Digital Audit: Pret A Manger

Audit Phase: Digital (Digital / Technology Forensics) Subject Entity: Pret A Manger Limited Registered Office: 75B Verde, 10 Bressenden Place, London SW1E 5DH, United Kingdom (Companies House no. 01854213) Parent: JAB Holding Company (Luxembourg-domiciled private investment vehicle) Audit Date: June 2026 Evidence Base: Published corporate and vendor press releases, trade and retail-technology press, court records, the Israeli innovation-authority startup database, and NGO/biometric-policy reporting. All factual claims are drawn from publicly available sources cited in the End Notes.

Scope and directionality note: Digital assesses the digital/technology nexus to Israel. The serious case is the provision of surveillance, digital, data, or cyber technology to the Israeli state, military, or security services. The reverse direction - Pret procuring technology from an Israeli-origin vendor - is a customer relationship and is recorded explicitly as such, weighted far lower than provision. No transitive guilt is imputed: an Israeli vendor’s other clients, its founders’ backgrounds, or a parent group’s separate activities are not attributed to Pret. US-entity relationships (e.g. Oracle, Amazon) and Indian-entity relationships (Tech Mahindra) are not Israeli-origin and are noted only for completeness.

Enterprise Technology Stack & Vendor Relationships

Strategic Technology & Integration Partnerships (Direction: Pret as customer)

In 2021 Pret A Manger selected Tech Mahindra (headquartered in Pune, India) as its technology and digital-transformation partner under a five-year contract focused on “streamlining and optimising Pret’s IT infrastructure through cloudification, systems re-engineering, consumerisation of IT systems and data engineering.”¹ Tech Mahindra is an Indian-origin entity; this is recorded for completeness and is not an Israeli-origin relationship.¹

Pret’s documented enterprise stack, as catalogued by the IT-technographics service AppsRunTheWorld, includes Oracle NetSuite ERP (financial management/purchasing, implemented 2015), Oracle MICROS Simphony point of sale, Celestra (UK-based POS managed-application support and field services, 2024), and a category of cloud IaaS dating to 2014/2019; the named vendors are US- or UK-origin, with no Israeli-origin vendor identified in the catalogued stack.² PA Consulting (UK) has separately documented work with Pret on a digital customer-experience programme.³

Loyalty & Subscription Platform (Direction: Pret as customer)

Pret’s loyalty programme (“Pret Perks”) and its widely covered coffee subscription run on the AIR platform supplied by Eagle Eye Solutions Group plc, a company registered in England (no. 8892109, registered office 5 New Street Square, London EC4A 3TW).⁴⁵ Eagle Eye’s AIR platform integrates with Pret’s in-store Oracle MICROS Simphony POS for real-time offer issuance, validation and redemption.⁴⁵ Eagle Eye is a UK-origin vendor; it lists Google Cloud (US) as a premier technology partner.⁴ No Israeli-origin component was identified in this relationship.

Israeli-Origin Technology Vendors in the Pret Stack (Direction: Pret as customer)

One Israeli-origin technology vendor is documented in public sources as a supplier to Pret. The direction is Pret as the customer procuring a commercial SaaS product - not Pret providing technology to any Israeli entity.

Yoobic - In September 2024 Pret A Manger announced it had deployed Yoobic’s frontline-employee-experience platform (digital task management, standard-operating-procedure digitisation, compliance tracking and frontline communications) across 525 shops in 15 international markets, with employees managing around 65,000 monthly tasks on the platform.⁶⁷ Yoobic was founded in 2014 by brothers Fabrice, Avi and Gilles Haïat; it is profiled as an Israeli company by Start-Up Nation Central (the database maintained by Israel’s innovation ecosystem body) and maintains a Tel Aviv office alongside locations in London, Paris and New York.⁸⁹ Yoobic CEO and co-founder Fabrice Haiat and Pret Global Operations Development Director Mark Corney were quoted on the deployment.⁶ Pret is the retail customer; Yoobic is the vendor. This is a procurement (inbound) relationship and involves no Pret supply of technology, data, or services to Israel.

