NHS England DIGITAL

Target: NHS England Evidence cut-off: 26 October 2026 Domain: Digital technology, enterprise systems, cloud infrastructure, surveillance and artificial intelligence

Enterprise Technology Stack & Vendor Relationships

Organisation and procurement boundary

NHS England is a statutory public body responsible for national NHS functions, with its operations and governance documented in its 2025–26 annual report published on 3 September 2026.¹

In September 2026, the government confirmed that its Health Bill proposals included abolishing NHS England and transferring its functions into the Department of Health and Social Care, subject to parliamentary approval.²

The government’s October 2026 explanatory material describes the proposed redistribution of national healthcare responsibilities but does not establish that the transfer had been completed by the audit date.³

Federated Data Platform

NHS Digital’s service description, updated 20 August 2026, confirms that NHS England’s Federated Data Platform has been operational since 2024 and combines data integration, analytical capabilities, operational applications and cloud data warehousing.⁴

The national platform provides a separate instance for NHS England, while NHS trusts and integrated care boards control their respective organisational instances.⁴

The June 2026 House of Commons Science, Innovation and Technology Committee report identifies Palantir as the leader of the consortium awarded the FDP contract in November 2023 and describes the contract as worth approximately £330 million over a maximum seven-year period.⁵

The committee identifies an initial contractual commitment ending on 15 February 2027, with the longer contract period dependent on subsequent decisions.⁵

The National Data Guardian’s 2023–24 report identifies Accenture, PricewaterhouseCoopers, Carnall Farrar and NECS as consortium participants alongside Palantir.⁶

The same report records that NHS England awarded a separate contract for privacy-enhancing technology to IQVIA in November 2023.⁶

The FDP programme is national infrastructure intended for use across NHS providers and integrated care boards, rather than a peripheral departmental software subscription.⁴

NHS Digital confirms that NHS England funds FDP licences and support for NHS trusts and integrated care boards and that the national service remained live in August 2026.⁴

Predecessor systems

The National Data Guardian’s 2023–24 report confirms that the FDP programme followed earlier NHS data initiatives developed during the COVID-19 pandemic.⁶

The National Data Guardian’s description of the earlier Palantir relationship and the subsequent FDP procurement establishes a continuing commercial relationship across successive NHS data programmes, although contractual terms and platform implementations differed.⁶

Israeli-origin enterprise vendors

No public evidence identified establishing an NHS England-specific licensing or deployment relationship with Check Point, Wiz, SentinelOne, CyberArk, NICE, Verint, Claroty or Palo Alto Networks in the examined national FDP procurement and supplier disclosures.^{4, 6}

The official NHS cybersecurity supplier charter expressly states that inclusion on its supplier list does not constitute procurement approval, contractual commitment or endorsement; listing alone therefore cannot verify an NHS England purchase.⁷

Third-party enterprise software

A UK Digital Marketplace listing describes Quantium Health software designed to operate within individual NHS FDP environments and identifies the underlying FDP infrastructure as separately funded.⁸

The listing is evidence of commercial compatibility and an available supplier offering; no public evidence identified in that disclosure establishing that NHS England itself purchased the product or that it introduced Israeli-origin technology.⁸

Procurement scrutiny

The National Data Guardian reported that the November 2023 announcement of Palantir’s appointment prompted approximately 20,000 national data opt-outs and further public engagement concerning data protection and supplier governance.⁶

A February 2026 Leicester health scrutiny proceeding records public questions about FDP adoption and reproduces NHS England’s response concerning procurement safeguards, data governance and lawful supplier selection.⁹

The precise date of the NHS Federated Data Platform’s initial contractual break opportunity remains inconsistent across published official explanations. In an answer dated 20 May 2026, Health Minister Preet Kaur Gill stated that the initial three-year term ends in March 2027, with options to extend by two years and then two successive one-year periods. However, parliamentary question 123746, answered on 16 April 2026, explicitly referred to 15 February 2027 as the initial contractual ending date; the minister’s response confirmed the break-clause structure without correcting that date. The March explanation supports Political’s broader description of spring 2027 but qualifies this audit’s statements that the initial commitment ends on 15 February 2027. The published contract could not be independently retrieved to resolve the discrepancy conclusively.^{10, 11}

Surveillance, Biometrics & Retail Technology

Facial recognition and biometric identification

No public evidence identified of NHS England procuring or deploying Israeli-origin facial recognition, gait analysis or biometric identification technology from AnyVision/Oosto, BriefCam, Trigo, Trax or comparable named suppliers in the reviewed FDP service and procurement records.^{4, 6}

