Every few months, the AI industry finds a new obsession. Last year it was prompt engineering. Then came agents. Then reasoning models. Today, much of the conversation still revolves around who has the smartest frontier model: OpenAI, Anthropic, Google, Meta, or whoever releases the next impressive benchmark.
Palantir’s report, Institutional Sovereignty in the Age of AI, deliberately moves away from that debate. Instead of asking which model is better, it asks a more strategic question: how can an organization ensure that AI compounds its own competitive advantage instead of somebody else’s?
That is the useful part of the report. It is also, clearly, a positioning document for Palantir’s own platform. But like many important technology papers, its value lies less in the product it promotes and more in the framework it gives leaders for thinking about the next phase of enterprise AI.
The central argument is simple. The companies that win in the AI era will not necessarily be the ones that get access to the smartest model first. They will be the institutions that retain ownership of their knowledge, preserve their ability to switch technologies, and build systems where every AI interaction strengthens the institution itself. Palantir calls this institutional sovereignty.
The conversation is focused on the wrong layer
Most enterprise AI discussions begin with model selection. Should we use GPT? Should we standardize on Claude? Should we deploy Gemini internally? Should we self-host Llama or Mistral? These are valid engineering questions, but they are not the most important strategic questions.
Models are improving at extraordinary speed. A capability advantage that lasts a few months is increasingly rare. Even the largest AI labs keep leapfrogging one another. A company that builds its entire AI strategy around one model provider may enjoy short-term convenience, but it also creates a dependency that can become expensive, risky and strategically limiting.
The Palantir report argues that organizations should focus on what remains uniquely theirs: their decisions, workflows, operating knowledge, permissions, context and institutional memory. Those assets compound over years. Model leadership may change every few quarters.
Sovereignty is about strategic freedom
Institutional sovereignty sounds abstract, but the concept is practical. It is the ability of an organization to own the value it creates and retain the freedom to use whichever technology best serves its interests. In the AI context, this means not allowing critical decisions about data, workflows, model usage and institutional knowledge to be quietly handed over to external providers.
Every enterprise AI decision creates dependency somewhere. If your workflows only work with one model provider, if switching providers requires rewriting your application, if your prompts and outputs become part of a third party’s telemetry, or if your most valuable operational knowledge slowly migrates into somebody else’s systems, your choices narrow over time. Palantir’s argument is that AI should expand institutional agency, not reduce it.
This is why the report treats sovereignty as an architectural question rather than a slogan. The issue is not whether enterprises should use third-party AI models. The report clearly assumes they will. The issue is whether those models sit inside an architecture controlled by the enterprise, or whether the enterprise gradually becomes dependent on systems it does not control.
Zero Data Retention is only the starting point
One of the report’s strongest recommendations is that enterprises should negotiate Zero Data Retention agreements with model providers. In simple terms, this means prompts, outputs and telemetry should not be retained beyond the processing required to generate a response. The goal is to ensure that customer data is not stored, not used for training and not routinely accessible to humans at the provider.
The report is careful to point out that ZDR is necessary but not sufficient. Contract wording can be porous. Metadata can still persist even when content does not. Safety classifiers, logs and derived signals may create exposure even if the original prompt is not stored. Enterprises therefore need to understand exactly what is covered by a ZDR commitment and what remains outside it.
The more interesting point is leverage. ZDR has to be negotiated, and negotiation requires credible alternatives. If an organization depends on one provider, its ability to demand stronger protections weakens. If it can move workloads between providers, it has negotiating power. Sovereignty, in this framing, is not just a security posture. It is also a commercial posture.
Model providers and enterprises do not have identical incentives
The report’s most provocative claim is that model providers have structural incentives that may not align with enterprise customers. Model companies benefit from greater usage, deeper integration, more dependence and higher switching costs. Enterprises benefit from preserving the value generated by their own data, workflows and decisions.
You do not have to accept Palantir’s strongest version of this argument to see the point. Technology platforms usually begin as enablers and later become points of dependency. Cloud platforms did this. App stores did this. Ad networks did this. AI model providers may follow a similar pattern.
That does not mean enterprises should avoid frontier models. It means they should use them with a clear-eyed understanding of incentives. A model provider’s obligation is to grow its platform. An enterprise’s obligation is to protect its strategic advantage. Those goals can overlap, but they are not the same thing.
Model liquidity becomes a strategic requirement
One of the most practical ideas in the report is model liquidity: the ability to switch between models and providers with minimal friction. This is not just about avoiding lock-in. Different models already perform better on different tasks. Costs vary. Latency varies. Refusal policies vary. Regional availability and regulatory constraints can change. New forms of intelligence may emerge that do not look like today’s language models.
A model-liquid architecture allows an enterprise to route workloads based on performance, cost, latency, compliance and sensitivity. A routine summarization task may not need the most expensive frontier model. A high-stakes reasoning task may justify it. A sensitive workflow may require a self-hosted open-weight model or dedicated compute. The point is to make these choices deliberately rather than accidentally.
This is where many current AI implementations are weak. They are model integrations, not AI architectures. The app calls one model. The prompts are optimized for that model. The evals, if they exist, are built around that model. The organization then discovers later that switching is painful. Palantir’s recommendation is to design for model agnosticism from the beginning.
The real asset is the control layer
The report divides enterprise AI into three broad layers. The compute layer is the infrastructure that runs models and software. The model layer is the intelligence itself. The control layer is where workflows, permissions, routing, auditability, ontology and agents are governed by the institution.