Israeli-Origin Cybersecurity Vendors

No public evidence was identified confirming that Pret A Manger holds a licensing, subscription, or integration relationship with any Israeli-origin cybersecurity vendor - including Check Point, Wiz, CyberArk, SentinelOne, Claroty, Armis, Verint, or NICE Systems. Pret’s endpoint-security, SIEM, network-monitoring and identity-management vendors are not disclosed in any public source reviewed.²

Procurement Transparency Constraints

Pret A Manger is a privately held company within the JAB Holding portfolio and is not subject to public-procurement disclosure obligations; its Companies House filings are financial accounts only and carry no technology-vendor narrative.² Vendor relationships below the level of named, publicly announced partnerships are not in the public domain, and the full security/IT vendor stack is undisclosed. This is the principal evidence gap in this domain.

Surveillance, Biometrics & Retail Technology

Body-Worn Cameras - UK Retail-Crime Response

In August 2024 Pret A Manger began trialling body-worn cameras at a small number of London shops in response to rising retail crime and abuse of staff. The cameras are worn only by team leaders and managers, are switched on only in specific circumstances at the wearer’s discretion, and only Pret’s security team can access captured footage; in-store signage notifies customers.¹⁰¹¹ No camera supplier or vendor is named in the public reporting, and no facial-recognition capability is described.¹⁰¹¹ This is a UK domestic staff-safety measure with no Israel nexus and no provision of technology to any external party.

Facial Recognition & Israeli-Origin Surveillance / Biometric Vendors

No public evidence was identified that Pret A Manger operates live or retrospective facial recognition on customers in its stores, or that it is a named participant in the UK Home Office / police “Project Pegasus” retail-crime facial-recognition data-sharing scheme. Contemporaneous UK live-facial-recognition retail deployments reported by trade and biometric press named other retailers (e.g. Sainsbury’s, Co-op), not Pret.¹² No public evidence was identified that Pret has deployed facial-recognition, biometric, gait-analysis, or in-store behavioural-analytics technology of Israeli origin (e.g. Oosto/AnyVision, BriefCam, Trigo, Trax). No public evidence identified.

Employee Fingerprint Biometrics - US BIPA Litigation

Pret A Manger required new US employees to enrol a fingerprint scan for a timekeeping system. A former employee filed a class action in 2020–2021 in the US District Court for the Northern District of Illinois alleging unlawful collection, storage and use of fingerprint biometrics in violation of the Illinois Biometric Information Privacy Act (BIPA); the court allowed the suit to proceed, and the matter was subsequently resolved through a settlement requiring Pret to pay in excess of US$677,000 to affected workers.¹³¹⁴ No technology vendor is named in the available records, and no Israeli-origin vendor is identified.¹³¹⁴ This is a US labour/privacy matter concerning Pret’s own internal use of biometrics, with no Israel nexus.

Frictionless / Computer-Vision Checkout

No public evidence was identified confirming an operational Amazon “Just Walk Out” (US-origin computer-vision/sensor-fusion checkout) deployment at Pret locations; Amazon’s Just Walk Out is corporately and architecturally distinct from the Israeli-origin frictionless-retail vendor Trigo, and no public source links Pret to Trigo or any other Israeli-origin computer-vision checkout component.¹⁵ No public evidence identified.

No public evidence was identified of Pret A Manger deploying Israeli-origin predictive-policing, sentiment-analysis, social-media-monitoring, or workforce-surveillance tools. Pret’s documented data activity is confined to consumer loyalty/subscription analytics (via Eagle Eye) and operational task tracking (via Yoobic).⁴⁶

Third-Party & Bundled Deployment

No public evidence identified of Israeli-origin surveillance technology reaching Pret indirectly through managed-services contracts, bundled enterprise suites, or white-labelled third-party integrations.

