> I am under the impression that Palantir is typically deployed on-premise, or in a private cloud, where the customer can ensure that the data remains sovereign.

I'll believe that when I see a thorough audit report. But anyone competent to do that wouldn't be buying Palantir in the first place.