This may be the most important architectural idea in the report. Enterprises should not treat the model as the foundation of the system. The model should be a modular component inside a control layer that the enterprise owns. In that architecture, the organization can swap models, route work, enforce permissions, log actions and capture institutional knowledge without being tied to a single provider.
This also explains why Palantir emphasizes ontology so heavily. Traditional software stores records: customers, orders, invoices, employees, assets. An ontology models entities, relationships, actions, properties and permissions. It is an attempt to represent how the organization actually works rather than merely storing rows in disconnected tables.
For AI systems, this matters because useful reasoning depends on context. A model can answer questions better when it understands how objects relate to one another, which actions are permitted, which workflows matter and what institutional constraints apply. The ontology becomes a structured representation of the organization’s reality that remains independent of whichever model is currently doing inference.
Every AI interaction should compound institutional knowledge
Another core idea in the report is the flywheel. Usage creates signal. Signal gets structured. Structured knowledge improves the system. The improved system drives better usage. The loop repeats.
This is a useful way to evaluate enterprise AI deployments. If an AI system only produces answers, the value is transactional. If the system captures what happened, why it happened, which data was used, which actions followed and how the workflow improved, the value compounds.
The report distinguishes between the model flywheel and the context flywheel. The model flywheel improves model intelligence. The context flywheel improves the institution’s structured knowledge. Palantir’s position is that enterprises should own both where possible, but especially the context flywheel. Models will change. The organization’s accumulated context should not be trapped inside a single vendor relationship.
This has a direct implication for software leaders. AI should not merely automate isolated tasks. It should improve the organization’s ability to perform similar tasks in the future. Every deployment should be judged by whether it creates reusable institutional knowledge or simply consumes external intelligence.
Compute decisions should be based on assurance
The report also offers a practical hierarchy for compute decisions. The most sensitive workloads may require owned, isolated hardware. Sensitive workflows may justify attested compute and confidential computing. Day-to-day enterprise tasks may run on ZDR cloud. Public or low-risk work may be acceptable on standard third-party APIs.
The principle is straightforward: match the sensitivity of the workflow to the level of assurance required. Contractual assurance is useful, but structural assurance is stronger. If the workload involves classified information, core company secrets or highly sensitive data, the underlying compute environment matters.
Palantir also makes a case for adaptable hardware. AI architectures change. Hardware optimized too narrowly for today’s model architecture may age badly if the field shifts. This is a reminder that AI infrastructure is not just a procurement decision. It is a strategic infrastructure decision, especially for governments and highly regulated industries.
AI changes the meaning of permissions and auditability
In traditional enterprise software, permissions mostly govern access to data. AI agents require a broader model of control. They need limits on what data they can retrieve, which tools they can invoke, what actions they can suggest and what actions they can execute.
The report argues that permissions should reflect the real structure of the organization: roles, classifications, purposes and workflows. This is important because agents can otherwise end up with broader access than the employees they are meant to assist. In an AI-native enterprise system, access control is no longer a back-office compliance feature. It becomes part of the operating fabric.
Auditability becomes equally important. Enterprises should be able to reconstruct who initiated an AI request, what prompt was submitted, which model processed it, what data was accessed and what action resulted. This matters for compliance, debugging, operational trust and potential disputes about data use or intellectual property.
The point is not that logs solve everything. The report is clear that provider-side transparency is limited, especially when it comes to closed model weights and training pipelines. But without strong internal auditability, organizations cannot even begin to understand how AI is interacting with their knowledge layer.
Branching is how agents become safer and more useful
One of the more interesting ideas in the report borrows from software development: branching. Developers do not usually modify production directly. They branch, experiment, test and then merge or discard. Palantir argues that agentic systems should work similarly.
If agents act directly on production systems, enterprises face a bad tradeoff. Either they restrict agents so heavily that they become marginally useful, or they give agents broad authority and accept operational risk. Branching offers a third path. Agents can operate inside isolated branches, test workflow changes, simulate outcomes and only promote validated changes.
The report extends this idea beyond code. In principle, entire workflows or organizational states could be branched, compared and evaluated before being adopted. That is ambitious, but the underlying principle is sound: reversibility increases the surface area over which humans and agents can safely experiment.
The report is really about competitive advantage
It is tempting to read Institutional Sovereignty in the Age of AI as an infrastructure report. It is not. It is a report about competitive advantage in an era where intelligence itself is becoming easier to rent.
Models will continue improving. Inference will become cheaper. Hardware will become faster. Benchmarks will keep rising. Those trends benefit everyone. What remains differentiated is the knowledge generated through an organization’s own operations, decisions, workflows and constraints.
Palantir’s argument is that this knowledge should remain portable, governed and owned by the institution. It should not be trapped inside a single model provider, hidden inside unstructured prompts, or scattered across disconnected tools. It should compound inside the organization’s own control layer.
The report is not neutral. It reflects Palantir’s worldview and commercial interests. But the questions it raises are the right ones for executives to ask now: Who owns the knowledge created by our AI usage? Can we change model providers without rewriting our applications? Are our permissions and audit systems ready for agents? Which workloads require stronger compute assurance? Are we building a system that compounds our own advantage, or are we merely consuming someone else’s intelligence?
Most AI conversations today are about intelligence. Palantir’s report suggests that the more enduring question is ownership. As enterprises move from experimentation to large-scale AI deployment, that may turn out to be the more important conversation.
Get the report.