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Data Centre Operations in Israel

No public evidence was identified that Pret A Manger operates, leases, or co-locates data-centre infrastructure within Israel. Pret’s disclosed IT direction is “cloudification” delivered with Tech Mahindra (India) across UK, US and European consumer markets; specific cloud regions are not publicly disclosed, and no Israeli data-processing or storage location is referenced.¹²

Project Nimbus & Israeli State Cloud Infrastructure

Not applicable. Project Nimbus is the Israeli-government cloud contract awarded to Google Cloud and Amazon Web Services; Pret A Manger is neither a participant nor a sub-provider. No public evidence was identified of Pret involvement in any Israeli state-backed digital-infrastructure programme.

Data-Sovereignty or Resilience Services to Israeli State Institutions

No public evidence identified. Pret A Manger does not operate as a technology or cloud-service provider to any state body, Israeli or otherwise; this category is outside its business domain.

Group-Level Procurement via JAB Holding

JAB Holding may negotiate group-level enterprise software licences covering portfolio companies (which include Jacobs Douwe Egberts, Keurig Dr Pepper, Krispy Kreme and other consumer brands), but JAB does not publicly disclose group technology-procurement arrangements, and no Israeli-origin component or Israeli state-cloud participation has been identified at group level. No public evidence identified.

Defence, Intelligence & Security Sector Technology Relationships

Military & Intelligence Contracts

No public evidence was identified of any contract, partnership, or service agreement between Pret A Manger and the Israeli Ministry of Defence, the Israel Defense Forces (IDF), Mossad, Shin Bet, Unit 8200, or any associated Israeli intelligence or security body. Pret is a food-to-go retail business and does not operate in the defence-technology or security-services sector.

Provision of Technology / Data to the Israeli State or Military

No public evidence was identified of Pret A Manger providing surveillance technology, data, software, cloud capacity, or digital services to the Israeli state, military, or security services. This is the directionally serious Digital case, and no qualifying evidence of it was found. No public evidence identified.

Dual-Use Technology Provision

No public evidence identified. Pret A Manger does not develop, manufacture, or license technology products of any kind; its commercial activity is confined to food retail, hospitality and associated consumer loyalty operations.

Offensive Cyber Capability

No public evidence identified. Pret A Manger does not develop, license, or sell offensive cyber capability, and is not a technology vendor in any recognised sense. No public evidence was identified of a major cyberattack or ransomware incident directed at Pret A Manger in the period reviewed.

AI, Algorithmic & Autonomous Systems

AI/ML Provision to Israeli State Bodies

No public evidence identified. Pret A Manger is not an AI or machine-learning vendor; its data activity is confined to consumer-facing operational applications (loyalty/subscription analytics, frontline task management). No provision of AI systems, model access, training data, or inference services to any Israeli state, military, or security body was identified.

Training Data & Model Development Involving Israeli Population Data

No public evidence was identified of Pret A Manger’s data assets - loyalty data, transaction records, or operational datasets - being used in the development of AI models for Israeli state, surveillance, or population-management applications.

Autonomous Systems & Lethality

No public evidence identified and not applicable. Pret operates no autonomous systems beyond standard retail automation (self-service ordering, contactless payment) and has no connection to lethal autonomous technology.

Internal Algorithmic Deployment - Israeli-Origin AI Tooling

Of the Israeli-origin vendors identified in this audit, Yoobic supplies an AI-enabled frontline-operations platform as a procurement (Pret as customer).⁶⁸ No public evidence was identified of any other Israeli-origin AI vendor embedded in Pret’s stack; the undisclosed full vendor list means secondary embedding within managed services cannot be positively excluded, but no such instance was identified.

