A parliamentary committee has labelled Britain's reliance on Palantir for sensitive defence data systems a strategic vulnerability that must be addressed within three years. The report, published by the Public Accounts Committee, stops short of naming specific contracts but points to decades of outsourcing that have left the Ministry of Defence dependent on a single US-based vendor for critical analytics infrastructure.
Committee Findings: A Decade of Growing Risk
The Public Accounts Committee spent eight months examining how the Ministry of Defence procures and manages its data analytics capabilities. What the committee found was a pattern of short-term contract renewals with Palantir that had accumulated over roughly ten years, creating what it described as a "deeply concerning" concentration of sensitive functions in foreign hands. The report stops well short of accusing Palantir of wrongdoing, but warns that sole-source arrangements for classified systems represent an unacceptable concentration of risk.
Committee chair Sir Geoffrey Clifton did not grant interviews, but the report's formal language leaves little room for ambiguity. "The department has allowed a situation to develop where a critical element of national security infrastructure depends on a single commercial provider," the document states. "This is not a theoretical vulnerability. It is a present and measurable weakness."
The Economics of Vendor Lock-In
Palantir's contracts with the Ministry of Defence have reportedly been renewed repeatedly without full competitive tender, partly because the systems Palantir built are deeply embedded in defence workflows. Migrating to an alternative platform would require retraining thousands of staff and rewriting data pipelines that have been in place since the mid-2010s. The committee estimates that a full transition could take up to five years and cost significantly more than continuing with the current arrangement, but argues that the strategic cost of inaction is higher.
The commercial logic is straightforward. Palantir's Gotham and Foundry platforms are specifically designed for defence and intelligence use, with security clearances that few domestic competitors can match. The UK has no equivalent commercial product at the same maturity level, which means any domestic alternative would require either building from scratch or buying a foreign competitor with different architecture. Neither option is cheap, and neither is quick.
Market Implications for Palantir
Palantir Technologies Inc, listed on the New York Stock Exchange, has built much of its European government business on the back of its UK Ministry of Defence relationship. The company reported approximately $2.6 billion in annual revenue for 2023, with government contracts representing the larger share of that figure. A systematic effort by the UK to reduce its Palantir dependency would send a signal to other government clients in Europe and the Five Eyes intelligence alliance.
Investors have treated Palantir's government business as relatively stable, precisely because switching costs are high. The parliamentary report challenges that assumption by creating a policy environment where continued sole-source contracting becomes politically untenable. If the Ministry of Defence follows the committee's recommendations, Palantir faces the prospect of a structured phase-out rather than automatic renewal.
What Domestic Alternatives Actually Exist
The committee does not propose nationalising Palantir's systems. Instead, it recommends a phased programme to develop or procure domestic capability, drawing on UK-based defence technology firms and, where necessary, other allied vendors. Several UK companies have expressed interest in competing for defence analytics contracts, but none currently offers a direct replacement for Palantir's full platform stack.
The government's own Defence Science and Technology Laboratory has been working on open-architecture analytics tools, but these remain years from production deployment. The report acknowledges this gap and suggests the Ministry of Defence should explore partnerships with NATO allies who have developed compatible systems, potentially including Canada, Australia, or Scandinavian partners with strong cyber security credentials.
The Geopolitical Dimension
Several committee members have raised concerns about the legal exposure created by using a US-headquartered company for UK defence data. The CLOUD Act allows US federal authorities to access data held by US companies regardless of where those servers are located, a provision that has alarmed intelligence and legal specialists. The report stops short of claiming that US authorities have accessed UK defence data improperly, but notes that the legal framework creates a structural risk that cannot be fully mitigated through contract clauses alone.
Palantir has denied that the CLOUD Act creates any meaningful risk to UK government clients, pointing to its robust data governance policies and separate infrastructure for government contracts. The company has also noted that it employs hundreds of UK staff and has invested in British data centres. These arguments have not fully satisfied the committee, which describes them as "useful but insufficient" given the scale of the dependency.
Government Response and Timeline
The Ministry of Defence has six months to respond formally to the committee's recommendations. Officials have acknowledged the concerns raised in the report but have not committed to a specific timeline for reducing Palantir dependency. A ministry spokesperson said the department "takes its obligations to protect sensitive defence data extremely seriously" and is "actively reviewing its commercial and technical arrangements."
The Treasury will play a decisive role in determining what happens next. A transition programme would require new funding at a time when the Ministry of Defence is already facing pressure on its equipment budget from inflation and supply chain disruptions. Whether the government is willing to fund a multi-year programme to reduce a technology dependency that, by most measures, is working adequately today remains an open question.
What Happens Next
The Public Accounts Committee will hold a follow-up hearing in the autumn session to examine the Ministry of Defence's formal response. If the department fails to present a credible transition plan, the committee has indicated it will escalate its concerns to the National Audit Office for a fuller investigation. The outcome of that process will determine whether Britain makes a deliberate shift away from Palantir or continues its current arrangement with stronger contractual safeguards. Either way, the political environment for US technology vendors serving UK defence has shifted, and Palantir's competitors will be watching closely.
