Security, data and compliance in Palantir "Gotham" Integration & Governance

How Palantir "Gotham" Integration & Governance protects data and supports your compliance obligations.

Security controls

Single sign-on

Staff sign in through your identity provider, so your authentication policies apply.

Role-based access

Data engineers, stewards and classifiers see only the sources and held records their role and clearance allow.

Encryption and keys

Data in pipelines and holding areas is encrypted, with keys Moraph staff cannot use without explicit, time-bound authorization.

Complete audit trail

Every run, check result, decision and change is logged with the person and time.

Cleared US support staff

Tickets for federal and defense clients are handled only by US citizens with active clearances.

Your authority on classified networks

Pipelines on classified networks are built and run under your organization's authority and procedures; Moraph holds no accreditation of its own.

Requirements it supports

• Executive Order 13526, Classified National Security Information
• 32 CFR Part 2001, Classified National Security Information (ISOO implementing directive)
• 32 CFR Part 2002, Controlled Unclassified Information
• DoD Manual 5200.01, Volume 2, Marking of Information
• Executive Order 12333, United States Intelligence Activities
• Privacy Act of 1974 (5 U.S.C. 552a)

The product supports these requirements; meeting them remains your organization's responsibility.

Where it runs

• Alongside your Gotham deployment: Pipelines and governance tools run in the same environment as your Gotham deployment, on infrastructure your organization authorizes.
• US-hosted service tooling: Where unclassified service tooling is used, it is hosted in Moraph's United States region only.
• Classified networks: Where pipelines run on classified networks, Moraph's cleared staff work under your organization's authority and procedures, scoped in the proposal.

Limitations

• Moraph is not Palantir. Palantir owns and supports Gotham, and its own service commitments, roadmap and outages apply.
• Licenses for Gotham are subject to Palantir's terms.
• Moraph does not classify information. Marking checks find missing or inconsistent markings; classification decisions are made by your trained classifiers.
• Checks catch the problems their rules describe. They cannot make a source accurate, and data that is wrong but well formed can still pass.
• Moraph does not decide who may see data. Access controls in Gotham are configured as your organization approves.
• The service does not change Gotham itself or its analytic features; it governs the data that goes into it.
• Authority to collect, retain and use each source, including any information about US persons, is your organization's responsibility and is confirmed before a source is onboarded.
• Moraph does not hold accreditation for classified environments; operations there take place under your organization's authority.