Digital Audit: Microsoft Corporation

Audit Phase: Digital Audit Subject Entity: Microsoft Corporation Document Classification: Final Domain Audit Evidence Base: Research Memo (compiled from publicly available sources through October 2025)

Enterprise Technology Stack & Vendor Relationships

Israeli-Origin Software & Services Vendors

• Microsoft maintains a partnership with Wiz, an Israeli-American cloud security company. Wiz was named Microsoft’s Commercial Marketplace 2024 Partner of the Year, with deep integration between Wiz’s security posture management platform and Microsoft Azure¹.
• In 2025, Google announced the acquisition of Wiz for $32 billion, representing the largest cybersecurity acquisition in history. This acquisition has implications for Microsoft’s existing partnership with an Israeli-founded company integrated into Azure’s security ecosystem¹.
• No public evidence identified regarding direct enterprise licensing relationships between Microsoft and Check Point, SentinelOne, CyberArk, Nice, Verint, Claroty, or Palo Alto Networks for Microsoft’s own internal technology stack.

Scale of Dependency

• The Wiz partnership provides security posture management, vulnerability assessment, and cloud security services to Azure customers. The integration is marketed through Microsoft’s Commercial Marketplace, indicating a product partnership rather than internal Microsoft dependency¹.

Procurement & Integrator Relationships

• Microsoft was not selected as a primary contractor for Project Nimbus, the Israeli government’s approximately NIS 4 billion ($1.2 billion) cloud migration programme awarded to AWS and Google Cloud Platform in 2021².
• Microsoft filed appeals challenging the Project Nimbus award but subsequently withdrew those appeals².
• Despite losing the Nimbus bid, Microsoft continued to benefit from growing use of its services by Israeli government ministries, particularly Microsoft 365 and Office applications, through independent procurement channels².

Surveillance, Biometrics & Retail Technology

Facial Recognition & Biometrics

• In June 2019, Microsoft’s venture capital subsidiary M12 invested in AnyVision, an Israeli facial recognition company³⁴.
• Following the investment, NBC News reported that AnyVision’s technology was being used for surveillance in the West Bank and Gaza Strip, including deployment of cameras to monitor Palestinian civilians³.
• Microsoft subsequently hired former U.S. Attorney General Eric Holder to conduct an audit of AnyVision to assess compliance with Microsoft’s ethical principles on biometric surveillance³.
• Microsoft later sold its stake in AnyVision³.

Predictive Analytics & Monitoring

• No public evidence identified regarding Microsoft’s direct use of Israeli-origin predictive policing, sentiment analysis, social media monitoring, or workforce surveillance tools.

Third-Party Deployment

• The Guardian investigation documented that Unit 8200 used Microsoft Azure cloud infrastructure to operate a mass surveillance system targeting Palestinian civilians in Gaza and the West Bank. The system stored intercepted phone calls and used AI tools to process, transcribe, translate, and analyze the data⁵⁶.
• Sources within Unit 8200 told investigators that intelligence derived from intercepted communications was used to identify bombing targets in Gaza. The data was also reportedly used in the West Bank to identify individuals for detention, blackmail, and lethal operations⁵.
• AI tools were used to assign risk scores to intercepted messages based on trigger words, and the system was used retroactively to justify killings and arrests after the fact⁵.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Data Centre Operations in Israel

• In November 2023, Microsoft launched its first Azure cloud region in Israel, representing an estimated investment of hundreds of millions of dollars⁷⁸⁹.
• The launch occurred approximately three weeks after the October 7, 2023 events⁷.
• The Azure Israel region serves local customers and provides data residency options within Israeli jurisdiction⁷⁹.

Government Cloud Contracts

• Microsoft was not a primary contractor for Project Nimbus, which was awarded to AWS and Google².
• However, Microsoft provided cloud computing, cloud storage, and AI services to the Israeli Ministry of Defense through independent contract channels²¹⁰.
• In the weeks following October 7, 2023, Microsoft struck deals worth at least $10 million to provide computing and storage services to the Israeli military¹⁰.
• Internal Microsoft documents described the Israeli Ministry of Defense as one of Microsoft’s largest customers for Azure AI and cloud services in the region¹⁰.
• Microsoft provides services to the Israeli Ministry of Defense, Ministry of National Security, Population and Immigration Authority, Israeli Police, and Israel Prison Service².

Data Sovereignty & Resilience Services

• The Unit 8200 surveillance system stored data primarily in Microsoft data centers in the Netherlands, with a smaller portion in Ireland - not in Israel⁵.
• By July 2025, approximately 11,500 terabytes of Israeli military data was stored on Microsoft Azure servers, equivalent to roughly 200 million hours of intercepted audio⁵.
• A complaint was filed with European regulators accusing Microsoft of violating GDPR by facilitating storage of mass surveillance data on European soil⁵.

