‘Never Speak About It’: Leaked Audit Reveals the UN’s Palantir Problem

The World Food Programme (WFP), a leading UN humanitarian aid agency, is preparing to extend its five-year contract with US-based data software firm Palantir despite significant internal and external concerns over data privacy and ethical implications. A leaked internal audit from August 2025, reviewed by PassBlue and FRANCE 24, highlights the WFP's ongoing struggle to balance operational efficiency with the risks associated with its collaboration with Palantir. The audit notes inadequate risk management and a lack of proper guidelines on data privacy within the WFP’s partnership with the tech giant. The WFP maintains one of the largest biometric databases globally, housing information on millions of people, including recipients of humanitarian aid. To streamline supply-chain logistics and improve data analysis, Palantir developed the Digital Operations and Transformation System (DOTS). This system enables the WFP to track aid distribution more effectively, though some employees worry about the potential misuse of beneficiary data. Concerns have grown following a cyberattack in May that compromised sensitive information on thousands of aid recipients in Gaza. While the WFP stated the breach affected only its Self-Registration Application for Palestine, which is separate from Palantir’s systems, the incident has intensified scrutiny over data security practices. Palantir, founded in 2003 and named after the all-seeing eye in J.R.R. Tolkien’s Lord of the Rings, was initially funded by the US intelligence community. Over time, it has expanded into AI-driven data integration tools widely used by the US military and surveillance apparatus. These capabilities have drawn criticism, particularly due to reports of Palantir’s software being employed in immigration enforcement and military operations in the Middle East, notably in Iran and Gaza. Some WFP staff have voiced unease over the possibility that data collected through their programs might be used to train Palantir’s algorithms, potentially contributing to harmful applications. Internal divisions within the WFP reflect broader tensions around the ethical use of AI and data analytics in humanitarian work. On one side are officials advocating for stricter oversight and transparency, emphasizing the need to align with international human rights standards. On the other are proponents of rapid technological advancement, arguing that such tools are essential for improving efficiency and response times during crises. This ideological rift mirrors wider debates within the UN and global civil society about the role of private sector partnerships in public service delivery. An independent report by researchers Tina Indrani Mason and Rose Worden for the “Tech for Bad” initiative further criticizes the WFP’s reliance on Palantir. Entitled “Palantir and the World Food Programme: The egregious partnership at the heart of the world’s largest humanitarian supply chain,” the report labels the collaboration a “clear conflict of interest” and a “grave abdication of ethical responsibility.” The authors argue that the WFP’s continued investment in DOTS contradicts its commitment to protecting the privacy and dignity of aid recipients. The leaked audit from the WFP’s Office of the Inspector General underscores these concerns, identifying “inadequate risk management” and a lack of “proper guidelines and policy” on data privacy. The report classifies the issue as “high priority,” indicating that the WFP must address these shortcomings before proceeding with the contract renewal. Despite this, a WFP spokesperson confirmed that the agency is moving forward with the extension, citing the benefits of improved logistical coordination and data processing. As the WFP prepares to finalize its decision, the debate over the ethical implications of its partnership with Palantir continues to gain traction. With increasing calls for greater accountability and transparency in the use of AI and big data in humanitarian contexts, the outcome of this contract renewal will likely shape future discussions on how global organizations navigate the complexities of technology in crisis response.