Technology Ecosystem & R&D Footprint

Israeli R&D Facilities

No public evidence was identified that Pret A Manger operates any R&D facility, engineering office, innovation lab, or accelerator programme within Israel. Pret’s technology function is understood to be a back-office operational capability rather than a product R&D organisation.¹²

Acquisitions & Investments in Israeli Technology Companies

No public evidence was identified of Pret A Manger acquiring, or taking a corporate-venture stake in, any Israeli technology company. The Israeli-origin vendor identified here (Yoobic) is a commercial software supplier, not a Pret investment. JAB Holding, Pret’s consumer-sector parent, has no Israeli technology investment identified in its publicly disclosed portfolio. No public evidence identified.

Patents & IP Co-Development with Israeli Institutions

No public evidence was identified of patent portfolios, licensing, or co-development arrangements between Pret A Manger and Israeli-domiciled entities or research institutions (Technion, Hebrew University, Weizmann Institute). Pret’s intellectual property is understood to consist primarily of trade marks, brand assets and culinary formulations.

Supplier Code of Conduct - Technology Supply-Chain Provisions

Pret A Manger publishes supplier standards addressing ethical sourcing for its product supply chain; the public versions reviewed do not contain provisions governing the national origin or geopolitical exposure of technology vendors, software suppliers, or digital-infrastructure providers.¹⁶ No technology-supply-chain due-diligence framework specific to vendor geopolitical exposure is publicly documented by Pret.

Civil Society Scrutiny & Regulatory History

NGO & Academic Scrutiny - Technology Supply Chain

No public evidence was identified of an NGO investigation, academic study, or UN report addressing Pret A Manger’s technology relationships with the Israeli state, Israeli defence entities, or Israeli-origin vendors. Civil-society attention on Pret in relation to Israel has centred on its abandoned retail franchise plan (the Economic/Political domain), not on technology procurement.¹⁷

BDS & Boycott Campaigns

Pret A Manger has been the subject of boycott campaigning by Palestine Solidarity Campaign and Friends of Al-Aqsa following its 2022 franchise agreement to open stores in Israel; Pret cancelled that franchise plan in May 2024.¹⁷ The publicly documented grounds relate to Pret’s intended retail presence in Israel, not to Israeli-origin technology procurement, software licensing, or digital-infrastructure provision. No public evidence was identified of a BDS or NGO campaign specifically targeting Pret’s technology relationships.

Data-Protection & Biometric Regulatory History

Pret A Manger settled a US BIPA class action over employee fingerprint timekeeping for more than US$677,000 (Northern District of Illinois), as detailed above.¹³¹⁴ No public evidence was identified of any UK Information Commissioner’s Office enforcement notice, monetary penalty, or data-breach action against Pret A Manger connected to Israeli-origin technology or cross-border data transfers to Israel. No public evidence identified.

Export Controls & Sanctions Authorities

No public evidence was identified of any action by UK export-control authorities, HMRC, the Office of Financial Sanctions Implementation (OFSI), or any equivalent body relating to Pret technology sales, services, or data transfers to Israeli state entities. No public evidence identified.

Evidence Gaps

Full IT and security vendor stack (highest priority) - As a private JAB-portfolio company, Pret does not disclose its sub-strategic IT and security vendor relationships. The resident cybersecurity-product stack is undisclosed, so Israeli-origin cybersecurity vendor exposure cannot be positively excluded on public evidence.
Body-worn camera supplier - The vendor behind Pret’s 2024 body-camera trial is not publicly named; whether it embeds any Israeli-origin component cannot be assessed.
Tech Mahindra “cloudification” specifics - The named cloud platforms, data regions and sub-vendors within the five-year Tech Mahindra programme are not disclosed, preventing assessment of any embedded Israeli-origin component.
JAB group procurement opacity - Group-level enterprise software licences negotiated by JAB across portfolio companies are not publicly disclosed.
Depth of the Yoobic relationship - The Yoobic deployment is confirmed as procurement (Pret as customer) from vendor and trade press, but contract scope, data-flow specifics, and data-residency details are not fully disclosed.