Microsoft’s role in technology used by Israel’s military is a concrete corporate-accountability question concerning Palestinians in Gaza and the West Bank. Its public record includes an initial review, a later investigation and the suspension of specified services. Those stages should not be collapsed into either “nothing happened” or “Microsoft ended all military business.”
This timeline follows the company’s statements and a subsequent shareholder challenge. It distinguishes the record from our interpretation, without claiming access to military customer data or an independent investigation by Mashinii.
How the public record changed
| Date or document | What the source says | How to read it |
|---|---|---|
| 15 May 2025 statement | Microsoft said its review had found no evidence that its technologies had been used to harm people or that IMOD had breached its terms | An account of that review, not a permanent finding covering future evidence |
| 15 August 2025 update | Microsoft announced a formal review of allegations concerning an Israeli military unit’s use of Azure | The company was investigating a specific new set of allegations |
| 25 September 2025 statement | Microsoft said it found evidence supporting elements of the reporting and disabled specified subscriptions and services | A targeted suspension, not a complete exit from Israel or every IMOD relationship |
| 2026 follow-up summary | Microsoft said the external review’s factual findings remained unchanged and described governance changes | A company-published summary of an external investigation, not a court judgment |
The May statement and August update describe the first two stages. The September statement identifies the allegations as involving storage of phone-call recordings obtained through broad or mass surveillance of Palestinian civilians.
What did Microsoft acknowledge?
The September statement says the supporting evidence concerned Azure storage consumption in the Netherlands and use of AI services. Microsoft said it disabled specific cloud-storage and AI services to a unit within the Israel Ministry of Defense, while continuing cybersecurity work.
Its 2026 investigation summary identifies Covington & Burling as the external law firm conducting the second review. Microsoft says the investigation examined its own business data and did not access IMOD customer content. It also describes continuing provision of software, professional services, Azure and AI services to IMOD, alongside the suspension of specified services.
The distinction matters: evidence supporting particular allegations is substantial, but it does not establish the destination or consequence of every individual record. Conversely, a limit on what investigators inspected does not erase the company’s acknowledgment or the action it took.
What remains contested?
A September 2026 shareholder briefing filed with the SEC, submitted by Investor Advocates for Social Justice, argues that Microsoft’s human-rights due diligence is reactive and insufficiently transparent. It supports a proposal seeking an assessment of the effectiveness of those processes.
That document is an advocacy filing hosted by a regulator. Its presence on the SEC website does not make its allegations SEC findings. Equally, Microsoft commissioning an external investigation does not make its published summary a substitute for independent public scrutiny.
For readers, three questions remain useful: what controls prevent recurrence, how is their effectiveness demonstrated, and what remedy is available to people affected? A policy change and a remedy answer different questions.
Use the evidence when assessing Microsoft
Our interpretation is that the sequence warrants scrutiny of how customer-use risks were identified and escalated. A narrow suspension alone cannot demonstrate that every relevant risk has been resolved. Nor does this timeline establish criminal liability.
Read Microsoft’s company score for its broader record and our Google–Microsoft ethics comparison for context. The score covers multiple dimensions; it should not replace reading the Gaza-related documents themselves.
Sources checked on 24 September 2026. Dated findings and company policies may change; the publication date is not a new verification date.
Keep reading
Browse all research →Keep asking better questions about companies.
Get one useful company story each week: ownership explainers, comparisons and new findings, with the sources. The Evidence Brief is free.