The Surveillance Architecture

What exists. How it got there.
How it fits together.

This document catalogues surveillance capabilities that are publicly known, commercially available, or confirmed through leaked operational documents — as of June 2026.

This document is one of three evidence bases that together test a single hypothesis:

This document describes what exists. The companion documents describe what it means.

Capability enters through government contracts, fast-tracked deals, and institutional relationships that bypass public scrutiny. The public learns about them through FOI requests, leaks, or parliamentary questions — years after deployment.

Palantir / NHS (£330M): Foundry Data Platform integrating patient records across trusts. April 2026 FT leak revealed “Admin” role granting Palantir staff unlimited access to identifiable patient data. The DPIA stated access was limited to NHS staff. This was false. The National Data Guardian was not informed.

Palantir / MoD (£240M), FCA, Home Office: £900M+ total UK government contracts.

Palantir / DHS ($1B blanket purchase agreement): Gotham/Foundry through 2031.

Palantir / ICE ImmigrationOS ($30M): “Near real-time visibility” and “granular tracking.” ICE budget increased from $8B to $28B — now the most richly funded US law enforcement agency.

PM visit to Palantir HQ, Washington, Feb 2025: No minutes taken. The PM visited the headquarters of the company holding £900M+ in UK contracts. Nobody wrote anything down.

Secure America Act (signed June 10, 2026): $69.5B DHS funding through 2029, including $3.45B CBP account expressly permitting biometric entry-exit system spending.

COVID-era procurement patterns: Fast-tracked contracts, emergency powers, due diligence suspended. The template for crisis-driven procurement of surveillance infrastructure.

Sources: Financial Times (NHS FDP leak, April 2026). WhatDoTheyKnow (FOI records). Big Brother Watch (passport database FOI, Aug 2025). Bristol Cable (IMSI catcher investigation). BlueLight Commercial (procurement data). DHS procurement records. Parliamentary Hansard. Biometric Update (Secure America Act). Secure America Act text (June 2026).

Capability enters through technical standards that manufacturers must implement for market access. No public consultation. No democratic vote. Once a capability enters a specification, it enters every device that implements that standard.

The language in these specifications is always “shall,” never “should.” 3GPP TS 33.126 doesn’t say networks “may allow” lawful interception — it says networks “shall allow.” ICAO didn’t recommend facial recognition for passports — it mandated it. IEEE 802.11bf doesn’t suggest WiFi sensing — it defines it as a standard feature.

The capability precedes the law. Always.

Institute of Electrical and Electronics Engineers — defines what hardware can do. ~460,000 members, 190 countries. Professional association, not a government body. HQ: New York.

802.11bf: WiFi sensing — every future router

802.15.6: Body Area Networks — the body as communication medium

1906.1: Nanoscale communication — in-vivo network framework

3rd Generation Partnership Project — defines all mobile network standards (2G through 5G; 6G in development). Partnership of ETSI, ARIB/TTC, CCSA, ATIS, TTA, TSDSI.

TS 33.126/127/128: Lawful Interception for 5G. Networks “shall allow” interception. Interception “must operate without being detected.”

Release 18: 5G Advanced: centimetre-level location accuracy

ISAC: Integrated Sensing and Communication for 6G — connectivity and surveillance merged into one infrastructure

European Telecommunications Standards Institute — standardises the lawful intercept plumbing. 900+ member organisations, 60+ countries. HQ: Sophia Antipolis, France.

TS 103 221: X1 (provisioning), X2 (intercept data), X3 (content) interfaces

TS 103 120: H1 interface for warrant exchange

TS 104 007: LI system architecture (2024)

International Civil Aviation Organization — UN agency. HQ: Montréal.

Doc 9303: Facial recognition as mandatory biometric for all machine-readable travel documents. 150+ nations.

The biometrics subcommittee. Biometric data interchange formats — face, finger, iris, DNA.

ISO/IEC 19794: Biometric data interchange formats

ISO/IEC 19795: Biometric performance testing

Industry consortium: Google, Apple, Microsoft, Amazon, Meta, Visa, Mastercard, PayPal. Defines passwordless authentication (FIDO2/WebAuthn). Moving the internet from passwords to biometrics as default.

Web standards. WebAuthn (browser biometric auth) and Verifiable Credentials (the technical standard behind digital identity wallets).

Bank for International Settlements — central bank of central banks. HQ: Basel. Defines frameworks for CBDCs and cross-border financial messaging. The financial surveillance layer’s standards body.

National Institute of Standards and Technology — US agency, globally influential. Runs the Face Recognition Vendor Test. Set the post-quantum cryptography standards mandated by the June 2026 Executive Order.