Predictive analytics and monitoring

The NHS FDP provides analytical tools for operational decision-making, including waiting-list management, discharge planning and the identification of service-delivery patterns.⁴

Those documented healthcare applications do not establish the deployment of Israeli-origin predictive policing, sentiment monitoring or population-surveillance products by NHS England.^{4, 8}

No public evidence identified of an NHS England contract for Israeli-origin predictive policing, intelligence monitoring or workforce-surveillance software in the examined national digital platform records.^{4, 6}

Third-party surveillance technology

The Palantir group supplies data-processing technologies to other government customers, and Amnesty International UK reports that its technology is used by Israeli military organisations.¹²

That group-level relationship does not demonstrate that the NHS FDP is configured for military surveillance, that Israeli authorities access NHS data, or that NHS England commissioned surveillance of Palestinians.^{4, 12}

No public evidence identified establishing that an Israeli surveillance vendor’s biometric products are deployed within NHS England through FDP consortium members or other named national systems integrators.^{4, 6}

Patient data and access controls

The National Data Guardian’s 2023–24 report states that the FDP supplier does not control NHS data and is contractually restricted from accessing, using or sharing it for purposes outside the authorised service.⁶

The National Data Guardian also records that expansion beyond the specified FDP use cases would require further patient and public engagement.⁶

These reported contractual restrictions describe the NHS governance arrangements; they do not constitute independent technical verification of every supplier access pathway.⁶

Reporting published on 5 August 2026 confirmed that three Palantir engineers held administrative-level access to NHS England’s National Data Integration Tenant (NDIT), an environment containing patient information before pseudonymisation. A further 33 engineers from various suppliers held more limited, project-specific access. The government’s response published on 22 October 2026 additionally identifies 12 of those 33 engineers as Palantir employees, with the remaining 21 employed by Mastek (eight), Capgemini (five), IBM (four), Kainos (three) and Qualitest (one), as at 15 June 2026. The government specifies that administrative access supports platform configuration, security and maintenance, while project-specific access permits assigned development and assurance activities. The three-person administrative group is additional to the 33-person project-specific group. The supplier breakdown was independently located in the published parliamentary response, although the accessible corroborating healthcare report did not reproduce those individual employer counts.¹³

The primary parliamentary source for the supplier-access breakdown is the House of Commons Science and Technology Committee’s Third Special Report, HC 651, Rewiring the state: Delivering digital government: Government response, published on 22 October 2026. Under the government’s response to Recommendation 17, concerning Palantir’s access to patient data, the Department of Health and Social Care identifies three Palantir engineers with administrative-level access to NHS England’s National Data Integration Tenant (NDIT). It separately identifies 33 engineers with more restricted project-specific access as at 15 June 2026: 12 employed by Palantir, eight by Mastek, five by Capgemini, four by IBM, three by Kainos and one by Qualitest. The response describes these permissions as operationally justified, time-limited and subject to NHS England’s instructions. This confirms the supplier counts and distinction between administrative and project-specific access already stated in the audit. It also establishes that 22 October 2026 was the parliamentary report’s publication date, whereas 15 June 2026 was the workforce snapshot date. Existing End Note 29, updated 27 September 2026, cannot substantiate information first published in HC 651 on 22 October; the parliamentary publication is the appropriate primary attribution. The report’s publication metadata was independently verified through Parliament’s public publications catalogue.¹⁴

Cloud Infrastructure, Data Residency & Sovereign Cloud Participation

Cloud architecture

NHS Digital describes the FDP as a national operational data infrastructure containing separate organisational instances, integrated information services and cloud-based data warehousing.⁴

The Department of Health and Social Care’s secure data environment policy describes the FDP as an infrastructure programme intended to connect NHS information while maintaining confidentiality and appropriate access controls.¹⁵

The FDP’s documented purpose includes NHS operational planning, patient-flow management and the use of existing healthcare information to improve service coordination.⁴

Data controllers and processors

NHS Digital states that NHS England controls the national FDP instance and individual NHS trusts and integrated care boards retain responsibility for their own instances.⁴

The National Data Guardian describes contractual limits on Palantir’s ability to control, exploit or independently share information processed within the platform.⁶

The National Data Guardian’s October 2026 advice specifically identifies data sovereignty, interoperability, supplier dependence and professional trust as matters requiring consideration when evaluating the FDP’s future.¹⁶

