Digital Audit: OnePlus Technology Co., Ltd.

Audit Phase: Digital (Digital / Technology Forensics) Subject Entity: OnePlus Technology (Shenzhen) Co., Ltd. - consumer-electronics brand within the BBK Electronics group, operationally merged with OPPO Principal Place of Business: Shenzhen, Guangdong, China Audit Date: June 2026 Evidence Base: Published corporate disclosures, vendor and cloud-service notices, peer-reviewed and pre-print academic privacy research, trade and technology press, US congressional records, and regulatory reporting. All factual claims are drawn from publicly available sources cited in the End Notes.

Scope and directionality note: Digital assesses the digital/technology nexus to Israel. The serious case is the provision of surveillance, digital, data, or cyber technology to the Israeli state, military, or security services. The reverse direction - OnePlus selling consumer devices into the Israeli market, or procuring technology from Israeli-origin vendors - is a customer / sales relationship, recorded explicitly as such and weighted far lower than provision. No transitive guilt is imputed: a parent or sibling entity’s separate activities, a chipset supplier’s other clients, or an Israeli vendor’s military-veteran founders are not attributed to OnePlus. US-entity relationships (e.g. Amazon Web Services, Qualcomm) are not Israeli-origin and are noted only for completeness. Cyberattacks or surveillance-tool targeting of OnePlus handsets are recorded as actions done to the company, not as provision.

Structural note: OnePlus completed an operational merger into OPPO over 2020–2021, merging its R&D, software, and back-end internet services; both brands sit within the privately held BBK Electronics group alongside Vivo and Realme.¹²³ Back-end internet services for OnePlus, OPPO and Realme have been operated under the shared HeyTap platform.⁴⁵ Where a finding rests on shared OPPO/HeyTap infrastructure rather than an independent OnePlus function, this is stated. Findings are reported at the OnePlus entity level on the basis of available public evidence.

Enterprise Technology Stack & Vendor Relationships

Corporate Structure & Back-End Services (Direction: OnePlus as customer)

OnePlus is a brand within the BBK Electronics group and, following the 2020–2021 merger, shares engineering and back-end internet services with OPPO.¹²³ Online/cloud services for OnePlus, OPPO and Realme devices have been delivered through the HeyTap platform, which OPPO has described as serving over 700 million users across more than 70 countries.⁴ HeyTap’s consumer cloud service (“HeyTap Cloud”) was scheduled for staged discontinuation, with cloud uploads of contacts, browser and Wi-Fi data disabled from 15 December 2025 and the service to be removed and data deleted by 30 June 2026.⁵

OPPO has publicly disclosed use of Amazon Web Services (a US entity) to deliver cloud-based services for its device ecosystem, including managed database and object-storage services across AWS regions.⁶ For US-market handsets, OnePlus has described migrating US user accounts off HeyTap onto OnePlus-managed infrastructure hosted on US-based cloud providers.⁷ These are inbound customer relationships with US and Chinese infrastructure providers; none is an Israeli-origin vendor relationship.

Israeli-Origin Software & Cybersecurity Vendors (Direction: OnePlus as customer)

No public evidence was identified of OnePlus (or OPPO/HeyTap on its behalf) holding a licensing, subscription, or integration relationship with any named Israeli-origin enterprise or cybersecurity vendor - including Check Point, Wiz, CyberArk, SentinelOne, NICE Systems, Verint, or Claroty. No corporate disclosure, vendor case study, or credible third-party report reviewed documents such a relationship. (Palo Alto Networks is Israeli-co-founded but US-incorporated; no source places it in the OnePlus/OPPO stack either.) No public evidence identified.

Systems Integrators & Procurement

No public evidence was identified of any systems integrator, IT-outsourcing partner, or digital-transformation consultancy engaged by OnePlus that mandated or deployed Israeli-origin technology within an engagement. BBK Electronics and OPPO do not publish internal enterprise-procurement details; the resident enterprise vendor stack is undisclosed, which is the principal evidence gap in this sub-domain. No public evidence identified.

Surveillance, Biometrics & Retail Technology

On-Device Biometric Features

OnePlus handsets incorporate on-device fingerprint and face-unlock authentication as standard consumer features implemented on the device’s Qualcomm Snapdragon or MediaTek silicon.⁸ No public evidence was identified that these features rely on Israeli-origin biometric software, or that OnePlus operates any retail-facing or third-party biometric-surveillance deployment. No public evidence identified.