Defence, Intelligence & Security Sector Technology Relationships

Military & Intelligence Contracts

• In 2002, Microsoft entered into a $35 million contract providing the Israeli military and government with software products and committing to knowledge exchange with the army. This was described at the time as the largest software deal in Israeli history¹¹.
• In 2021, Microsoft’s CEO Satya Nadella met with the commander of Unit 8200, Yossi Sariel, at Microsoft’s headquarters near Seattle. The meeting lasted approximately 10 minutes. Nadella approved the creation of a customized database infrastructure for mass surveillance⁵.
• Internal Microsoft documents described the proposed deal as “an incredibly powerful brand moment”⁵.
• The system became operational in 2022, enabling Unit 8200 to collect and store recordings of millions of mobile phone calls made daily by Palestinians in Gaza and the West Bank⁵.
• Microsoft provided the Israeli military with access to OpenAI’s GPT-4 model through its partnership with OpenAI, facilitated after OpenAI changed its policies in January 2024 to no longer prohibit work with military and intelligence customers⁵.
• Microsoft has acknowledged that “client category and geographic location impact likelihood of product misuse and human rights impacts”¹².

Dual-Use Technology Provision

• The surveillance system was integrated with Israeli military targeting programmes, including AI-assisted systems known as Lavender, The Gospel, and Where’s Daddy - systems linked to identification of individuals and structures for Israeli airstrikes in Gaza⁵⁶.
• The UN Special Rapporteur’s report (A/HRC/59/23) explicitly names Microsoft among corporate entities “profiting from, and therefore complicit in, war crimes and genocide in Gaza”¹³.
• The report documents how corporate entities contributed to “the acceleration of the displacement-replacement process throughout the military campaign that has pulverized Gaza”¹³.

Offensive Cyber & Weapons Technology

• No public evidence identified regarding Microsoft’s development, sale, licensing, or maintenance of offensive cyber capabilities, zero-day exploit tools, or digital weapons systems, or documented deployment of such tools by Israeli state actors using Microsoft technology.

AI, Algorithmic & Autonomous Systems

AI/ML Provision to State Bodies

• Microsoft provided access to OpenAI’s GPT-4 model to Israeli military intelligence through its Azure OpenAI partnership⁵.
• Azure AI services were used to process, transcribe, translate, and analyze intercepted Palestinian communications at scale⁵⁶.
• The IDF’s Operational Cloud became overloaded following October 7, 2023, prompting rapid expansion of commercial cloud provider use, including Microsoft Azure⁵.
• Microsoft has not publicly disclosed the specific scope of AI services provided to Israeli state bodies beyond the Unit 8200 arrangement.

Training Data & Model Development

• No public evidence identified regarding Microsoft’s AI models being trained on, or provided access to, civilian population data, intercepted communications, or surveillance-derived datasets originating from Israel or occupied territories. The evidence establishes that Azure infrastructure was used to store and process such data, not that it was used to train Microsoft AI models.

Autonomous Systems & Lethality

• No public evidence identified regarding Microsoft’s provision of autonomous target generation, automated threat detection, or autonomous tracking systems to Israeli military or security forces. The Azure infrastructure provided general-purpose cloud and AI services; the targeting applications were built on top of this infrastructure by Israeli military users.

Technology Ecosystem & R&D Footprint

Israeli R&D Centres

• Microsoft Israel is designated as one of Microsoft’s three strategic centers globally¹⁴.
• Microsoft Israel is one of Microsoft’s largest leased international properties¹⁴.
• Microsoft operates engineering offices and innovation activities in Israel, though precise headcount figures have not been publicly disclosed in the sources reviewed.

Acquisitions & Investments

• M12, Microsoft’s corporate venture capital subsidiary, has invested in approximately 18 Israeli companies, making Israel one of its most significant geographic focus areas outside the United States¹.
• M12’s Israeli portfolio includes: Aqua Security (cloud-native security), At-Bay (cyber insurance), Authomize (identity security), Hunters (security operations), RapidAPI (API management), Xsight (risk intelligence), and Zencity (government technology)¹.
• Irad Dor, who joined M12 as a partner in 2021, is identified as “a graduate of both the Israeli Defense Forces’ 8200 Unit and the Army Intelligence Technological Unit”¹⁵.
• Mony Hassid leads M12’s activities in the EMEA region and is based in Israel¹.
• M12 invested in AnyVision in June 2019; Microsoft later sold its stake³⁴.

Patent & Intellectual Property

• No public evidence identified regarding significant patent portfolios, licensing agreements, or co-development arrangements between Microsoft and Israeli-domiciled research institutions (Technion, Hebrew University, Weizmann Institute) in the sources reviewed.

