NSO are literally owned by a Europe based private equity firm, and previously owned by a US based one. Their clients (Saudi & UAE) are very much NATO buddies.
In the UK at least, Israel, Saudi Arabia, and UAE are among the countries security cleared personnel have to check with the MoD if they're allowed to visit. Others on the list include China, Cuba, and Russia. Not as buddy as all that.