Microsoft has initiated an internal investigation and terminated the Israeli army's access to cloud services and AI, including its Azure platform, following a 2024 investigation by The Guardian, +972 Magazine, and Local Call. The investigation revealed that the Israeli army's Unit 8200 used Microsoft's Azure cloud platform to store intercepted Palestinian communications. Microsoft published a five-page official summary of its findings on Thursday, stating its "factual conclusions remain unchanged" and that it intends to adopt recommendations to improve "the effectiveness of its governance in human rights."
The company maintains that its leaders, including CEO Satya Nadella, were unaware that Unit 8200 was using Azure for this purpose, stating "ses dirigeants, y compris son PDG Satya Nadella, ignoraient que l’Unité 8200 utilisait Azure pour stocker des communications palestiniennes interceptées." Microsoft asserts it "does not provide technology to facilitate mass surveillance of civilians," and further clarified that it would not "fournir de technologie destinée à faciliter la surveillance de masse de civils." The tech giant confirmed it will strengthen due diligence procedures for human rights in "conflict and high-risk zones" and "zones de conflit et à haut risque."
Investigation Details and Findings
Initial findings from an internal investigation revealed that Israel's spy agency, Unit 8200, had violated Microsoft's terms of service. This internal investigation was ordered by Microsoft following the public revelations. The investigation detailed how a system, utilizing Microsoft Azure, enabled intelligence officers to collect, listen to, and analyze millions of Palestinians' phone calls daily. This activity was described as "indiscriminate" and targeted civilians on a large scale, which investigators stated was a breach of Microsoft's contractual terms of use. The system's operation was a key point of concern, leading to Microsoft's decision to terminate Unit 8200's access to its cloud services and AI used in the surveillance project.
Microsoft published a five-page official summary of its findings, stating that its "factual conclusions remain unchanged," or "conclusions factuelles demeurent inchangées." The company maintained that its leaders, including CEO Satya Nadella, were unaware that Unit 8200 was using Azure for this purpose, stating "ses dirigeants, y compris son PDG Satya Nadella, ignoraient que l’Unité 8200 utilisait Azure pour stocker des communications palestiniennes interceptées." Microsoft also asserted that it "does not provide technology to facilitate mass surveillance of civilians," or "fournir de technologie destinée à faciliter la surveillance de masse de civils." This assertion shows the company's official stance on its technological offerings and their intended use.
The Guardian, one of the outlets involved in the initial reporting, established that several employees involved in managing projects with Unit 8200 had previously served within this elite unit or were reservists. This detail raised questions about potential conflicts of interest and the transparency of information flow within Microsoft regarding these sensitive projects. In response to the findings, Microsoft confirmed it would strengthen due diligence procedures for human rights in "conflict and high-risk zones," or "zones de conflit et à haut risque." The company plans to adopt recommendations to improve "the effectiveness of its governance in human rights," or "l’efficacité de sa gouvernance en matière de droits humains." This includes a commitment for senior management to meet with customers on issues "liés à la sécurité nationale" to ensure they understand how to reconcile these requirements with their obligations to Microsoft, or "afin de s’assurer que ceux-ci savent comment concilier ces exigences avec leurs obligations envers Microsoft," particularly "lors de nouvelles circonstances politiques ou de changements dans des projets sensibles."
Microsoft's Response and Internal Changes
Microsoft has outlined several new measures following its internal investigation, including a commitment to review how it evaluates "national security" contracts before they are signed. This review process aims to prevent similar incidents by ensuring a more thorough assessment of potential human rights impacts from the outset. The company also announced a series of changes to how it oversees employees who have been granted security clearances by foreign governments. These changes are part of a broader effort to better manage security clearances granted by foreign governments to its own employees, addressing concerns about potential dual loyalties or information asymmetry. Microsoft stated that it would implement improved management of these clearances.
The tech giant further committed to conducting periodic audits to verify that acceptable use policies are respected by its clients. These reviews will specifically check whether Microsoft’s acceptable use policies are being followed by customers when there are "new political circumstances or changes to sensitive projects," or "lors de nouvelles circonstances politiques ou de changements dans des projets sensibles." The company plans to adopt recommendations to improve "the effectiveness of its governance in human rights," or "l’efficacité de sa gouvernance en matière de droits humains." These measures are designed to enhance oversight and ensure compliance with Microsoft's ethical standards and terms of service.