Israeli-Origin Facial Recognition / Behavioural-Analytics Vendors

No public evidence was identified of OnePlus procuring or deploying Israeli-origin facial-recognition, biometric-identification, behavioural-analytics, or gait-analysis technology (e.g. Oosto/AnyVision, BriefCam, Trigo, Trax). No public evidence identified.

Device-Level Data Collection (Academic Findings - direction: practices of OnePlus’s own software)

Academic privacy research has scrutinised data collection by OnePlus’s own software. In the 2023 study “Android OS Privacy Under the Loupe - A Tale from the East” by Haoyu Liu and Paul Patras (University of Edinburgh) and Douglas Leith (Trinity College Dublin), a OnePlus 9R running the Chinese firmware was among devices found to transmit persistent device identifiers (IMEI, MAC address), location identifiers (GPS coordinates, cell ID), user-profile data (phone number, app-usage patterns) and social-connection data to the device vendor, Chinese mobile-network operators, and third parties including Baidu - with the researchers reporting that collection did not stop when the device left China.⁹¹⁰ Separately, in 2017 OnePlus drew scrutiny and litigation in India after OxygenOS was found collecting IMEI, phone numbers and detailed app-usage telemetry without adequate disclosure; OnePlus subsequently changed its consent flow.¹¹¹² These findings concern OnePlus’s own data-handling practices and are not connected to any Israeli-origin technology relationship; they are recorded as factual digital context.

Predictive Analytics, Monitoring & Workforce Surveillance

No public evidence was identified of OnePlus using Israeli-origin predictive-analytics, sentiment-analysis, social-media-monitoring, or workforce-surveillance tools. No public evidence identified.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Data Centre Operations in Israel

No public evidence was identified of OnePlus, OPPO, or HeyTap operating, leasing, or co-locating data-centre infrastructure within Israel. Disclosed back-end processing for OnePlus devices runs through HeyTap and, for US users, OnePlus-managed infrastructure on US-based cloud providers; OPPO’s disclosed AWS usage spans non-Israeli regions.⁵⁶⁷ No public evidence identified of an Israeli data-centre footprint.

Project Nimbus & Israeli State Cloud Infrastructure

Not applicable. Project Nimbus is the Israeli-government cloud contract awarded to Google Cloud and Amazon Web Services; OnePlus is neither a participant nor a sub-provider, and no public evidence was identified of OnePlus involvement in any Israeli state-backed digital-infrastructure programme.¹³

Data-Sovereignty or Resilience Services to Israeli State Institutions

No public evidence identified. OnePlus is a consumer-device brand and does not operate as a cloud or data-sovereignty service provider to any state body, Israeli or otherwise.

Defence, Intelligence & Security Sector Technology Relationships

Military & Intelligence Contracts

No public evidence was identified of any contract, partnership, or service agreement between OnePlus - or its OPPO/BBK Electronics parent grouping - and the Israeli Ministry of Defence, the Israel Defense Forces, or Israeli intelligence agencies (Mossad, Shin Bet, Unit 8200-linked ventures). No public evidence identified.

Provision of Technology / Data to the Israeli State or Military

No public evidence was identified of OnePlus providing surveillance technology, data, software, cloud capacity, or digital services to the Israeli state, military, or security services. This is the directionally serious Digital case, and no qualifying evidence of it was found. No public evidence identified.

Israeli Surveillance-Vendor Targeting of Devices (direction: done to the platform)

Israeli-origin mobile-forensics and spyware firms (e.g. Cellebrite, NSO Group) develop tools that extract data from or compromise smartphones generally; their products target handsets across the Android ecosystem rather than partnering with manufacturers.¹⁴ No public evidence was identified of any commercial or contractual relationship between OnePlus and these firms. Any capability of such tools against OnePlus hardware would be an action directed at the device, not a provision of technology by OnePlus. No public evidence identified of a OnePlus relationship.

Dual-Use Technology Provision & Offensive Cyber

No public evidence was identified of OnePlus consumer technology being reported or confirmed as deployed for military, intelligence, or law-enforcement surveillance in Israel or the Occupied Palestinian Territories, nor of OnePlus developing, licensing, or selling offensive cyber capability. OnePlus is a consumer hardware/software brand and no such capacity is documented. No public evidence identified.

