Digital Audit: Hewlett Packard Enterprise

Audit Phase: Digital (Digital / Technology Forensics) Subject Entity: Hewlett Packard Enterprise Company (NYSE: HPE) Headquarters: 1701 E Mossy Oaks Road, Spring, Texas, United States Audit Date: June 2026 Evidence Base: Published corporate disclosures, SEC filings, vendor and acquisition press releases, technology trade press, UN human-rights reporting, and NGO research (Who Profits Research Center, AFSC Investigate, BDS National Committee). All factual claims are drawn from publicly available sources cited in the End Notes.

Scope and directionality note: Digital assesses the digital/technology nexus to Israel. The serious case is the provision of surveillance, digital, data, computing, or cyber technology to the Israeli state, military, or security services. The reverse direction - HPE procuring technology from Israeli-origin vendors, or acquiring an Israeli-founded firm - is recorded explicitly and weighted differently from provision. No transitive guilt is imputed: a partner vendor’s other clients, a founder’s military background, or a separate corporate entity’s activities are not attributed to HPE. US-entity relationships (e.g. Microsoft, Palo Alto Networks) are not Israeli-origin and are noted only for completeness. A cyberattack carried out against HPE is recorded as direction-inbound context, not as provision.

Corporate-split note: The legacy Hewlett-Packard Company split on 1 November 2015 into HP Inc. (consumer/printing) and Hewlett Packard Enterprise (enterprise infrastructure, servers, services). Government and security-sector server/infrastructure business passed to the HPE side. Pre-2015 evidence attributable to the legacy entity is dated and labelled as such; this audit’s primary subject is the post-2015 HPE entity.¹²

Enterprise Technology Stack & Vendor Relationships

Israeli-Origin Technology in HPE’s Own Portfolio (Direction: HPE as acquirer/owner)

Zerto (HPE-owned since September 2021). HPE announced on 1 July 2021 the acquisition of Zerto, a cloud disaster-recovery and continuous-data-protection software company, for approximately US$374 million; the acquisition completed on 1 September 2021.³⁴ Zerto was founded in 2009 and co-headquartered in Herzliya, Israel, and Boston, with around 500 employees and more than 9,000 customers at acquisition.⁵⁴ Zerto’s technology was integrated into the HPE GreenLake platform as HPE’s disaster-recovery-as-a-service (DRaaS) offering.³⁶ This is an acquisition (HPE as owner of an Israeli-founded firm), not provision of technology to Israel.

Israeli-Origin Technology Partners (Direction: HPE as integrator/partner)

Check Point Software Technologies. HPE Aruba Networking publishes official integration documentation for connecting HPE Aruba EdgeConnect SD-Branch gateways to Check Point cloud network-security services to deploy a secure SD-WAN.⁷ Check Point is Israeli-founded and headquartered in Tel Aviv. This is a documented network-security integration at the HPE Aruba layer; it is a partner/integration relationship, not provision by HPE to Israel.

CyberArk. No public evidence of a formal HPE–CyberArk OEM or product-embedded relationship was identified beyond community/user discussion of ClearPass-to-CyberArk privileged-identity integration; the depth of any such relationship is not established in public documentation.⁷ Recorded as an unresolved line of inquiry rather than a confirmed integration.

Other named Israeli-origin security vendors (Wiz, SentinelOne, Claroty, Verint, NICE). No public evidence identified of a confirmed, named licensing, OEM, or product-embedded relationship between HPE (as operator of its own systems) and these vendors. No public evidence identified.

US-Entity Relationships (recorded for completeness)

Palo Alto Networks (US-headquartered, Santa Clara) is documented as an HPE Aruba ecosystem partner; it is a US entity and not an Israeli-origin vendor.⁷ No public evidence identified of an Israeli-origin mandate within these US-entity relationships.

Procurement & Integrator Relationships

HPE delivers professional services and systems integration globally, including to enterprise and government customers in the Israel region, through its services organisation. No public evidence was identified of a specific named systems integrator mandating deployment of Israeli-origin technology as a condition of an HPE-led engagement. No public evidence identified.

Surveillance, Biometrics & Retail Technology

Provision of Biometric / Population-Data Infrastructure to the Israeli State (Direction: HPE → Israel)

This is the directionally serious sub-category and qualifying evidence was identified.