The mechanism most people think of when they hear “surveillance.” A judge signs a warrant. A specific person is targeted. Evidence is required. This category has the most legal framework around it — and the most documented circumvention.

Traditional wiretaps

Cellebrite extraction post-seizure

Targeted Pegasus deployment

IMSI catchers

Capability deployed against individuals or populations without their knowledge or consent. Sometimes legal under domestic law. Sometimes later found to be illegal. The fine arrives after years of operation. The data is never deleted.

Pegasus / Graphite / Predator: Zero-click phone spyware. Target never knows. 45+ countries.

Clearview AI: Scraped 50B+ images without consent. Fined across Europe (€30.5M Netherlands, €20M each Italy/Greece/France, £7.5M UK). Ignored all fines. Kept scraping.

Google Assistant: Recorded conversations without consent, 2016–2026. $68M settlement. Simultaneously launched Audio Memory.

Ring employee access: Employees and contractors accessed customer footage. FTC settlement.

PenLink / Webloc: Ad-based location tracking of hundreds of millions of phones without user awareness.

Five Eyes bulk collection: Tempora, MUSCULAR, XKeyscore. Population-level. No individual consent. Never retracted.

Palantir UK police pilot: Bedfordshire/Leicestershire using Gotham to profile people “about to commit” offences. Data from 12+ forces.

You clicked “Accept.” You didn’t read the terms. You bought a product. The surveillance came with it.

Ring doorbell cameras: 20M+ cameras (US). You bought it. Everyone walking past is recorded. Community Requests enabled by default. Police access without warrant.

AirPods with cameras: You wear them. Everyone you look at is captured by IR cameras inside the ear canal. DVT stage, May 2026.

Tesla Sentry Mode: Your car. Everyone near it is filmed. Footage provided to law enforcement on request.

Facewatch: The retailer opted in. Every customer is biometrically scanned.

Flock Safety ALPR: HOAs purchase cameras. Data shared with 6,000+ police departments.

Wearables: Apple Watch (150M+ sold), Oura Ring, Fitbit, continuous glucose monitors. Continuous heart rate, blood oxygen, sleep pattern, menstrual cycle, location, movement. Heart rate variability is individually unique — a biometric identifier, not just a health metric. You registered it with your Apple ID, which links to your payment method, your phone, your face (Face ID), your home address. The interoperability already exists.

Smart speakers: Always-listening. 100M+ US homes. Terms accepted on setup.

Smart meters: Energy usage patterns granular enough to determine sleep schedule, occupancy, appliance use.

Robot vacuums: Floor plan of your home sent to manufacturer. iRobot acquired by Amazon.

Smart TVs: Viewing habits and ambient audio. Vizio: $2.2M settlement for undisclosed tracking.

Apps with ad SDKs: Nearly every free app contains advertising code that reports your location to data brokers. You consented to “personalised ads.” You received warrantless location tracking.

No device to decline. No terms to reject. No consent to give or withhold. The sensor is the environment. Your body is the identifier.

WiFi identification without device: Your body’s effect on radio waves in any WiFi environment. IEEE 802.11bf standardises this for all future routers. ADT acquired Origin Wireless ($170M, Feb 2026) to commercialise.

Gait recognition: How you walk, from existing CCTV, 50m+ range, face covered or back turned. Deployed Beijing/Shanghai (Watrix). Not yet UK/US/EU.

Through-wall UWB radar: Your heartbeat through brick walls, 95%+ accuracy. Cheap portable hardware. Heartbeat is a biometric identifier.

Satellite imagery: Your property, your movement, your thermal signature. Commercial 30cm resolution. Classified: estimated 6–10cm.

Emotion AI: Your face and voice in any monitored space. $5.8B market. Dubai police: 68% crime prediction claim. EU AI Act does not ban for law enforcement.

ISAC (6G): The infrastructure that connects you also observes you. Communication and surveillance merged in the specification. Not yet deployed. In the standard.

Google Audio Memory: OS-level ambient audio in Android. Discovered June 2026 APK teardown. Not yet user-facing.

The tools described above are made by separate companies, sold under separate contracts, and operate in different jurisdictions. But they feed into a single integrated architecture. Each tool is a sensor. One platform makes them queryable as a unified surface.

Palantir sits at the centre. It doesn’t collect anything itself. It makes everything else useful by turning separate data streams into a single searchable surface.

A Congressional letter (Goldman/Wyden/Velázquez, April 2026) explicitly described Clearview, PenLink, L3Harris, and Paragon as technologies that “appear to operate in conjunction with Palantir-developed platforms.”

Peter Thiel co-founded Palantir (initially funded by the CIA’s venture arm) and was an early investor in Clearview AI. The integration is architectural, financial, and personal.

