Who holds which certification

64 vendors · 63 certifications

Palantir compliance, certifications and attestations

Data platforms · 22 certifications held · 2 from public registries · read Nov 4, 2026

SOC reports3
SOC 1

An auditor's report on controls relevant to customers' financial reporting.

Type IIVendor page

read Sep 24, 2026
SOC 2

An auditor's report on security, availability, confidentiality, processing integrity and privacy controls.

Type IIVendor page

read Sep 24, 2026
SOC 3

A public summary of a SOC 2 examination, readable without an NDA.

HeldVendor page

read Sep 24, 2026
ISO standards4
ISO/IEC 27001

A certified information security management system.

HeldVendor page

read Sep 24, 2026
ISO/IEC 27017

Cloud-specific security controls on top of ISO 27001.

HeldVendor page

read Sep 24, 2026
ISO/IEC 27018

Protection of personal data in public clouds acting as processors.

HeldVendor page

read Sep 24, 2026
ISO 9001

A certified quality management system.

HeldVendor page

read Sep 24, 2026
US government9
FedRAMP

Authorization to sell a cloud service to US federal agencies.

HighFedRAMP MarketplacePalantir Federal Cloud Service – Supporting Services (PFCS-SS); Palantir Federal Cloud Service

read Nov 4, 2026
DoD Impact Level

A provisional authorization for Department of Defense data at an impact level.

IL6Vendor page

read Sep 24, 2026
GovRAMP (StateRAMP)

A security verification for US state and local government cloud buyers.

LapsedGovRAMP product listPalantir Federal Cloud Service (Pending, High)

read Oct 14, 2026
CMMC 2.0

Cybersecurity Maturity Model Certification for the defense supply chain.

HeldUnverifiedVendor page

read Sep 24, 2026
NIST SP 800-171

Controls for protecting controlled unclassified information in non-federal systems.

HeldVendor page

read Sep 24, 2026
NIST SP 800-53

The federal security and privacy control catalog (the basis of FedRAMP).

HeldVendor page

read Sep 24, 2026
ITAR

Support for export-controlled defense data under ITAR.

HeldUnverifiedVendor page

read Sep 24, 2026
CJIS

Support for the FBI CJIS Security Policy for criminal justice data.

HeldVendor page

read Sep 24, 2026
Section 508 / VPAT

Accessibility conformance reports (VPAT) for US federal buyers.

HeldVendor page

read Sep 24, 2026
Health2
HIPAA (BAA)

The vendor supports HIPAA-regulated health data and signs a Business Associate Agreement.

HeldVendor page

read Sep 24, 2026
NHS DSPT (UK)

The NHS Data Security and Protection Toolkit self-assessment for suppliers.

HeldVendor page

read Sep 24, 2026
Life sciences (GxP)1
GxP qualification

Support for regulated life-sciences workloads under GMP, GCP and GLP.

HeldUnverifiedVendor page

read Sep 24, 2026
Privacy and cloud1
CSA STAR

A listing in the Cloud Security Alliance STAR Registry.

Level 1CSA STAR RegistryCAIQ

read Oct 21, 2026
Regional programs3
Cyber Essentials (UK)

The UK government-backed baseline security certification.

PlusVendor page

read Sep 24, 2026
ENS (Spain)

Certification under Spain's Esquema Nacional de Seguridad.

HeldVendor page

read Sep 24, 2026
TISAX

An assessment shared through the German automotive industry's exchange.

HeldVendor page

read Sep 24, 2026

History

About Palantir

Foundry, Gotham and the AI Platform (AIP).

Status
Public
Founded
2003

No public evidence found for

ISO standards
ISO 27701ISO 22301ISO 20000ISO 27799
AI governance
ISO 42001STAR AI
US government
TX-RAMPFIPS 140IRS 1075
Finance
PCI DSSPCI 3DSSWIFT17a-4GLBASOXFFIECMAS TRMAPRAOSFIFISCDORA
Health
HITRUSTHDSPHIPA
Life sciences (GxP)
Part 11Annex 11CSV
Privacy and cloud
DPFCBPREU CoC
Regional programs
G-CloudC5SecNumIRAPISMAPMTCSK-ISMS
Education
FERPAHECVATCOPPA

Compare with Snowflake, MongoDB, Databricks, Splunk, Elastic

Company profile
Across GlyphawardsawardsblogscalendarEarningskeynoteslawsuitsleadersmarketplacespartnershipsPaydaysquadrantquotesReleasesrepossalariesslassocialsstandardsstoriesConferencestermstitlestrending