Palantir

SURVEILLANCE TECH

LAST UPDATED 30 AUG 2026

OF 100

PARANOIA SCORE

WHAT THE POLICIES SAY

Palantir Technologies Inc. is a publicly traded (Nasdaq: PLTR) software company that provides data-integration and analytics platforms (Gotham, Foundry, AIP) used by government agencies and commercial customers, including U.S. Immigration and Customs Enforcement (per federal procurement records) and the NHS in England (per NHS England's own contract explainer). Palantir states it acts as a data processor for customer data and publicly disputes the data-broker characterization -- its own site states 'Palantir is not a "data broker" or "data aggregator."' -- while its corporate Privacy Statement discloses combining collected data with information obtained from third parties, targeted advertising via third-party ad platforms, and a precautionary state-law sale/share opt-out. In 2023 Germany's Federal Constitutional Court held that Hesse and Hamburg police statutes authorizing automated data analysis -- Hesse ran Palantir's Gotham as 'hessenDATA' -- were unconstitutional; no privacy enforcement action or breach directly against Palantir itself was found, and the company publishes a named-firm ISO/IEC 27001 certification (Schellman & Company, LLC) and holds FedRAMP and DoD impact-level authorizations per its 10-K.

TRACK RECORD

1 ENFORCEMENT ACTION

[2023-02-16]

On 2023-02-16 Germany's Federal Constitutional Court held that provisions of the Hesse and Hamburg police acts authorizing automated data analysis for the prevention of criminal offences were unconstitutional; the judgment records that in 2017 the Land Hesse purchased Palantir's Gotham system and ran it as 'hessenDATA.' The ruling addressed the constitutionality of the state statutes governing police use of such platforms, not any conduct by Palantir.

web.archive.org ↗

TIMELINE

1 ENTRY

[2026-08-30] · NEW RECEIPTS

13 new sources on file for Palantir.

Palantir's file gained 13 new sourced claims since its last review.

palantir.com ↗

TOOLS WE RECOMMEND

PLUS

RECEIPTS

13 ON FILE

COLLECTION

Palantir's Privacy and Governance Whitepaper (2024) states the company's founding position that institutional use of powerful information technologies should not come at the expense of individual privacy, and documents customer-facing governance capabilities across security, transparency, use limitation, data minimization, retention and deletion, and accountability in its Foundry, Gotham, and AIP platforms.

palantir.com ↗

COLLECTION

Palantir publicly disputes the data-broker characterization: its own explainer page is headed 'Palantir is not a "data broker" or "data aggregator."' and states that its business model is not based on monetizing personal data and that it does not collect, store, or sell personal data.

palantir.com ↗

COLLECTION

Palantir's Privacy Statement (last updated July 2025) discloses an 'Inferred Data' category generated by combining data Palantir collects with information obtained from third parties: preferences and likelihood of interest in Palantir products, built from contact, professional, transaction, technical, and communication data combined with data from partners and publicly available sources.

palantir.com ↗

[2026-04-02] · COLLECTION

Federal procurement records on USAspending.gov show U.S. Immigration and Customs Enforcement awarded Palantir Technologies Inc. a delivery order for 'Investigative Case Management (ICM) Operations and Maintenance (O&M) Support Services and Custom Enhancements,' with $150,703,824.61 obligated over a 2022-09-26 to 2026-05-04 period of performance -- Palantir operates and maintains the case-management system ICE uses to process investigative data about individuals.

api.usaspending.gov ↗

OWNERSHIP TRANSPARENCY

The UK Companies House register independently confirms Palantir Technologies UK, Ltd. -- the UK operating subsidiary named by NHS England as leader of the Federated Data Platform consortium -- as registered company number 07042994, a mandatory-filing registry record of the group's UK entity.

find-and-update.company-information.service.gov.uk ↗

[2026-02-17] · OWNERSHIP TRANSPARENCY

Palantir's Form 10-K for fiscal year 2025, filed with the SEC on 2026-02-17, identifies Palantir Technologies Inc. as a Delaware corporation with Class A common stock registered on the Nasdaq Stock Market, discloses share counts for all three classes of common stock (Class A, Class B, and Class F), and discloses that the multi-class structure, the Founder Voting Trust Agreement, and the Founder Voting Agreement concentrate voting power with founders Stephen Cohen, Alexander Karp, and Peter Thiel and their affiliates.

sec.gov ↗

SHARING

Palantir's Privacy Statement (last updated July 2025) states Palantir does not sell personal information 'in the traditional sense of the word for monetary consideration,' but that because US state privacy laws define sale and sharing broadly enough to include disclosures to certain advertising and marketing partners, Palantir provides an opt-out; its California disclosure table answers Yes to personal information sold and/or shared for cross-contextual behavioral advertising (IP address, social media handles, and other technical data, to advertising and marketing partners, advertising technology vendors, and social media platforms), and the statement separately discloses that Palantir may disclose pseudonymous data with advertising networks to show relevant adverts.

palantir.com ↗

SHARING

NHS England's own contract explainer for the Federated Data Platform, awarded in November 2023 to a consortium led by Palantir Technologies UK Limited, states contract-level limits on the supplier's use of NHS data: the only right Palantir has is to provide NHS FDP services to NHS users, and it cannot commercialise or market NHS data even on an anonymised basis or use NHS data to develop or derive new supplier products.

england.nhs.uk ↗

TRACK RECORD

Palantir publishes an ISO/IEC 27001:2013 Certificate of Registration issued by a named firm: Schellman & Company, LLC certifies that Palantir Technologies Inc. operates a conforming Information Security Management System covering the Palantir Cloud Platform, subject to satisfactory completion of annual surveillance audits by Schellman & Company, LLC -- a recurring, named-firm third-party audit artifact.

palantir.com ↗

[2018-03-28] · TRACK RECORD

In March 2018, in reporting on the Cambridge Analytica revelations, TechCrunch quoted Palantir's own statement acknowledging that an employee had, in 2013-2014, engaged in an entirely personal capacity with people associated with Cambridge Analytica and that the company was looking into it -- an older (outside the five-year covered period), limited-scope, company-acknowledged incident disclosed here per the published methodology.

techcrunch.com ↗

[2023-02-16] · TRACK RECORD

web.archive.org ↗

[2026-02-17] · TRACK RECORD

Palantir's Form 10-K for fiscal year 2025 states the company holds U.S. government security authorizations, listing 'our existing FedRAMP, IL2, IL4, IL5, and IL6 authorizations' among the certifications whose maintenance its government business depends on -- government-assessed security authorization artifacts disclosed in a mandatory SEC filing.

sec.gov ↗

TRACKING TECH

Palantir's Privacy Statement (last updated July 2025) discloses that Palantir uses contact, professional, communication, technical, transaction, training, and inferred data to target advertisements, including targeted advertising via third-party advertising platforms such as search engines, LinkedIn, and Twitter, and its cookie disclosures cover cookie IDs and mobile device IDs collected automatically when interacting with Palantir websites.

palantir.com ↗

LAST REVIEWED 2026-08-30 · METHODOLOGY v1.7