Microsoft maintains that "ses dirigeants, y compris son PDG Satya Nadella, ignoraient que l’Unité 8200 utilisait Azure pour stocker des communications palestiniennes interceptées," and reiterated that its "factual conclusions remain unchanged," or "conclusions factuelles demeurent inchangées." The company asserted it "does not provide technology to facilitate mass surveillance of civilians," or "fournir de technologie destinée à faciliter la surveillance de masse de civils." It confirmed that it would strengthen due diligence procedures for human rights in "conflict and high-risk zones," or "zones de conflit et à haut risque." Additionally, the company intends for senior management to meet with customers on issues "liés à la sécurité nationale" "afin de s’assurer que ceux-ci savent comment concilier ces exigences avec leurs obligations envers Microsoft." This commitment notes a proactive approach to engaging with clients on sensitive national security matters.
Leadership Changes and Employee Concerns
Some employees within Microsoft's Israeli subsidiary reportedly faced "conflicting loyalties" between their professional duties and their support for the Israeli army, particularly following the Hamas attacks on October 7, 2023. These internal tensions shed light on the complex environment in which the company operates in certain regions. Concerns also emerged that certain Israeli subsidiary employees were not entirely transparent with the company's US headquarters regarding their awareness of Unit 8200's utilization of Microsoft technologies. This lack of transparency is a significant aspect of the internal investigation's findings. Microsoft has maintained that "ses dirigeants, y compris son PDG Satya Nadella, ignoraient que l’Unité 8200 utilisait Azure pour stocker des communications palestiniennes interceptées," asserting that its "factual findings remain the same" and it "does not provide technology to facilitate mass surveillance of civilians."
Amid these developments, the director of Microsoft's Israeli division announced his departure last month, a move reportedly connected to violations of the company's internal ethical code. Several other executives have also left the company in the months that followed, indicating a period of significant internal change and restructuring within the Israeli subsidiary. Microsoft has committed to strengthening due diligence procedures for human rights in "conflict and high-risk zones" and adopting recommendations to improve "the effectiveness of its human-rights governance." The company plans for senior management to meet with customers on issues "liés à la sécurité nationale" "afin de s’assurer que ceux-ci savent comment concilier ces exigences avec leurs obligations envers Microsoft," especially "lors de nouvelles circonstances politiques ou de changements dans des projets sensibles."
Criticism and Public Reaction
Disclosures regarding Microsoft's cloud services led to protests at its US headquarters and a European data center, with shareholders, NGOs, and a worker-led campaign group, No Azure for Apartheid, demanding transparency over its business with Israeli military customers. The public outcry shows the significant ethical concerns raised by the investigation's findings. This week, the group staged a fresh wave of protests at an annual conference in San Francisco where the company announced new products. Protesters at the San Francisco event displayed banners stating "Microsoft finances genocide" and demanded a clear break with Israeli military clients. No Azure for Apartheid, composed partly of current and former Microsoft employees, is leading significant mobilization efforts, noting the depth of concern among both external activists and individuals with direct knowledge of the company's operations.
Microsoft maintains that its leaders, including CEO Satya Nadella, were unaware that Unit 8200 was using Azure to store intercepted Palestinian communications, stating "ses dirigeants, y compris son PDG Satya Nadella, ignoraient que l’Unité 8200 utilisait Azure pour stocker des communications palestiniennes interceptées." The company asserts it "does not provide technology to facilitate mass surveillance of civilians" and that its "factual conclusions remain unchanged," or "conclusions factuelles demeurent inchangées." Microsoft has committed to strengthening due diligence procedures for human rights in "conflict and high-risk zones," or "zones de conflit et à haut risque," and adopting recommendations to improve "the effectiveness of its governance in human rights," or "l’efficacité de sa gouvernance en matière de droits humains." It plans for senior management to meet with customers on issues "liés à la sécurité nationale" to ensure they understand how to reconcile these requirements with their obligations, particularly "lors de nouvelles circonstances politiques ou de changements dans des projets sensibles." The company's response seeks to address public and internal concerns while reaffirming its commitment to human rights governance.
