R&D facility, engineering office, innovation lab, or accelerator programme within Israel. Delta’s documented technology and innovation operations are US-based, centred on its Atlanta headquarters and hub.

Acquisitions & Investments in Israeli Technology Companies

No public evidence was identified of Delta acquiring, or taking a corporate-venture stake in, any Israeli technology company, venture fund, or Israeli-domiciled R&D entity. The Israeli-origin vendors identified here (NICE, Fetcherr) are commercial software suppliers, not Delta investments. No public evidence identified of an Israeli-registered Delta subsidiary or holding structure.

Patents & IP Co-Development with Israeli Institutions

No public evidence was identified of patent portfolios, licensing, or co-development arrangements between Delta and Israeli-domiciled entities or research institutions (Technion, Hebrew University, Weizmann Institute).

Israeli-Origin Vendor Concentration Summary

Based on confirmed and unconfirmed findings in this review: confirmed Israeli-origin commercial vendor relationships (Delta as customer) are NICE CXone (contact-centre WFO) and Fetcherr (AI revenue management/dynamic pricing).⁵⁶¹²¹³¹⁴ A confirmed board-level overlap exists with Claroty via director Dave DeWalt, without evidenced deployment.⁷¹⁷ No direct relationship was evidenced for Verint, Check Point, CyberArk, Wiz, SentinelOne, Palo Alto Networks, Oosto/AnyVision, BriefCam, or Trigo. The undisclosed full vendor stack means secondary embedding within managed services cannot be positively excluded, but no such instance was identified.

Civil Society Scrutiny & Regulatory History

NGO & Academic Scrutiny - Technology Supply Chain

No public evidence was identified of an NGO investigation, academic study, or UN report specifically addressing Delta’s technology relationships with the Israeli state, Israeli defence entities, or Israeli-origin vendors. General governance literature on commercial cloud customers and Project Nimbus exists but does not name Delta as a subject. The Who Profits Research Center database, which tracks corporate involvement in the occupation, was not identified as carrying a Delta technology-supply-chain entry.

US Senate Inquiry - AI “Surveillance Pricing” (Fetcherr)

In July 2025, US Senators Ruben Gallego, Richard Blumenthal, and Mark Warner wrote to Delta CEO Ed Bastian raising concerns about Delta’s plan to extend AI-based revenue-management pricing across about 20% of its domestic network, characterising the practice as potential “surveillance pricing” that could tailor fares to an individual consumer’s willingness to pay.¹⁸¹⁹ Delta responded denying that any fare product targets customers with individualised prices based on personal data, and stating it does not share personal information with Fetcherr.¹⁴¹⁸ This inquiry concerns the data-governance of Delta’s pricing AI and consumer-protection questions; it is not a finding of technology provision to Israel. No regulatory action, fine, or enforcement proceeding arising from the inquiry was identified.

BDS / Boycott Campaigns

No public evidence was identified of an organised boycott, divestment, or sanctions campaign specifically targeting Delta on the grounds of technology provision to Israel or Israeli state entities. Delta’s repeated suspension and resumption of Tel Aviv service across 2024–2025 generated civil-society and trade comment, but that relates to commercial aviation service, not to technology relationships.¹⁵¹⁶

Regulatory & Legal Actions - Technology

The principal technology-domain legal action involving Delta in 2024–2025 is the CrowdStrike litigation in Fulton County Superior Court, Georgia, arising from the July 2024 outage; this is unrelated to any Israeli-technology relationship.³⁴ No ICO/FTC enforcement, export-control action, or sanctions-body action relating to Delta technology sales, services, or data transfers to Israeli state entities was identified. No public evidence identified.

Evidence Gaps

Full IT and security vendor stack (highest priority) - Delta does not publicly disclose its sub-strategic IT and security vendor relationships; the resident security-product stack is undisclosed, so Israeli-origin cybersecurity vendor exposure (e.g. SentinelOne, Verint, Check Point, CyberArk, Wiz) cannot be positively excluded on public evidence.
Claroty–Delta operational deployment - The board-level overlap via Dave DeWalt is confirmed, but no procurement or deployment of Claroty technology within Delta’s OT/ICS environment was evidenced; the operational question is unresolved.
NICE Enlighten at Delta - Deployment is plausible given the confirmed CXone/WFO integration but is not independently confirmed from a first-party source.
Fetcherr data-input scope - The boundary between aggregate demand modelling and any individual-passenger profiling is not fully resolved by public documentation and remains the subject of regulatory interest.
Verint–Delta - Asserted in secondary product-comparison material without a first-party source; unconfirmed.