Israeli Population Registry - “Aviv” system. The Who Profits Research Center documents that HPE (via its Israeli subsidiary, Hewlett-Packard (Israel)) has been the sole supplier of HPE Itanium servers and their maintenance for the Israeli Population and Immigration Authority’s “Aviv” population-registry system since 2017.⁸⁹ In May 2023, HPE Israel was contracted as sole supplier to provide three Itanium servers, services, and maintenance for the Aviv system from June 2023 until June 2026, valued at NIS 3,829,410 (approximately US$818,250).⁸⁹ The earlier contract through 2020 was valued at approximately US$212,318.⁸ Who Profits states the registry contains data on Palestinians with Israeli citizenship, non-citizen Palestinian residents of occupied East Jerusalem, Palestinian residents of the occupied West Bank and Gaza, and Syrian residents of the occupied Golan, and is used in controlling permits and cross-border movement.⁸⁹ Who Profits notes the Aviv system is being gradually phased out and replaced by IBM’s “Eitan” system.⁹¹⁰

Israeli Biometric Database - Israel National Digital Agency. Who Profits documents HPE as sole supplier of computing infrastructure to the Israel National Digital Agency for the national biometric database; a contract was extended in May 2025 running through May 2028, valued at NIS 3,129,750, following a March 2022 extension (through April 2025) valued at NIS 3,500,000.⁸⁹ Who Profits also records earlier biometric-project involvement of the legacy HP entity, including a 2008 biometric ID-card project (~NIS 230 million) and 2016 services continuation (NIS 31+ million).⁸⁹

Checkpoint / Movement-Control Biometrics (legacy, discontinued)

AFSC Investigate and the Hewlett-Packard Israel record document that the legacy HP entity supplied and maintained the “Basel” biometric access-control system (hand scanners / facial recognition) at Israeli military checkpoints in the occupied West Bank (named facilities including Jericho, Bethlehem, Jenin, Nablus), contracted by the Israeli Ministry of Defense; this system was scrapped/discontinued around late 2016.¹¹² This is dated, pre/early-split, legacy-entity evidence recorded for lineage.

Israeli-Origin Surveillance / Retail Biometric Vendors in HPE’s Own Operations

No public evidence identified that HPE has procured or deployed facial-recognition, gait-analysis, or in-store behavioural-analytics technology of Israeli origin (e.g. Oosto/AnyVision, BriefCam, Trigo, Trax) for its own operational purposes. No public evidence identified.

No public evidence identified of HPE deploying Israeli-origin predictive-policing, sentiment-analysis, social-media-monitoring, or workforce-surveillance tools within its own operations. No public evidence identified.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Provision of Computing Infrastructure to Israeli State / Security Bodies (Direction: HPE → Israel)

Israeli military server farm. Who Profits documents that in July 2024 HPE was selected by the Israeli military to lead a new military server-farm project - providing the hardware and managing selection of the construction contractor - with the facility reportedly to be located underground.⁸⁹

Israel Police. Who Profits documents HPE Israel as Data Center Care services supplier to the Israel Police: a 2021 contract for ~NIS 4 million (three years through 2024), and a January 2024 extension as sole supplier for a further period through end-December 2026, again ~NIS 4 million; earlier records include a 2017 Virtual Connect maintenance contract (NIS 366,000) and a March 2021 proactive-maintenance exemption (~NIS 4 million through December 2023).⁸⁹

Israel Prison Service. Who Profits documents HPE supplying servers, data storage, and data-security services to the Israel Prison Service since 2015. Recorded contracts include March 2025 equipment maintenance (March 2025–February 2026) on a sole-supplier exemption valued at NIS 445,000; an April 2024 equipment-maintenance contract (NIS 364,075); a February 2023 contract (NIS 371,856); a 2020 computer/communication-maintenance contract for 2021–2022 (NIS 1+ million); and 2015–2020 server maintenance totalling NIS 2,695,268.⁸⁹ AFSC Investigate additionally records that in 2007 the legacy HP entity was contracted to develop the Prison Service “Kidma” system (prisoner records, prison management, HR, and intelligence systems); that contract was later terminated, with HP continuing server maintenance and IT support.¹¹

Data-Centre Operations in Israel (HPE’s own infrastructure)

No public evidence identified that HPE operates, leases, or co-locates a dedicated HPE-owned data-centre facility within Israel for its own cloud infrastructure. HPE maintains a commercial/technical presence in Israel through a local affiliate. No public evidence identified of an HPE-owned data centre in Israel.

Project Nimbus & Israeli State Cloud Infrastructure

Project Nimbus is the ~US$1.2 billion Israeli-government cloud contract awarded in 2021 to Google Cloud and Amazon Web Services. No public evidence identified that HPE holds a Project Nimbus prime contract or sub-contract.¹²

Sovereign Cloud / DRaaS to Israeli State Institutions

HPE markets HPE GreenLake (including the Zerto-powered DRaaS capability) globally, including via its Israeli commercial channels.⁶ No public evidence identified that HPE GreenLake sovereign-cloud or Zerto-based DRaaS has been specifically contracted by a named Israeli state or military body (distinct from the server/infrastructure contracts documented above). No public evidence identified for this specific service line.