Civil Society Scrutiny & Regulatory History

NGO & Academic Reports

• The UN Special Rapporteur’s report (A/HRC/59/23, June 2025) explicitly names Microsoft as a corporate entity profiting from and complicit in war crimes and genocide in Gaza¹³.
• Who Profits documents Microsoft’s provision of software, professional services, cloud computing, cloud storage, and AI tools to the Israeli Ministry of Defense, Ministry of National Security, Population and Immigration Authority, Israeli Police, and Israel Prison Service².
• Human Rights Watch, Amnesty International, Access Now, and other organizations published a joint letter in October 2025 calling on Microsoft to suspend business activities contributing to grave human rights abuses by the Israeli military¹⁶.
• The Electronic Frontier Foundation recognized Microsoft’s decision to restrict some Israeli military use as a positive step while noting that “a stream of accusations and the Company’s recent decision to cancel one of its contracts with the Israeli military strongly suggest that Microsoft’s current, largely reactive measures to allegations of human rights abuses by customers are inadequate”¹⁷.
• Amnesty International’s Secretary General stated that Microsoft’s decision to terminate Unit 8200’s access was “a moment for corporate reckoning” and called on all technology companies to “confront their participation in the global political economy sustaining Israel’s genocide against Palestinians in the Gaza Strip, apartheid against all Palestinians whose rights Israel controls, and its unlawful occupation of the Palestinian territory”¹⁸.

Boycott & Divestment Campaigns

• Microsoft has been the subject of organized boycott campaigns, including the No Azure for Apartheid campaign, which mobilized Microsoft employees and external activists¹⁹.
• The Don’t Buy Into Occupation 2024/2025 company lists include Microsoft via settlement contracts²⁰.
• The “Drop AnyVision” campaign, led by Jewish Voice for Peace and supported by the Palestinian BDS National Committee, Human Rights Watch, and the American Friends Service Committee, targeted Microsoft’s investment in AnyVision³.

Regulatory & Legal Actions

• In July 2025, at least 60 Microsoft shareholders representing more than $80 million in MSFT shares filed a shareholder proposal calling on Microsoft to publish a report assessing the effectiveness of its Human Rights Due Diligence processes¹²²¹.
• A coalition of international legal organizations - including the Abolitionist Law Center, Avaaz Foundation, European Legal Support Center, SOMO, Center for Constitutional Rights, and GLAN - sent a formal legal notice to Microsoft Corporation and its executive leadership in December 2024, outlining potential legal liability for aiding and abetting atrocity crimes²².
• A complaint was filed with European regulators (Netherlands and Ireland) accusing Microsoft of violating GDPR by facilitating storage of mass surveillance data on European servers⁵.
• No public evidence identified of US export control actions, OFAC sanctions enforcement, or BIS enforcement actions specifically involving Microsoft and Israeli end-users in the sources reviewed.

Corporate Governance Responses

• In May 2025, Microsoft published a statement acknowledging concerns about human rights and stating its commitment to ensuring technology “respects human rights and human dignity”²³.
• In September 2025, Microsoft President Brad Smith announced that Microsoft had found evidence “supports elements of The Guardian’s reporting” and was terminating Unit 8200’s access to certain Azure cloud storage and AI services. Smith stated: “We do not provide technology to facilitate mass surveillance of civilians. We have applied this principle in every country around the world, and we have insisted on it repeatedly for more than two decades”²⁴.
• The termination did not affect all Microsoft contracts with the Israeli government; Microsoft continued to provide cybersecurity services to Israel and other Middle East countries, and the broader commercial relationship with the Israeli Ministry of Defense remained intact²⁴.
• In May 2026, Microsoft announced that Alon Haimovich, general manager of Microsoft Israel (four years in role, seven years at company), would step down at the conclusion of an internal investigation into the subsidiary’s business dealings with the Israeli military. Multiple managers in Microsoft Israel’s governance department also departed¹⁴.
• Microsoft Israel was placed under the temporary management of Microsoft France pending appointment of a permanent replacement¹⁴.
• The investigation found evidence that Israeli management had not acted with full transparency toward global Microsoft leadership regarding how the Defense Ministry was using the company’s systems¹⁴.
• In November 2025, Brad Smith announced expansion of Microsoft’s internal Integrity Portal to allow employees to report concerns related to technology development and deployment, creating a new mechanism called the Trusted Technology Review¹⁷.

Charitable Giving & Employee Donation Matching

• Microsoft’s Benevity employee giving platform listed the Ma’aleh Adumim Foundation (based in the Ma’aleh Adumim settlement east of Jerusalem), the Ein Prat Academy for Leadership (located in Kfar Adumim settlement), and the Megilot Dead Sea Rescue Team (operating in Dead Sea region settlements) as eligible recipients for employee donations with company matching²⁵.
• Microsoft removed the United Nations Relief and Works Agency for Palestine Refugees (UNRWA) from its matching donations platform²⁵²⁶.
• Microsoft matched employee donations to the Friends of the IDF while declining to match employee donations to UNRWA USA²⁶.
• In August 2024, Microsoft employees began circulating an internal petition calling on the company to halt matching donations to the three settlement-linked organizations, stating: “Microsoft is directly funding these illegal and immoral settlements by allowing these organizations to remain. This is not only unethical, it also goes against our inclusive values as a company”²⁷.
• The petition cited the Geneva Conventions as the basis for the employees’ claim that the organizations were “in direct violation of international law”²⁷.

End Notes