Cognyte and the Guardia di Finanza: why Italy never appears in the supplier’s accounts

You check a supplier once, on the day of the award, and then for years you take comfort from its published accounts. If the supplier is foreign, though, those accounts can be drawn up so that your country never appears in them at all — and they can stop being published altogether, with nobody telling you, while the system stays switched on inside your building.

An Italian instrument, a counterparty in Herzliya

On 5 September 2023 TED, the EU Official Journal supplement, published contract award notice 2023/S 170-533317. The contracting authority: the Comando Generale della Guardia di Finanza — Direzione Approvvigionamenti, Rome. The object: «Acquisto della piattaforma di web intelligence “HIWIRE”» (purchase of the “HIWIRE” web intelligence platform), CIG 98313330A6. Contract no. 1658, concluded on 15 June 2023, value EUR 1,480,177.00.

The winner is not an Italian reseller: it is Cognyte Technologies Israel Ltd, Hamaskit Street 33, Herzliyya, Israel. The justification, in the authority’s words: «il software in argomento è connotato da infungibilità e può essere fornito unicamente dalla Cognyte Technologies Israel Ltd., con sede in Israele, titolare dei diritti di proprietà del software» (the software in question is non-substitutable and can be supplied only by Cognyte Technologies Israel Ltd., based in Israel, holder of the property rights in the software).

That is not boilerplate: it is a contracting authority recording its own exit cost in a public European instrument. Elsewhere the party that signs is not the party that builds; here the maker signs in person, under another state’s jurisdiction.

Today’s supplier did not exist when the product was born

That software was not born inside Cognyte: it was the Cyber Intelligence Solutions division of Verint Systems Inc. On 4 December 2019 Verint announced the separation; on 1 February 2021 Cognyte Software Ltd. came into being, incorporated in Israel, listed on Nasdaq. Verint kept the Customer Engagement business, in the United States.

The second half is recent. On 24 August 2025 Verint signed a merger agreement with Calabrio, Inc.: USD 20.50 per share in cash. The merger took effect on 26 November 2025, the same day as the delisting from Nasdaq; on 8 December 2025 Verint filed Form 15-12G and terminated its reporting duty to the SEC. Against the number of holders of record, the form states: “One”.

Since then one instrument has appeared in its public file: on 12 February 2026 Glazer Capital, LLC filed a Schedule 13G/A declaring zero shares. In under six years the name you would have signed with has become two companies in two jurisdictions, and one publishes nothing.

What the accounts say, and what they declare they do not say

The Form 20-F filed on 25 March 2026 closes the year to 31 January 2026 with revenue of USD 400.0 million. The geographic table allocates USD 279.1 million to Israel, 58.0 to Germany, 19.8 to the rest of EMEA, 15.2 to the United States, 8.4 to the rest of the Americas and 19.6 to Asia-Pacific. The Israel line is worth almost 70% of the business.

Above the table sits a line worth more than the table: “Revenue by major geographic region is based on the location of our contracting subsidiary, which often differ from the geographic location of the customer”. Hundreds of pages earlier, the same document splits revenue by end user: roughly 54% EMEA, 34% Asia-Pacific, 12% Americas. Two geographies in one file; only the second is about customers.

Three subsidiaries exceed the 10% threshold: Cognyte Technologies Israel Ltd, SYBORG Informationssysteme b.h. OHG (Germany) and UTX Technologies Limited (Cyprus). The Guardia di Finanza’s counterparty is the first: that million and a half of Italian public money has, in accounting terms, landed in the Israel line.

One check is worth running: the word Italy never appears in the 20-F — zero whole-word occurrences, case ignored, while Germany appears seven times and Israel one hundred and eighteen. This is not an omission: it is how such accounts are built. But a supplier’s annual report is not where you learn whether it is already inside the Italian administration. The award notice is.

How much you weigh, against someone you cannot name

The company states it has “hundreds of customers, primarily in the government sector spanning approximately 100 countries”, and does not name them: “Most of our customers require strict non-disclosure agreements”.

In the year to 31 January 2024 — the year of the Italian contract — revenue was USD 313.4 million and two customers alone accounted for 16.5% and 11.0%. A EUR 1.48 million contract sits two orders of magnitude below that: in the queue of priorities your place is set by weight, and of the others you know nothing.

Then there is a third party that decides without being a party. The 20-F states that Israel’s defence export policy regulates the sale of many of the systems developed in Israel, that “a license is required to initiate marketing activities for such systems and products”, and that a specific licence is needed for defence-related hardware, software, services and know-how exported from Israel — the same logic as the dual-use regime. The Form 6-K of 9 September 2026 reports quarterly revenue of USD 109.2 million, up 12.0%, and no geographic breakdown.

Why a closed system

Because in this trade the most delicate datum is not the answer: it is the question. A web intelligence platform records what you look for, about whom, and when you stopped. That sequence is the operation, and if it runs on plant you do not guard, it lives wherever the supplier lives.

Because continuity here has three switches you do not hold: a merger, a delisting, an export licence. A closed system on open-weight models, inside guarded machines, keeps running when those switches trip: what stays in the building is the model, the weights, the pipelines and the archive, not a right to be served.

Because you have to be able to answer. When a magistrate asks on what basis the system proposed a link, the tool did it is not an answer: inside the perimeter you record which model answered, on which weights, over which data and with which operator in command, and the analysis stays inside. The non-substitutability declared in a tender reverses in one way only: by owning the stack instead of renting it.

The two axes, applied to this case

Complying. The control we put into service is a living register of critical suppliers that keeps aligned three things nobody aligns today: the entity you signed with, the entity that holds the rights in the software now, and what that entity declares in its own public instruments — mergers, deregistrations, licences, changes of control — with the dated trail for an inspection.

Deciding. The same architecture holds contracts, tender documents, corporate filings, archives and business systems in a single operating model, on which AI agents execute decisions with a human operator in command — for large companies, defence, healthcare and public administration. On-premises on autonomous machines, or in a dedicated cloud with a data centre in Italy staffed by us, always with shared management.

Could you say, for your three most critical suppliers, which entity you signed with and who holds the rights in the software today? Half an hour with one of our engineers is enough to start.

What we do not know

We do not know whether the platform bought in 2023 is still in service: an award notice records the signature, not the life of the contract. We do not know what HIWIRE does beyond the notice’s description: that name does not appear in the 20-F. We do not know who the two concentrated customers are, and the percentages cited refer to different years. The absence of the word Italy does not prove the absence of other Italian customers: below the European thresholds an award never reaches TED. The full-text search on TED is fuzzy — searching for Cognyte returns notices containing cognome, the Italian for surname — so we opened every Italian hit in XML: only one carries the name. No Italian notice names Verint, which does not prove none exists. We gathered no statements from the parties: the positions reported are those recorded in the instruments.