Microsoft Corporation - Digital Audit

Enterprise Technology Stack & Vendor Relationships

No public evidence identified of a direct Microsoft licensing or subscription relationship in which Microsoft is a customer of Israeli-origin cybersecurity vendors such as Check Point, Wiz, SentinelOne, CyberArk, Nice, Verint, or Claroty; available reporting surfaces only third-party partnerships among these vendors (e.g., Wiz–Check Point, Wiz–CyberArk) that do not involve Microsoft as a buyer. Microsoft’s own security products (Azure, Microsoft Sentinel, Microsoft Defender) instead compete with several of these Israeli-origin vendors’ offerings, and no procurement or systems-integrator relationship linking Microsoft’s internal IT stack to these companies has been identified. Microsoft’s documented relationships with Israeli cybersecurity firms are instead acquisitions rather than vendor-dependency arrangements: Microsoft acquired Adallom, a cloud-access-security-broker company, for roughly $320 million in 2015 ¹, and Secure Islands, a data- and information-protection company, for roughly $80 million the same year ¹. Microsoft also acquired Hexadite, an Israeli security-automation and incident-response firm, for approximately $100 million in 2017 ², and Peer5, a video-streaming technology company later integrated into Microsoft Teams ³.

Surveillance, Biometrics & Retail Technology

Microsoft’s venture arm M12 invested in AnyVision, an Israeli facial-recognition startup, as part of a $74 million funding round in June 2019 ⁴. Reporting in October 2019 indicated AnyVision’s technology was used to surveil Palestinians in the West Bank ⁴⁵. Following an audit led by former U.S. Attorney General Eric Holder and the law firm Covington & Burling, Microsoft divested its AnyVision stake in March 2020 and announced it would no longer make minority investments in facial-recognition companies generally ⁴⁵; this relationship is confirmed discontinued as of that divestment. No public evidence identified of Microsoft’s own direct, non-investment use of biometric or computer-vision retail technologies such as Trigo, BriefCam, Trax, or Oosto within Microsoft’s own retail or store-technology operations. No public evidence identified of Israeli-origin predictive-policing or workforce-surveillance tools used internally by Microsoft; NGO investigations (Who Profits, AFSC) instead document Microsoft as a provider of cloud and software services to Israeli policing and security bodies, addressed in the Defence, Intelligence & Security Sector section below.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Microsoft was reportedly a participant considered for Israel’s roughly $1.2 billion Project Nimbus government-cloud tender but lost the contract to a Google-Amazon consortium; Microsoft nonetheless stated an intention to “keep a foot in the door” in the Israeli government cloud market ⁶⁷⁸. In June 2021, following that loss, Microsoft announced plans for a dedicated Israel Azure cloud region (“Israel Central”), which launched in November 2023 with an investment described as “hundreds of millions” of dollars, aimed at data-residency compliance for Israeli government and enterprise customers ⁹¹⁰¹¹. Secondary reporting describes a three-year, approximately $133 million contract between the Israeli Ministry of Defense and Microsoft finalized in 2021, reportedly following a meeting between Microsoft’s CEO and then-Unit 8200 commander at Microsoft’s Redmond headquarters, with Unit 8200 leadership intending to expand data stored on Microsoft servers “tenfold” ¹²¹³¹⁴. An August 2025 investigation reported that Israeli military intelligence Unit 8200 used Microsoft Azure to store and process intercepted Palestinian phone-call data from Gaza and the West Bank, with data volumes reported inconsistently across secondary sources (approximately 11,500 terabytes per some accounts, 13.6 petabytes per others), hosted on Azure servers located in the Netherlands and Ireland ^1213151416. That data was reportedly used by Unit 8200 to help identify bombing targets in Gaza ¹³¹⁴, and Microsoft’s internal review reportedly “found evidence that supports elements” of this reporting ¹⁴¹⁶. On 25–26 September 2025, Microsoft President Brad Smith notified employees that Microsoft had “ceased and disabled” specific Israeli Ministry of Defense subscriptions and services, including certain cloud-storage and AI services, citing a violation of Microsoft’s terms of service and stating that Microsoft does not provide technology to facilitate mass surveillance of civilians ^151718191620. Critics, including the No Azure for Apartheid coalition, noted that only a limited subset of services tied to one unit was disabled and that the broader Israeli Ministry of Defense–Microsoft relationship reportedly remained intact ¹⁹; this action followed the 19 July 2024 ICJ Advisory Opinion and the November 2024 ICC arrest warrants by more than a year and roughly ten months, respectively. Israeli military Azure usage reportedly increased 155% between June 2023 and April 2024, and Azure OpenAI/GPT-4 consumption reportedly rose sevenfold in October 2023, reaching 64 times pre-war levels by March 2024, according to AFSC ²¹. The Israeli Ministry of Defense contracted Microsoft for approximately 19,000 hours of engineering support valued at $10 million between October 2023 and June 2024, per AFSC ²¹. Who Profits reports that Microsoft worked closely with Unit 8200 engineers to design and implement security measures and provided customized cloud-storage access, and that leaked records from October 2023 to January 2025 show Microsoft cloud and AI services (translation, speech-to-text, document analysis) supplied to dozens of Israeli military units spanning air, ground, and naval forces ²². Microsoft Israel’s chief executive departed following an internal global-management investigation into Microsoft Israel’s Defense Ministry work amid code-of-ethics concerns ²³²⁴.

