What is the first thing to do about Palantir AIP this week?

Register each agent with its action set and owner.

Every agent · Data agents · Palantir

Palantir AIP

Q: What can Palantir AIP act on?

Executes with approval. Agents acting on operational data through defined actions inside the platform.

Q: What does Palantir AIP reach by default?

The ontology and the actions defined on it.

Q: Is a human in the loop with Palantir AIP, and does data leave the tenant?

Human in the loop by default: configurable. Data leaves the tenant by default: no. It acts, but a person approves each action by default; the risk moves to whoever relaxes that setting. Data stays inside your tenant by default.

Agents acting on operational data through defined actions inside the platform.

executes with approval

acts on

configurable

human in the loop by default

data leaves the tenant by default

The ontology and the actions defined on it

reaches by default

What that means for the register

It acts, but a person approves each action by default; the risk moves to whoever relaxes that setting. Data stays inside your tenant by default. Pasted with only its name it lands as control until an owner is named.

This week

What holding it is evidence for

Requirement text and artefacts from a human-verified corpus licensed to Agent Register.

Broad system reach or write access to a system of record ISO 42001 A.4.4 · ISO 42001 A.4.5 · ISO 42001 A.6.2.5 · ISO 42001 A.5.2 · EU AI Act Art.15 · EU AI Act Art.9

ISO 42001 A.4.4 Tooling resources

The organization shall document information about the tooling resources utilized for the AI system.

Evidence an auditor accepts: Tooling inventory; Tool risk assessments; Development frameworks, libraries, MLOps platforms

ISO 42001 A.4.5 System and computing resources

The organization shall document information about the system and computing resources utilized.

Evidence an auditor accepts: Infrastructure inventory; Capacity plans; Compute (CPU/GPU), storage, network resources

ISO 42001 A.6.2.5 AI system deployment

The organization shall document a deployment plan and ensure requirements are met before deployment.

Evidence an auditor accepts: Deployment plans; Go-live checklists; Approval records

ISO 42001 A.5.2 AI system impact assessment process

The organization shall establish a process to assess the potential consequences of the AI system for individuals or groups and societies.

Evidence an auditor accepts: AI impact assessment procedure; Assessment template; Methodology covering individuals, groups, societies

EU AI Act Art.15 Accuracy, robustness and cybersecurity

High-risk AI systems shall be designed and developed in such a way that they achieve an appropriate level of accuracy, robustness, and cybersecurity, and shall perform consistently in those respects throughout their lifecycle. Resilience to errors, faults and inconsistencies; protection against atte...

Evidence an auditor accepts: Accuracy/robustness measurements relevant to the intended purpose; Adversarial/data-poisoning threat modelling and mitigation; Cybersecurity controls aligned with state-of-the-art

EU AI Act Art.9 Risk management system

Providers shall establish, implement, document and maintain a risk management system as a continuous iterative process planned and run throughout the entire lifecycle of a high-risk AI system, including identification and analysis of known and reasonably foreseeable risks, estimation/evaluation of r...

Evidence an auditor accepts: Risk management system documentation; Lifecycle risk analysis records; Post-deployment risk monitoring

Do this for every tool your teams use

Paste the list and get this classification for every entry at once, with the owner column, the findings per department, and the controls the register is evidence for. Ten entries free, no account.

Build my agent register

Gemini in BigQuery · Alteryx and analytics-suite AI