Universal Forensic Extraction Device (UFED). Israeli-made. Hardware + software for mobile device extraction. 40,000+ licences across 100+ countries. Law enforcement, intelligence, border forces, military, corporate security.

What it extracts from a single phone, including locked and encrypted devices:

Texts, emails, photos, videos, call logs, contacts, search history, health data. Messages from encrypted apps — WhatsApp, Signal, Telegram — including deleted messages. Metadata: GPS coordinates, timestamps, device identifiers. Hidden system files: iPhone biome files covering 130+ categories — app usage, Wi-Fi/Bluetooth connections, lock/unlock events, notifications, Siri queries. Cloud extraction: social media, phone backups, Dropbox, Uber. Remote extraction (Endpoint Inspector): anywhere in the world without physical access. AI analysis (Pathfinder): relationship mapping, neural network image categorisation, cross-device correlation.

Sources: Cellebrite product pages. NSW Parliamentary transcript. NIST CFTT reports.

Military-grade zero-click spyware. Installs via crafted message exploiting OS vulnerabilities. User never sees it. No action required. Full access to camera, microphone (remotely activated), all messages including encrypted apps, real-time location, stored files, keylogging, screen capture.

Reads messages before encryption — renders end-to-end encryption irrelevant.

Used in 45+ countries (Citizen Lab). Targets: journalists (Khashoggi associates), human rights activists, opposition politicians, lawyers, diplomats, heads of state (Macron targeting list). NSO Group acquired by US-based Delphi Capital, October 2025. Competitors: Graphite (Paragon Solutions) — designed to evade Pegasus forensic detection. Predator (Cytrox/Intellexa) — EU-based, US-sanctioned 2023. Three companies, three jurisdictions, same capability.

Sources: Citizen Lab (University of Toronto). Amnesty International Security Lab. Forbidden Stories (Pegasus Project, 2021).

Data integration platform. Core capability: taking separate, siloed databases and making them queryable as one. Health records, financial data, travel history, facial recognition profiles, social media footprints, vehicle registrations — not in the same database, but searchable as though they were.

UK (£900M+): NHS £330M (admin access leak April 2026). MoD £240M. FCA, Home Office.

UK police (Gotham): Bedfordshire’s “Nectar” project combines criminal records with financial data to profile individuals including people “about to commit a criminal offence.” At least 14 forces using data-driven crime prediction (Liberty). 35 of 45 forces refused to confirm or deny contracts. Khan blocked the Met’s £50M contract (May 2026) — then granted a £2M pilot four weeks later, after Palantir launched a High Court challenge. The block lasted a month.

US: DHS $1B BPA through 2031. ICE ImmigrationOS $30M. USDA $3.9M for return-to-office compliance. DOJ pre-crime unit: gun purchases + encrypted forums + transport patterns → preemptive arrests.

Germany: Sixteen federal states using Gotham. GFF filed constitutional complaints — pending.

Sources: Financial Times. Liberty Investigates. BlueLight Commercial. Reuters. DHS/USDA procurement. Goldman/Wyden/Velázquez Congressional letter (April 2026). Campaign Zero. Good Law Project (FOI). AOAV (Bedfordshire debunk). Novara Media (Khan backtrack, June 2026). Guardian (France/ChapsVision). GFF (constitutional complaints).

Facial recognition company. Database of 50+ billion images scraped from the internet. Users upload a photo; Clearview returns matches with source links. 3,100+ US law enforcement agencies including FBI, DHS, ICE. 2 million+ law enforcement searches in the past year (doubled year-on-year).

Wrongful arrests: At least 8 people wrongfully arrested in 2026 due to false positive matches.

European fines (all ignored): Netherlands €30.5M, Italy €20M, Greece €20M, France €20M, UK £7.5M. Criminal complaint filed in Austria (noyb, Oct 2025). Clearview’s response: continues operating. Does not pay fines. Does not delete data. Early investor: Peter Thiel (PayPal, Palantir).

Sources: Citizen Lab. ACLU. Forbes. Wikipedia. Biometric Update. noyb (criminal complaint, Austria, Oct 2025).

Enterprise surveillance platform. Founded Lincoln, Nebraska, 1987. Merged with Israeli surveillance firm Cobwebs Technologies (2023) when both acquired by private equity firm Spire Capital for $200M.

PLX: Wiretap platform. Intercepts, aggregates, and analyses calls, texts, and internet activity. DHS contract: $2.9M (April 2026, no-bid), potential $8.3M.

Tangles: Social media and web intelligence. Scrapes open, deep, and dark web. Builds dossiers linking posting history, keyword mentions, location, social graphs, photos of target and their friends and family. Meta banned Cobwebs from its platforms in 2021, calling it a “surveillance-for-hire” outfit. Also sold to El Salvador.