Israeli data residency

No public evidence identified establishing that NHS England operates, leases or co-locates national FDP infrastructure in Israel, or that identifiable NHS FDP patient data is processed in Israeli data centres.^{4, 15}

No public evidence identified establishing that Israeli government agencies have contractual or technical access to the NHS FDP through the NHS England-Palantir agreement.^{6, 15}

Project Nimbus

No public evidence identified of NHS England participating in Project Nimbus or supplying cloud services to Israeli government institutions through that programme in the reviewed NHS FDP and UK-Israel government cooperation documents.^{4, 17}

Israeli sovereign cloud services

The UK-Israel 2030 roadmap, published in 2023, identifies health technology, telemedicine and digital innovation as potential areas of bilateral cooperation.¹⁷

The September 2023 UK-Israel science and technology memorandum includes healthcare technologies and artificial intelligence among its research priorities.¹⁸

That memorandum identifies the UK’s Department for Science, Innovation and Technology and Israel’s Ministry of Innovation, Science and Technology as participating government authorities; it does not identify NHS England as a supplier to Israeli sovereign cloud or military infrastructure programmes.¹⁸

No public evidence identified of NHS England marketing or contracting digital sovereignty, cloud-resilience or hosting services to Israeli state bodies.^{17, 18}

Supplier dependence and resilience

The House of Commons Science, Innovation and Technology Committee’s June 2026 report discusses supplier dependence and recommends reconsideration of the Palantir arrangement.⁵

The National Data Guardian’s October 2026 correspondence calls for attention to interoperability, open standards, data sovereignty and the risks of vendor lock-in when future FDP decisions are made.¹⁶

Defence, Intelligence & Security Sector Technology Relationships

Direct NHS England military relationships

No public evidence identified of contracts between NHS England and the Israeli Ministry of Defence, Israel Defence Forces or Israeli intelligence organisations for military information technology, surveillance or operational support.^{1, 5}

Shared commercial supplier: Palantir

NHS England’s November 2023 FDP award established a substantial commercial relationship with the Palantir group through its UK contracting entity.⁵

Amnesty International UK reports that Palantir entered a strategic technology partnership with Israeli military organisations in January 2024 to support war-related missions.¹²

Amnesty identifies the Israeli defence relationship as a central concern in its opposition to Palantir’s continuing involvement in NHS data infrastructure.¹⁹

The NHS FDP contract and Palantir’s reported Israeli military partnership concern different customers, purposes and systems; the available evidence does not establish that NHS England supplied technology directly to the Israeli military.^{5, 12}

Dual-use software

Palantir’s group-level involvement in both civilian healthcare data infrastructure and military technology is documented through the parliamentary account of the NHS contract and Amnesty’s account of its Israeli defence relationships.^{5, 12}

The available sources do not identify the particular Palantir products or modules supplied to Israel under the January 2024 arrangement sufficiently to establish whether their primary designed output is general data analysis or purpose-built military targeting.¹²

No public evidence identified that NHS England funded, developed or transferred any purpose-built Israeli military targeting or weapons system; such systems would require separate examination under Military if independently evidenced.^{5, 12}

Offensive cyber capabilities

No public evidence identified of NHS England developing, selling, licensing or maintaining offensive cyber capabilities, zero-day exploit tools or digital weapons for Israeli state organisations.^{1, 4}

Continued technology procurement after July and November 2024

The FDP remained operational in August 2026, after the July 2024 ICJ advisory opinion concerning the occupied Palestinian territory and the November 2024 ICC arrest warrants concerning named Israeli officials.^{4, 20}

Amnesty’s 2026 campaign statements demonstrate that concerns about Palantir’s Israeli military relationships continued to be publicly raised while the NHS contract remained active.^{19, 21}

No public evidence identified in the examined procurement and oversight records establishing that NHS England made a specific contract-extension decision in response to those international legal developments by 26 October 2026.^{5, 16}

AI, Algorithmic & Autonomous Systems

NHS analytics and AI infrastructure

NHS Digital’s August 2026 FDP description identifies analytics, operational decision-support and the ability to integrate emerging AI tools as features of the national platform.⁴

The platform’s described use cases include waiting-list management, discharge coordination, operational information and organisational reporting.⁴

These are documented civilian healthcare applications; the FDP service description does not identify the platform as a system designed primarily to produce military targeting decisions.⁴

AI provision to Israeli state institutions

No public evidence identified that NHS England supplied AI models, computer-vision systems, predictive analytics or autonomous decision-support technologies to the Israeli government, military or intelligence agencies.^{4, 18}