Defence, Intelligence & Security Sector Technology Relationships

Microsoft, through its wholly-owned Israeli subsidiary, holds broad, longstanding government contracts across Israeli state bodies including the Ministry of Defense, the Ministry of National Security, and the Population and Immigration Authority; Who Profits documents Israel Police sole-supplier contracts running 2019–2026, Prison Service and Population/Immigration Authority contracts extending through 2028, and a 2010 government-wide licensing agreement worth NIS 300 million ²². Who Profits reports that Microsoft Azure and Office applications reportedly support the “Rolling Stone” system used by the Israeli military’s ICT and Cyber Unit to manage Palestinian population and movement data in the occupied territories ²². AFSC reports that Microsoft Azure reportedly powers Israel Police databases and “all operational systems,” that the Israel Prison Service contracts Microsoft for detention-operations software, and that Azure reportedly runs the “Al Munaseq” application issuing movement permits to Palestinians in the occupied territories ²¹. AFSC further names Unit 8200 (signals intelligence), Unit 81 (surveillance-technology development), and a unit described as “Matspen” (characterized as drone-warfare systems) as recipients of Microsoft services, though this claim is drawn from a single source and was not independently corroborated in this research pass ²¹. AFSC also describes Microsoft collaborating with Israeli military personnel at hackathon events - including a 2021 event at a military base where soldiers reportedly developed “weapons calibration applications” - and providing virtual AI training courses and technology for military simulation software, though this too is single-sourced and unverified against a second outlet ²¹. Historically, the Israeli Ministry of Defense signed a $35 million software and cybersecurity licensing agreement with Microsoft in 2002, largely financed through the U.S. Foreign Military Sales program, per AFSC ²¹. No public evidence identified that Microsoft develops or sells offensive cyber tools, zero-day exploit frameworks, or “digital weapons” to any customer, Israeli or otherwise; Microsoft’s documented posture runs in the opposite direction, having joined Google, GitHub, LinkedIn, and Trend Micro in filing an amicus brief supporting a journalist’s right to sue NSO Group, maker of the Pegasus spyware, in U.S. court ²⁵.

AI, Algorithmic & Autonomous Systems

Israeli military intelligence reportedly used AI-driven analytical tools in conjunction with Azure-hosted surveillance data to help identify bombing targets in Gaza, per the Guardian/+972/Local Call investigation as reflected in secondary reporting ¹³¹⁴; this describes Israeli-developed targeting tools operating atop Microsoft’s general-purpose cloud and AI infrastructure (Azure storage plus Azure OpenAI services), and no evidence has been identified that Microsoft itself built or operated a targeting model - the targeting analytics are attributed to Israeli military units rather than to Microsoft. No public evidence identified that Microsoft AI models were themselves trained on intercepted Palestinian communications or surveillance-derived datasets; the available reporting describes Israeli use of Azure infrastructure to run Israeli-developed analytics on Israeli-collected data, not Microsoft-side model training on that data. No public evidence identified of Microsoft providing autonomous target-generation or autonomous-tracking systems, as distinct from general-purpose cloud and AI infrastructure, to Israeli forces.