Defence, Intelligence & Security Sector Technology Relationships

Provision of Technology to the Israeli Military / Security Services (Direction: HPE → Israel)

Qualifying evidence was identified and is set out above (military server farm, Population Registry, Biometric Database, Israel Police, Israel Prison Service).⁸⁹ AFSC Investigate additionally documents legacy-entity defence relationships: IT-infrastructure services to the Israeli military from 2006 (beginning with an Israeli Navy pilot), and a 2011 multi-year contract reported as exclusive server provider for Israeli military and security forces, extended until 2017 when (per AFSC) Cisco replaced it.¹¹ These 2006–2017 items are legacy/early-split and are recorded as historical context; the current, post-split provision is the Who Profits-documented set above.

UN-Level Characterisation

The UN Special Rapporteur on the situation of human rights in the Palestinian territories, Francesca Albanese, in report A/HRC/59/23 (“From economy of occupation to economy of genocide,” presented 30 June 2025), names Hewlett Packard Enterprise, stating that HPE (with HP) has “a long-term involvement in Israel’s apartheid infrastructure, providing technology to the military, police, and prison systems, while their opaque business structures obscure accountability through seven remaining Israeli subsidiaries.”¹³¹⁴

Dual-Use Technology Provision

Beyond the named state/security contracts above, no public evidence was identified of independent forensic documentation (e.g. by Citizen Lab, Amnesty Tech) confirming specific deployment of HPE commercial hardware reaching IDF field units or settlement infrastructure via Israeli resellers/distributors. This reseller-channel question is a structural gap common to hardware-vendor audits. No public evidence identified for this specific reseller-channel item.

Offensive Cyber Capability

No public evidence identified. HPE does not publicly develop, sell, or license offensive cyber capability or zero-day exploit tooling.

Cyberattacks Against HPE (Direction: inbound - context only)

In January 2024 HPE disclosed in an SEC Form 8-K that a nation-state threat actor identified as “Midnight Blizzard” (Cozy Bear / APT29, attributed to the Russian Foreign Intelligence Service, SVR) had gained access to and exfiltrated data from a limited number of HPE cloud-hosted (Microsoft 365) mailboxes; HPE stated the intrusion began around May 2023 and that it learned of it in December 2023.¹⁵¹⁶ This was an attack carried out against HPE and has no nexus to provision of technology to Israel; it is recorded as inbound digital context only.

AI, Algorithmic & Autonomous Systems

AI/ML Provision to Israeli State Bodies

No public evidence identified of a named contract under which HPE provides AI or machine-learning systems specifically to Israeli state, military, or security bodies (distinct from the general-purpose server/computing infrastructure documented above). HPE markets AI infrastructure globally (HPE Cray supercomputing, GPU-accelerated ProLiant servers, HPE GreenLake AI/ML services), but no Israeli state AI contract was publicly named. No public evidence identified.

Model Development Involving Israeli Population Datasets

No public evidence identified that HPE develops AI models using datasets sourced from Israeli state bodies, military operations, or occupation-related contexts. No public evidence identified.

Autonomous Systems & Lethality

No public evidence identified. HPE does not publicly produce autonomous targeting systems, kill-chain automation, or lethal autonomous weapons.

Internal Algorithmic Deployment - Israeli-Origin AI Tooling

No public evidence identified of an Israeli-origin AI vendor embedded in HPE’s own operational stack beyond the integration/acquisition relationships recorded above (Zerto, Check Point integration). No public evidence identified.

Technology Ecosystem & R&D Footprint

Israeli R&D Facilities

Zerto R&D (HPE-owned). Following the September 2021 acquisition, Zerto’s Israeli engineering operations (Herzliya) became part of HPE’s engineering footprint; HPE described the acquisition as accelerating its R&D talent roadmap.³⁴⁵ HPE Israel publicly markets Zerto as part of its data-protection portfolio.⁶

HPE Israel operations. HPE maintains a local affiliate in Israel with commercial, technical-support, and engineering activity; HPE’s Israel operations are publicly described, including R&D/engineering presence (reported at Yehud).¹⁷ The precise scale and technical focus are not fully detailed in public disclosures. Recorded with this limitation.