Training data and overseas access

The National Data Guardian’s 2023–24 report records assurances that the FDP supplier cannot independently use or exploit NHS information for its own purposes.⁶

The October 2026 National Data Guardian correspondence identifies data sovereignty and transparency as issues for future supplier evaluation.¹⁶

No public evidence identified establishing that NHS England patient datasets were supplied to Israeli state bodies or used by NHS England to train Israeli military AI systems.^{6, 16}

Commercial AI compatibility

The Quantium Health Digital Marketplace listing describes an AI-enabled healthcare workflow product offering complaint management, clinical audit support, incident workflows and staff-survey analysis within FDP-compatible environments.⁸

The listing does not establish adoption by NHS England or a contractual relationship involving Israeli state institutions.⁸

Autonomous targeting and lethal applications

No public evidence identified that NHS England designed, purchased, operated or provided autonomous targeting, fire-control AI or kill-chain automation for Israeli military organisations.^{4, 5}

Technology Ecosystem & R&D Footprint

Israeli offices and research facilities

No public evidence identified of NHS England operating an engineering office, software-development centre, technology accelerator or research laboratory in Israel in its examined annual reporting and national technology documentation.^{1, 4}

UK-Israel health technology cooperation

The UK-Israel 2030 roadmap describes proposed collaboration involving digital health, telemedicine, Israeli healthcare innovation and a north-east England pilot programme.¹⁷

The roadmap also discusses bilateral research collaboration and the prospective development of AI applications in healthcare.¹⁷

The September 2023 UK-Israel science and technology memorandum provides a framework for cooperation in healthcare, AI, scientific research and technological innovation.¹⁸

The GOV.UK publication record confirms that the memorandum was issued on 20 September 2023.²²

A November 2021 UK-Israel strategic partnership memorandum established a framework for cooperation in cybersecurity, health, science and technology.²³

These arrangements concern bilateral government policy; no public evidence identified in the examined documents that NHS England itself entered a particular Israeli software licensing, research funding or commercial technology-transfer contract under them.^{17, 18}

Acquisitions and investments

No public evidence identified of NHS England acquiring an Israeli-origin technology company, purchasing an equity stake in an Israeli surveillance supplier or investing in an Israeli military technology venture fund in the examined organisational and financial disclosures.¹

Controlling principals

NHS England’s annual reporting identifies a public-sector governance structure rather than a shareholder-controlled commercial enterprise.¹

No public evidence identified in the examined governance records of personal technology investments by NHS England’s governing officials that establish a corporate relationship with NSO Group, Cellebrite, Carbyne, Oosto, Wiz, Verint or comparable Israeli companies.¹

Patents and intellectual property

No public evidence identified in the reviewed bilateral cooperation documents of a specific NHS England patent licence, joint software patent or technology co-development agreement with Technion, Hebrew University or the Weizmann Institute.^{17, 18}

Civil Society Scrutiny & Regulatory History

Parliamentary scrutiny

The House of Commons Science, Innovation and Technology Committee published its report Rewiring the state: Delivering digital government on 3 June 2026, examining the FDP procurement and wider issues surrounding public-sector dependence on commercial technology suppliers.⁵

The report records the November 2023 Palantir award, the approximately £330 million maximum contract value and the initial commitment ending in February 2027.⁵

A parliamentary answer published on 18 March 2026 confirmed that the FDP agreement contained a review point following its initial three-year period, with subsequent extension periods available under the contractual structure.²⁴

National Data Guardian oversight

The National Data Guardian’s 2023–24 report describes scrutiny of FDP procurement, contractual protections, patient confidence and information governance.⁶

The report notes approximately 20,000 new national data opt-outs following the November 2023 Palantir contract announcement and describes subsequent NHS communications intended to address public concerns.⁶

On 12 October 2026, the National Data Guardian published advice calling for substantial weight to be given to public and professional trust, independently evidenced benefits, interoperability and data sovereignty in decisions about the platform’s future.¹⁶

Organised campaigns

Amnesty International UK operates a campaign calling for termination or non-renewal of the NHS Palantir relationship, citing the company’s Israeli military technology activities and concerns about human rights and patient confidence.¹²

Amnesty reported that nearly 7,000 supporters contacted MPs around an April 2026 parliamentary debate and that 22 MPs raised concerns during the debate.²⁵

On 29 June 2026, Amnesty reported a Brighton demonstration involving more than 100 healthcare workers and supporters opposing Palantir’s NHS involvement.²⁶

