Chipotle is building a new food safety platform, and it chose a partner with a resume that reads like a spy novel. The fast-food chain is piloting a Palantir-built “Food Safety Risk Management Platform,” a scoring system that rates restaurants based on health inspections, pest incidents, and employee illness reports. The catch: Palantir was seeded in 2005 by In-Q-Tel, the CIA’s venture capital arm.
The partnership raises questions about how Chipotle handles employee health data. The company confirmed the project after Wired reported it, but declined to answer several key questions about the pilot. The CIA connection is not a secret. Palantir was founded in 2003 by Peter Thiel, and its first major check came in 2005.
The Platform and How It Works
The pilot is designed to provide “a more consistent and centralized view of food safety risk across our restaurants,” according to Laurie Schalow, Chipotle’s chief corporate affairs and food safety officer. She confirmed the project in response to Wired’s report.
Schalow did not say when the platform launches, how many stores are involved, whether consumer data is used, or whether customers will see the scores. She also did not address whether worker data is individually identifiable, anonymized, or how scores trigger action.
The platform aggregates health inspection results, pest incidents, and employee illness reports into a single risk score for each restaurant. The idea is simple: a centralized dashboard lets managers see where problems are brewing before they become outbreaks. Whether it works depends on how transparent Chipotle is about what goes into those scores.
Palantir’s Government Work
Palantir is not a stranger to government contracts. Nearly half of its revenue comes from federal work, including a $175 million Army contract for an AI targeting system. The company also helps ICE track and deport people through ImmigrationOS.
The CIA connection is the most visible part of Palantir’s history. In-Q-Tel was created specifically to fund startups useful to American spies. Palantir’s founding story puts the CIA at the center of its early days. Thiel co-founded the company, and the first major check came from In-Q-Tel in 2005.
The Privacy Question
The question is whether Palantir’s government work changes how Chipotle treats employee health data. Chipotle has not said whether worker data is individually identifiable, anonymized, or how scores trigger action. Those details matter because employee illness reports are personal information, and a company that shares data with government contractors has a higher bar to clear.
Palantir has had security incidents in the past. A 2021 glitch allowed unauthorized FBI staff to access a jailed Ethereum researcher’s private Twitter and Facebook data for over a year. The incident shows that even a company with deep government connections can have vulnerabilities. Whether Chipotle’s data is at risk is unknown.
Who Else Uses Palantir
Palantir is not new to food companies. The company works with Tyson, General Mills, and Wendy’s on food inventory tracking. That means the infrastructure already exists in the food industry, and Chipotle is simply adding a new layer on top of it.
The three companies use Palantir for inventory management, which is a different problem from food safety scoring. Inventory tracking is about stock levels and supply chains. Food safety scoring is about health inspections, pests, and illnesses. The distinction matters when evaluating whether the partnership is a natural fit.
What Chipotle Has Said
Schalow’s statement is the full extent of what Chipotle has publicly committed to. The company confirmed the pilot, described the purpose, and declined to answer several questions. That is a standard approach for a company rolling out a new system, but it leaves open the question of transparency.
The company has not said whether consumer data is used. It has not said whether customers will see scores. It has not said how many stores are involved. And it has not said whether worker data is individually identifiable or anonymized.
The Hard Numbers
The story rests on a few key figures:
- Nearly half of Palantir’s revenue comes from federal contracts, including a $175 million Army contract for an AI targeting system
- Nearly half of Palantir’s revenue comes from government work, including ICE’s ImmigrationOS system
- A 2021 glitch allowed unauthorized FBI staff to access a jailed Ethereum researcher’s private Twitter and Facebook data for over a year
- Palantir works with Tyson, General Mills, and Wendy’s on food inventory tracking
These figures are not speculative. They are reported facts from the companies named in the story.
What We Know and What We Don’t
Here is what is settled and what remains open:
- Chipotle is piloting a Palantir-built platform
- The platform scores restaurants on health inspections, pest incidents, and employee illness reports
- Palantir was seeded in 2005 by In-Q-Tel, the CIA’s venture capital arm
- Nearly half of Palantir’s revenue comes from federal contracts
- A 2021 glitch exposed a jailed researcher’s private data for over a year
- Palantir works with Tyson, General Mills, and Wendy’s on food inventory tracking
- Chipotle confirmed the project but declined to answer several questions
The open questions are the ones that matter most to workers and customers:
- When the platform launches
- How many stores are involved
- Whether consumer data is used
- Whether customers will see scores
- Whether worker data is individually identifiable or anonymized
- How scores trigger action
The Verdict on the Partnership
Chipotle has a choice to make. It can build a transparent food safety system that earns trust, or it can hide behind a pilot and let questions linger. The CIA connection does not automatically disqualify the partnership, but it raises the stakes.
Palantir has built systems for government agencies with serious privacy concerns. That history is part of the record, and Chipotle should address it head-on. The company should publish the criteria for its scores, explain how worker data is handled, and commit to regular audits.
The company has not done that yet. It has confirmed the pilot and quoted Schalow, but it has not answered the questions that matter to the people who eat at Chipotle. That is a gap, and it is one the company should close quickly.
The partnership is not dead. It is unproven. Chipotle has a chance to show that a CIA-backed company can handle food safety data responsibly. The next few months will tell whether the company chooses transparency or defensiveness.
The paper’s view is clear. Corporate-government partnerships should be scrutinized, especially when they involve sensitive data. Chipotle has a chance to set a standard for transparency in the food industry. The company should seize it.
Where the paper stands
The paper backs Chipotle’s stated desire for better food safety, while it is against the kind of data dragnet and vendor that would build it. The CIA connection alone does not disqualify the partnership, but it raises the stakes. When a company that handles employee health data partners with a firm whose first major funding came from In-Q-Tel, the bar for transparency should be higher.
The paper opposes mass tracking of ordinary people by governments or the companies that sell to them, and backs the citizens and local groups pushing back. Surveillance states and data dragnets are not inevitable; they are choices made by companies like Palantir and the government agencies that fund them.
Chipotle has confirmed the pilot and quoted Laurie Schalow, but it has not answered the questions that matter to workers and customers. Those questions include whether worker data is individually identifiable or anonymized, whether consumer data is used, and how scores trigger action. The company should publish the criteria for its scores, explain how worker data is handled, and commit to regular audits.
Source material: “Why Is Chipotle Now Working With the CIA-Funded Palantir?,” Decrypt.
Get the Notebook.
The day's best stories and every fresh verdict, in plain English, in your inbox by seven. One email a day, no more.