DUBAI: Tech giants Google and Amazon agreed to use a secret code to warn their client, the Israeli government, if their data was being handed over to foreign law enforcement, according to a joint investigation by The Guardian, Israeli-Palestinian publication +972 Magazine, and Hebrew-language outlet Local Call.
The agreement was part of a $1.2 billion cloud-computing deal inked in 2021, known as Project Nimbus. It stemmed from Israel鈥檚 concerns that the data it stores on these tech companies鈥 cloud platforms could end up in the hands of foreign law enforcement authorities.
Tech companies must comply with requests from law enforcement and security agencies to hand over customer data for investigative purposes. Moreover, they are often prohibited from informing the customer that their data has been disclosed.
Therefore, Israeli officials developed the so-called 鈥渨inking鈥 mechanism, under which Google and Amazon would send secret signals, hidden in payments, to the Israeli government, revealing the identity of the country to which they had been compelled to hand over Israeli data.
According to leaked documents from Israel鈥檚 Finance Ministry, which include a finalized version of the Nimbus agreement, payments must be made 鈥渨ithin 24 hours of the information being transferred鈥 and correspond to the telephone dialing code of the foreign country, amounting to sums between 1,000 ($308) and 9,999 shekels.
For example, if either firm provided information to authorities in the US, where the dialing code is +1, they would have to send the Israeli government 1,000 shekels.
If they share Israeli data with authorities in Italy, where the dialing code is +39, they would have to send 3,900 shekels.
In cases where the companies concluded they were under a gag order preventing them from indicating which country had received the data, they must pay 100,000 shekels to the Israeli government.
The agreement also includes measures that prohibit the US companies from restricting how the Israeli government and its branches, including the military and security services, use their cloud services.
Both companies鈥 standard 鈥渁cceptable use鈥 policies state that their cloud platforms should not be used to violate the legal rights of others, nor to engage in or encourage activities that cause 鈥渟erious harm鈥 to people.
However, according to an Israeli official familiar with the Nimbus project, there can be 鈥渘o restrictions鈥 on the kind of information stored in Google and Amazon鈥檚 cloud platforms.
The leaked documents state that Israel is 鈥渆ntitled to migrate to the cloud or generate in the cloud any content data they wish.鈥
Legal experts said the agreement is extremely unusual and risky, as the coded messages could violate legal obligations in the US, where Google and Amazon are headquartered.
鈥淚t seems awfully cute and something that if the US government or, more to the point, a court were to understand, I don鈥檛 think they would be particularly sympathetic,鈥 a former US government lawyer told The Guardian.
Both Google and Amazon鈥檚 cloud businesses have denied evading any legal obligations. Neither responded to The Guardian鈥檚 questions about whether they had used the 鈥渨ink.鈥
An Amazon spokesperson said that the company has a 鈥渞igorous global process for responding to lawful and binding orders for requests related to customer data,鈥 adding that there are no 鈥減rocesses in place to circumvent our confidentiality obligations on lawfully binding orders.鈥
Google declined to comment on which of Israel鈥檚 demands it had accepted in the Nimbus deal, but said it was 鈥渇alse鈥 to 鈥渋mply that we somehow were involved in illegal activity, which is absurd.鈥
A spokesperson for Israel鈥檚 Finance Ministry said: 鈥淭he article鈥檚 insinuation that Israel compels companies to breach the law is baseless.鈥
Google and Amazon are 鈥渂ound by stringent contractual obligations that safeguard Israel鈥檚 vital interests,鈥 and 鈥渨e will not legitimize the article鈥檚 claims by disclosing private commercial terms,鈥 the spokesperson added.