Webloc: Ad-based phone geolocation. Tracks phone locations using advertising data purchased from consumer apps — no warrant needed. Citizen Lab (May 2026): processes data associated with up to 500M mobile devices. The Carpenter loophole in product form.

Sources: Citizen Lab (May 2026). EFF. 404 Media. Texas Observer. Prism Reports (April 2026). Flatwater Free Press.

Automated Licence Plate Recognition cameras. Solar-powered, wireless. 6,000+ municipalities across 49 US states. 20+ billion vehicle scans per month. $7.5 billion valuation.

Sources: EFF (multiple investigations). Institute for Justice. KCUR. 404 Media. ACLU.

Babel Street: scans millions of websites and 25+ platforms. Cross-lingual search in 200+ languages. DOJ: $500M blanket purchase agreement (2019).

Dataminr: official X/Twitter data partner. Sent 160,000 email alerts to DC police between June 2020 and May 2022 about planned demonstrations. Tracked hashtags including #BlackLivesMatter. Flagged a mixtape release, a birthday party, a graduation cookout, and a group trip to Six Flags — most involving Black young people. The company’s position: it cannot alert law enforcement about protests. Its operational record: it did exactly that. CIA investment through In-Q-Tel.

Sources: Brennan Center for Justice (DC police documents, April 2024). EFF (Street Level Surveillance). DC Justice Lab.

Ring (Amazon): 20M+ doorbell cameras. Police request footage via Community Requests (enabled by default). FTC settlement over employee access. Smart speakers: always-listening, 100M+ US homes. Google settled $68M for recording without consent. AirPods with cameras: DVT stage, May 2026 — IR cameras both earbuds, invisible to others. Tesla: continuous external recording. Smart TVs, robot vacuums, smart meters, apps with ad SDKs — each individually justifiable, collectively a surveillance infrastructure more comprehensive than anything a government could have built deliberately.

Sources: EFF. FTC. Hive Security (Audio Memory APK teardown, June 2026). The Verge. SoundGuys. Reuters.

WiFi identification (KIT, 2025–2026): individuals identified by body’s effect on WiFi signals — no device needed. ADT acquired Origin Wireless ($170M, Feb 2026). Gait recognition (Watrix): walking pattern ID, 50m+ range, cannot be defeated by limping, existing CCTV. Through-wall sensing (UWB): heartbeat through brick walls, 95%+ accuracy. Emotion AI: $5.8B market, multimodal, Dubai police: 68% crime prediction claim. EU AI Act: does not ban for law enforcement.

Sources: KIT research. IEEE 802.11bf. ADT/Origin SEC filing (Feb 2026). Watrix. EU AI Act text.

The commercial tools profiled above operate in a space created and maintained by state-level surveillance infrastructure. Three layers sit behind and beneath them: signals intelligence, satellite reconnaissance, and predictive policing. Each is operational. Each is documented.

Capabilities demonstrated by leaked operational documents (2013), confirmed by multiple governments, never denied in substance.

Sources: Snowden archive via Guardian, Washington Post, Der Spiegel, The Intercept, NDR.

In August 2019, President Trump tweeted a classified surveillance image of an Iranian launch pad explosion. Analysts worldwide immediately recognised it as KH-11 imagery and reverse-engineered the resolution to approximately 10cm. The image was never retracted. A president’s carelessness confirmed in seconds what decades of classification had concealed.

Sources: IEEE Spectrum. NRO. Maxar SEC. Capella Space.

The shift from observation to prediction. Using collected data to identify people expected to commit future offences.

Palantir Gotham — UK: Bedfordshire’s “Nectar” project profiles people “about to commit” offences using data from 12+ forces. At least 14 UK forces using data-driven crime prediction. 35 of 45 forces refused to confirm or deny.

DOJ pre-crime unit: Gun purchases + encrypted forums + transport patterns → preemptive arrests.

USDA: $3.9M Palantir contract to surveil employees for return-to-office compliance. Counter-terrorism engine repurposed for desk attendance.

The mechanism: Pattern-of-life analysis generates predictive risk scores. No crime needed. No specific suspicion.

Sources: Liberty Investigates. Reuters. USDA procurement. German parliamentary proceedings. AOAV (Bedfordshire debunk, March 2026). Good Law Project (FOI). Guardian (France/ChapsVision). GFF (constitutional complaints).

The progression across this document is one-directional: from political procurement behind closed doors to environmental sensing that requires only that you have a body in a space where infrastructure exists. From warrant-required to no legal framework. From device-dependent to fully passive. Different companies, different countries, different laws — same trajectory.

Each mechanism described here arrived independently. Each was justified on its own terms. The architecture was not designed as a whole — it emerged, and it converges.