Juniper Networks (acquired 2025). HPE announced the acquisition of Juniper Networks (US-headquartered, Sunnyvale) in January 2024 for ~US$14 billion; following antitrust review and a DOJ settlement, the deal closed on 2 July 2025.¹⁸¹⁹ Juniper is a US entity, not an Israeli-origin company; any Israeli engineering component would be one part of a substantially larger global R&D footprint. No public detail of a specific Juniper Israel facility was confirmed in this review. No public evidence identified for the Juniper Israel-specific footprint.

Acquisitions & Investments in Israeli Technology Companies

Zerto (September 2021, ~US$374 million): Israeli-founded (Herzliya), disaster recovery / continuous data protection; the principal Israeli-origin acquisition in HPE’s post-2015 history.³⁴⁵ No public evidence identified of separate HPE corporate-venture stakes in Israeli startups distinct from full acquisitions. No public evidence identified for standalone venture investments.

Patents & IP Co-Development with Israeli Institutions

Zerto’s patent portfolio (continuous data replication / journal-based recovery) became HPE intellectual property on acquisition.³⁴ No public evidence identified of formal co-development arrangements between HPE and Israeli universities (Technion, Hebrew University, Weizmann Institute). No public evidence identified for university co-development.

Civil Society Scrutiny & Regulatory History

NGO & Research-Center Scrutiny - Technology Supply Chain

Who Profits Research Center maintains a dedicated HPE company profile documenting HPE’s contracts with the Israeli military, Israel Police, Israel Prison Service, the Population and Immigration Authority (Aviv system), and the Israel National Digital Agency (biometric database), with contract dates, values, and sole-supplier status as set out above.⁸⁹ AFSC Investigate maintains an HPE/Hewlett-Packard company profile documenting military, police, prison, population-registry, biometric, and Basel-checkpoint involvement (including legacy items).¹¹

UN Reports

The UN Special Rapporteur report A/HRC/59/23 (Albanese, June 2025) names HPE in the context of providing technology to the Israeli military, police, and prison systems.¹³¹⁴ HPE was not listed in the February 2020 OHCHR database of business enterprises with relations to Israeli settlements; the BDS National Committee has campaigned for HPE’s inclusion in that database.²⁰¹²

BDS Campaigns

The BDS National Committee runs a “Boycott HP” campaign explicitly encompassing both HP Inc. and HPE.²¹²⁰ BDS materials specifically cite HPE’s provision of servers, data storage, and data-security services to Israel’s prisons, and HPE’s role in the Population and Immigration Authority’s Aviv population-registry system, which BDS describes as underpinning Israel’s tiered citizenship/residency system and as holding data on settlers in the occupied West Bank.²¹²⁰ BDS also reports that several HP/HPE contracts have ended over the campaign’s duration, including the Israeli Navy, the Basel checkpoint system, and (per BDS) the Aviv system contract.²¹

Export Controls, Sanctions & Regulatory Actions

No public evidence identified of any action by US export-control authorities (Commerce Department BIS), the SEC (other than the routine Form 8-K cyber-incident disclosure noted above), OFAC, an OECD National Contact Point, or any equivalent body relating specifically to HPE technology sales or services to Israeli state entities. No public evidence identified.

Evidence Gaps

Full scope of HPE Israel government contracts. Israeli government IT-procurement records are not comprehensively published in English-accessible databases; the full set of HPE Israel’s sales to Israeli government and security-adjacent agencies beyond the Who Profits-documented contracts cannot be determined from public English-language sources alone.
CyberArk and other security-vendor integration depth. Whether HPE holds embedded/OEM relationships (versus partner-directory listings or community integrations) with Israeli-origin security vendors such as CyberArk, SentinelOne, or Claroty is not established in public documentation.
Juniper Networks Israel engineering. The scale and technical focus of any Israeli engineering operations now within HPE following the July 2025 Juniper close are not detailed in public disclosures.
Zerto post-acquisition trajectory. The degree to which HPE has expanded, maintained, or reduced Zerto’s Israeli engineering footprint since 2021 is not documented beyond the acquisition announcements.
HPE hardware in IDF/settlement infrastructure via resellers. Whether HPE servers, storage, or networking hardware has been installed in IDF field bases or settlement infrastructure via Israeli resellers/distributors cannot be determined from public sources - a structural gap common to hardware-vendor audits.
Aviv-to-Eitan transition status. The current operational status of HPE’s Aviv-system role through the June 2026 contract end, and the precise extent of the IBM “Eitan” replacement, are not fully documented in public sources.
Constructive notice - post-July 2024 ICJ Advisory Opinion / post-November 2024 ICC arrest warrants. No public evidence identified of HPE-specific policy changes, contract reviews, or public statements in response to these legal developments regarding its Israeli operations or relationships.