Technology Ecosystem & R&D Footprint

Microsoft’s Israel R&D Center was established in 1991, among Microsoft’s first development centers outside the United States ²⁶²⁷. Its Herzliya campus - roughly 46,000 square meters, costing approximately NIS 350 million - was inaugurated in 2020 and described as Microsoft’s largest base outside Silicon Valley and Boston, employing roughly 2,000 people in Israel at the time ²⁶²⁷. The center’s focus areas include cybersecurity and AI, and it hosts “The Garage” innovation lab covering information security, augmented reality, and AI ²⁶; Microsoft also announced plans to open five new sites in Israel and double its R&D workforce there ²⁸. In June 2023, Microsoft opened a new office in the Gav-Yam hi-tech park in Be’er Sheva, adjacent to an Israeli military telecommunications base and Computer Service Directorate campus, as part of the Israeli Ministry of Defense’s “Southern Relocation” plan ²². The Israel R&D center reportedly generates near $1 billion in annual income, with an average monthly salary of approximately $18,000, per Calcalist/CTech ²⁹. Microsoft’s acquisitions of Israeli technology companies include Adallom (2015, ~$320 million) ¹, Secure Islands (2015, ~$80 million) ¹, Hexadite (2017, $100 million) ², and Peer5 (video streaming, integrated into Teams) ³. Microsoft Research established a five-year joint research and education partnership with the Technion–Israel Institute of Technology through an Academic Research Center for E-Commerce Technologies, covering computer science, AI, game theory, economics, and psychology ³⁰, and Microsoft R&D personnel engaged with Hebrew University in February 2022 ³¹. No public evidence identified of a formal Microsoft partnership with the Weizmann Institute. Who Profits reports that Microsoft, through its Israel operations, provides free Office 365/Teams software and a “Microsoft IT Academy” designation to Ariel University - located in the Ariel settlement in the occupied West Bank - including hackathons and research-grant collaboration reported as ongoing from 2022 through 2025 ²². Who Profits also reports that Microsoft partnered with the Ma’ale Adumim settlement’s Education Department in 2019 to implement Microsoft applications across its school systems, though the current post-2020 status of that relationship is not independently confirmed ²².

Civil Society Scrutiny & Regulatory History

UN Special Rapporteur Francesca Albanese’s report A/HRC/59/23, “From economy of occupation to economy of genocide” (2 July 2025), named more than 60 companies including technology firms, and specifically describes Microsoft Azure and the Project Nimbus consortium as providing “critical cloud and artificial intelligence infrastructure” when Israel’s internal military cloud became overloaded in October 2023, with Israel-located servers described as ensuring “data sovereignty and a shield from accountability” ³²³³. Human Rights Watch, Amnesty International, Access Now, the Electronic Frontier Foundation, Fight for the Future, and 7amleh sent a joint letter to Microsoft on 26 September 2025 demanding accountability, with a 10 October 2025 response deadline, regarding Azure’s role in Israel’s Gaza operations ^34353637. The Center for Constitutional Rights, together with the Global Legal Action Network, issued a warning that Microsoft’s conduct exposes the company and its leadership to potential civil and criminal liability ³⁸, a position echoed in a 2 December 2025 letter from international law experts to Microsoft leadership ³⁹. Microsoft reportedly tightened its human-rights governance following the internal inquiry into Israeli army ties ⁴⁰, and Computer Weekly reported Microsoft was “admonished” for its role in facilitating alleged violations in Gaza ⁴¹. The No Azure for Apartheid coalition of current and former Microsoft employees staged an encampment protest at Microsoft’s Redmond headquarters resulting in 18 arrests in August 2025 ⁴²⁴³, occupied President Brad Smith’s office resulting in arrests and terminations ⁴⁴⁴⁵, and disrupted Microsoft’s Build developer conference for three consecutive years, including a June 2026 action featuring an aerial banner reading “MSFT powers genocide” ⁴⁶; the group’s demands include ending ties with the Israeli military, cease-fire advocacy, reparations, and an end to alleged worker discrimination ⁴⁶⁴⁷. The BDS Movement lists Microsoft as a boycott target over its Azure relationship with the Israeli military ⁴⁸. At Microsoft’s 5 December 2025 annual meeting, shareholder Proposal 9 - led by the Religious of the Sacred Heart of Mary and 59 co-filers, seeking a public report on the effectiveness of Microsoft’s human-rights due diligence regarding AI and customer misuse - was rejected by shareholder vote but recorded support of more than 26% ^4950515253. JLens and the Anti-Defamation League publicly opposed the shareholder proposal, characterizing it as “BDS-aligned” ⁵⁰. Investor Advocates for Social Justice separately signaled an urgent need for Microsoft to strengthen its human-rights due diligence ⁵¹. No public evidence identified confirming Microsoft’s inclusion in the original 2020 OHCHR 112-company settlement-business database, and this research did not confirm or rule out a Microsoft listing in the September 2025 OHCHR database update, which was identified but not queried directly ⁵⁴⁵⁵⁵⁶. No public evidence identified of specific export-control, sanctions, or regulatory enforcement actions by the SEC, EU, or other regulators against Microsoft specifically tied to Israel technology sales, distinct from the shareholder and NGO pressure documented above.

End Notes