AI, Algorithmic & Autonomous Systems

On-Device AI Capabilities

OnePlus’s documented AI/ML capabilities are on-device consumer features - computational photography, battery optimisation, and language/keyboard prediction - running on Qualcomm Snapdragon and MediaTek hardware.⁸ No Israeli-origin AI tooling is documented in these features.

AI/ML Provision to Israeli State Bodies

No public evidence was identified of OnePlus providing AI, machine-learning, computer-vision, or autonomous decision-support systems to any Israeli state, military, or security body, or in connection with population monitoring in the occupied territories. No public evidence identified.

Training Data & Model Development Involving Israeli Population Data

No public evidence was identified of OnePlus AI models being trained on Israeli population datasets, intercepted communications, or surveillance-derived data from Israel or the occupied territories. No public evidence identified.

Autonomous Systems & Lethality

No public evidence identified. The development or deployment of autonomous or lethal systems is not within OnePlus’s business domain.

Technology Ecosystem & R&D Footprint

Israeli R&D Facilities

No public evidence was identified that OnePlus operates any R&D facility, engineering office, innovation lab, or accelerator within Israel. OnePlus’s documented R&D footprint, following the OPPO R&D merger, centres on Shenzhen (China) and Hyderabad (India).²¹⁵ No public evidence identified of an Israeli R&D presence.

Acquisitions & Investments in Israeli Technology Companies

No public evidence was identified of OnePlus acquiring, or taking a corporate-venture stake in, any Israeli technology company or venture fund. No public evidence identified.

Patents & IP Co-Development with Israeli Institutions

No public evidence was identified of patent co-development, licensing, or joint-research arrangements between OnePlus and Israeli-domiciled entities or research institutions (Technion, Hebrew University, Weizmann Institute). No public evidence identified.

Consumer-Market Presence in Israel (Direction: OnePlus as seller into the market)

OnePlus operates a localised official web presence for the Israeli market (oneplus.com/il) and is served by a self-described official Israeli importer/distributor (one-plus.co.il) retailing OnePlus smartphones, tablets, watches and earbuds with local warranty and service.¹⁶¹⁷ This is an outbound consumer-product sales relationship - OnePlus selling commercial devices into the Israeli retail market through a distributor - not a provision of surveillance, data, or digital infrastructure to the Israeli state. It is recorded for completeness and directional clarity.

Civil Society Scrutiny & Regulatory History

NGO & Academic Scrutiny - Technology Supply Chain

No NGO investigation, academic study, or UN report was identified that addresses OnePlus’s technology relationships with the Israeli state or its operations in the occupied territories. The civil-society and academic scrutiny record for OnePlus concerns consumer data-privacy practices (the 2017 OxygenOS controversy and the 2023 “Tale from the East” device-telemetry findings), not Israel-nexus technology provision.⁹¹¹¹² No public evidence identified of an Israel-related technology investigation.

US Congressional / Commerce Department Scrutiny (China-nexus, not Israel)

On 27 June 2025, Representatives John Moolenaar (Chair) and Raja Krishnamoorthi (Ranking Member) of the US House Select Committee on the Chinese Communist Party wrote to the Commerce Department urging its Information and Communications Technology and Services (ICTS) program to investigate OnePlus devices, citing a third-party commercial analysis alleging that OnePlus phones may transmit sensitive user data - including screenshots - to servers under Chinese jurisdiction without explicit user consent.¹⁸¹⁹ This scrutiny is grounded in US–China data-security concerns and has no Israel nexus; it is recorded as factual regulatory context.

BDS Campaigns

No public evidence was identified of OnePlus appearing on the BDS movement’s published priority-target or boycott lists, or of any organised BDS/divestment campaign specifically targeting OnePlus over technology provision to Israel.²⁰ No public evidence identified.

Export Controls & Sanctions Authorities (Israel nexus)

No public evidence was identified of any action by US (BIS), EU dual-use, or Israeli export-control or sanctions authorities relating to OnePlus technology sales, services, or data transfers to Israeli state entities. Export-control attention on OnePlus-adjacent Chinese electronics concerns US–China technology-transfer policy, not an Israeli dimension.¹⁸ No public evidence identified of an Israel-related export-control action.

End Notes