In July 2026, Amnesty again called for termination of the contract, expressly connecting its position to Palantir’s January 2024 Israeli military relationship.¹⁹

On 1 October 2026, Amnesty reported nationwide protests and renewed demands for NHS organisations to discontinue Palantir software.²¹

Amnesty’s separate October campaign materials called for local NHS trusts and integrated care boards to reject Palantir products ahead of the initial contract review.²⁷

Campaigners have opposed Palantir’s NHS participation and sought disclosure of government briefing documents concerning its contracts, including official reports about the NHS Federated Data Platform withheld by the Department of Health and Social Care.²⁸

Local authority scrutiny

Manchester City Council considered a September 2026 motion opposing Palantir’s NHS involvement, referencing the company’s Israeli military relationship and concerns about health data governance.²⁹

The council record distinguishes NHS Greater Manchester’s integrated care board-level FDP position from adoption decisions taken by individual NHS trusts in the city.²⁹

Leicester’s February 2026 joint health scrutiny proceedings separately record questions concerning patient trust, local discretion and the operational value of FDP adoption.⁹

Information Commissioner’s Office

On 26 January 2021, the ICO found that NHS England had breached Freedom of Information Act response deadlines concerning a request for agreements involving Palantir Foundry software.³⁰

On 17 March 2026, the ICO upheld DHSC’s reliance on the exemption concerning the development of government policy for requested information about the FDP contract, with a tribunal appeal recorded.³¹

On 30 April 2026, the ICO ruled that NHS England could not rely on its stated commercial-confidence exemptions to withhold certain pricing information from Palantir invoices, while accepting limited withholding of information concerning invoice formats.³²

These ICO decisions concern freedom-of-information disclosure obligations; they do not establish that NHS England unlawfully transferred patient data to Israel.^{30, 31, 32}

Regulatory action concerning Israeli technology provision

No public evidence identified of an export-control prosecution, sanctions enforcement action or regulatory finding that NHS England itself provided prohibited digital technology to an Israeli state or military organisation.^{1, 32}

Status at the evidence cut-off

NHS Digital reported the FDP operational in August 2026, while the National Data Guardian’s October correspondence addressed the forthcoming evaluation of its future.^{4, 16}

The available records establish an NHS England procurement relationship with Palantir and a separately reported Palantir Israeli military technology relationship, without establishing that NHS England contracted directly with Israeli military bodies or transferred NHS data to them.^{5, 12, 16}

In June 2026, the Department of Health and Social Care acknowledged that NHS England’s published NDIT Data Protection Impact Assessment had inaccurately described operational access arrangements by referring to NHS staff when the relevant population also included authorised external users and support personnel. NHS England subsequently apologised for the discrepancy and committed to correcting its documentation. The department maintained that Palantir Technologies UK Ltd and other suppliers operated as data processors under NHS England’s instructions, subject to role-based permissions, approval procedures, audit logging and monitoring. The correction establishes a material transparency deficiency in the published assessment but does not itself establish unauthorised access, data extraction or unlawful disclosure.^{13, 33}

On 18 August 2026, the Department of Health and Social Care answered parliamentary question 18807 concerning audits of NDIT access records. It stated that the current access management process had been implemented in November 2025, with access and user activity monitored by a dedicated NHS England team. Comprehensive access audits were conducted in December 2025 for all NDIT users and in March and May 2026 for selected users. The department reported that the audits confirmed consistency between permissions and approved access, correspondence between permissions and established NDIT projects, continuing necessity and appropriateness of access levels, and properly evidenced, current Security Check clearance. These are the government’s reported assurance findings; the parliamentary answer does not provide underlying audit logs, individual findings or independently verified technical evidence.³⁴

On 22 July 2026, the Office for Statistics Regulation confirmed that NHS England had amended its Federated Data Platform benefits methodology on 6 June 2026 to clarify that observational comparisons of operational performance before and after deployment could not establish causation because other variables had not been controlled. This substantiates the concern raised by the House of Commons Health and Social Care Committee on 9 July 2026 about the evidential basis for claimed operational improvements. NHS England maintained that its earlier methodology had described observational comparisons without claiming to demonstrate causality. Following regulatory scrutiny, NHS England committed to clearer public communication, publication of more detailed trust-level benefits information, consideration of controlled comparisons and an independent academic evaluation by Imperial College London, particularly concerning the Inpatients and OPTICA products. Consequently, observed improvements could not conclusively be attributed to the FDP on the evidence examined by the regulator.³⁵