Robots Atlas>ROBOTS ATLAS
Artificial Intelligence

Palantir says its NATO Maven system has no kill switch

Sir Robot28 October 2026 · 6 min read
Palantir says its NATO Maven system has no kill switch

Louis Mosley, Palantir's executive vice president for the UK and Europe, told reporters in Brussels that the Maven Smart System used by NATO's military headquarters has no kill switch, and that neither Palantir nor the US government can shut it down remotely. The assurance came a week after Kyiv accused Washington of deliberately restricting Starshield, the military satellite link Ukrainian forces rely on at the front. What is at stake is not a single product, but how far European armed forces depend on American software.

Key takeaways

  • "There are no kill switches" — Louis Mosley, in a Reuters interview published on 22 October 2026
  • The Maven Smart System runs at Allied Command Operations at SHAPE and reached full technical operational capability in June 2026
  • Palantir won a €480 million NATO tender for Maven in 2025
  • On 13 October Kyiv accused Washington of deliberately slowing Starshield and Starlink
  • Germany and France have not fielded Maven nationally, and Paris is building its own system, Arcadia

Imagine the following situation

A frontline unit has a satellite terminal mounted on a moving vehicle. The link runs over Starshield, the military version of Starlink. An operator uses that link to launch an interceptor drone against incoming Russian attack drones.

On 14 October Ukrainian officials reported that SpaceX had, without warning, limited such terminals in motion to roughly 100 miles per hour, about 160 km/h. Interception missions were disrupted.

The problem was not a malfunction. The problem was that the restriction came from someone outside the chain of command that depended on the link.

That is exactly the question European militaries put to Palantir about its NATO software: who, from the outside, can reach into a system and constrain it.

What exactly did Palantir say?

Mosley spoke to Reuters in Brussels. He first conceded that the Starlink affair is "extremely concerning", then drew a line between that case and his own product.

There are no kill switches. There's no ability for Palantir or the US government to reach in and switch it off.

Louis Mosley, executive vice president for the UK and Europe at Palantir.

The argument rests on a delivery model rather than on goodwill. Maven is software a customer buys and runs on its own side, which, according to Mosley, leaves the buyer in full operational control. Starshield is a service SpaceX maintains on its own infrastructure. Elon Musk himself wrote on X that "Starshield systems are owned and controlled by the US government", with speed and usage limits set by the US military.

Mosley added that whether Palantir staff help run the system is the customer's decision, and that anyone cleared to do so would be a security-cleared national of the country involved. The platform, he said, can operate without the company, as it already does for other military and commercial customers.

Starting point
A military needs a digital capability
Who runs and controls the system?
SOFTWARE BOUGHT OUTRIGHT
Maven Smart SystemAllow
PROVIDER-RUN SERVICE
StarshieldDeny
Who can constrain it from outside?

This is a simplified contrast between two delivery models, not a description of Maven's architecture, whose details have not been published.

What do these names mean?

A handful of proper nouns carry this entire story. Without them, Palantir's assurance reads like a slogan.

  • Maven Smart System (MSS) — Palantir software that pulls data from satellites, radar and drones and merges it into a single battlefield picture to speed up command decisions. The equivalent of an analytics dashboard that shows targets instead of sales charts.
  • Starshield — the military version of the Starlink satellite network, operated by SpaceX. Not a product bought outright, but a service running on the provider's side.
  • SHAPE — Supreme Headquarters Allied Powers Europe, where Maven was deployed.
  • Full technical operational capability — a status confirming the system works correctly in its target environment. Not the same as "used by every ally".
  • Arcadia — a French defence data processing system, built as an alternative to Maven.

Those five names resolve into one distinction: some systems an army runs itself, and some it merely rents.

Why is a vendor's assurance not enough?

Mosley's assurance covers one narrow thing — remote shutdown. Dependency, however, has more contact surfaces: updates, technical support, the people who operate the system, and access to data.

The German objection was never about a kill switch. Vice Admiral Thomas Daum, head of Germany's cyber and information domain command, framed it differently: "Allowing industry personnel access to national German datasets is out of the question." That is an objection about data access, not about the ability to cut service. Mosley's own admission that staffing is left to the customer confirms that the package contains more than lines of code.

The second problem is accountability. The Starshield case showed that when a service degrades, it can be unclear who actually decided. The Wall Street Journal reported that Musk approved the slowdown after speaking with White House officials. Musk pointed to the US military. Donald Trump responded: "it wasn't me, and I don't think it was Elon."

A guarantee is worth as much as the ability to check who is entitled to act — and to prove afterwards who did.

Is it already working?

Maven is live, but the no-kill-switch assurance is verbal. The system was deployed at Allied Command Operations at SHAPE and reached full technical operational capability in June 2026, following the €480 million tender Palantir won in 2025.

The assurance itself, though, is a statement given in an interview rather than a published audit. Nothing in the reporting on that interview indicates accompanying technical documentation that would allow independent verification that no remote block is possible.

Maven is also not a NATO-wide standard. At national level, Germany and France have opted out.

Why does it matter?

A vendor's declaration becomes a procurement argument in defence precisely because no agreed way to verify it exists. Europe is buying capabilities it cannot independently audit, while lacking ready substitutes. The Starshield dispute showed that the risk is not only being cut off, but the ambiguity over who controls a system at any given moment.

What next?

  • France is developing Arcadia as an alternative, and POLITICO reports German concerns that a French rival to Palantir would create a new dependency, this time inside Europe
  • In a separate Bloomberg interview, Mosley said Europe "is going to have to accept some dependency" on US technology firms
  • Responsibility for the Starshield restriction remains unresolved: the WSJ points to Musk after a White House conversation, Musk points to the US military, Trump denies it

Sources

Share this article