Your burrito now comes with a risk score. Chipotle Mexican Grill has confirmed it is piloting a food safety risk management platform built on Palantir Foundry, the enterprise data system developed by a company better known for powering US immigration enforcement and intelligence operations. The partnership follows a bruising stretch for food safety in the US, including Chipotle’s own jalapeño recall linked to supplier Taylor Farms over salmonella concerns. The rise of such tools reflects a broader pattern of surveillance app infrastructure moving into consumer-facing contexts.
What the Platform Actually Does
Palantir Foundry ingests health inspection scores, pest incidents, and employee illness data to generate a risk score for each restaurant location.
Chipotle’s chief corporate affairs and food safety officer, Laurie Schalow, confirmed the project in a statement: “Chipotle is piloting a new Food Safety Risk Management Platform designed to provide a more consistent and centralized view of food safety risk across our restaurants.” The company has not disclosed how many locations are involved, when the pilot began, or whether a chain-wide rollout is planned.
Foundry works by mapping relationships between entities such as suppliers, ingredients, restaurant locations, and health outcomes into a single operational model. The goal, as described in coverage of the partnership, is to shift food safety monitoring from reactive to predictive.
Worker health data is part of that model. Employee illness reports feed directly into the platform’s risk calculations, and Chipotle has provided no public detail on how that information is governed, how long it is retained, or who can access it.
Who Palantir Is, and Why That Matters Here
The company scoring risk at your local Chipotle also runs data infrastructure for ICE and DHS.
Palantir Technologies is a data analytics firm co-founded by Peter Thiel, built over two decades into one of the primary data infrastructure providers for US defense, intelligence, and immigration enforcement agencies. Between 2011 and 2026, ICE awarded Palantir contracts worth over $287 million, according to documentation from the American Friends Service Committee. A separate Department of Homeland Security blanket purchase agreement reached up to $1 billion in 2026.
Its systems power ICE’s Investigative Case Management tools. Those tools pull together immigration history, biometrics, location data, financial records, license plate data, and family relationships into integrated profiles.
ICE has used these tools during workplace raids, deportations, and operations that resulted in family separations.
Palantir’s commercial footprint has expanded considerably in parallel. Nearly half of its revenue now comes from US corporations, including General Mills, Tyson, and Wendy’s.
Chipotle is the newest addition to that list. Civil liberties advocates argue that embedding Palantir further into consumer-facing brands normalizes a data infrastructure designed for large-scale surveillance, one technically capable of being repurposed well beyond its stated function. Others point to documented cases of apps secretly tracking users as evidence of how easily stated purposes can drift.
That is their concern, not a documented outcome. Chipotle and Palantir have not responded to it publicly in any documented detail.
Supporters of the partnership note that Palantir’s tools are built for exactly this kind of complexity. Tracking food safety across thousands of locations and hundreds of suppliers is a legitimate use case for enterprise analytics.
What Comes Next
The outcome of this pilot could shape how surveillance-linked data platforms move deeper into everyday consumer industries.
If the Chipotle pilot succeeds, similar platforms could expand across food retail, grocery chains, and logistics operations. Federal AI oversight remains minimal, offering few guardrails on how commercial operators deploy or extend these systems. The relevant question is not whether Palantir’s technology can produce a useful food safety score. It is what else the platform can eventually be asked to measure, and for whom. Civic pushback against surveillance in other consumer contexts suggests public tolerance for such expansion is not guaranteed.
