(IDENT)
Transferred to ICE
Field Scans
2025
Leaked March 2026
Social Media (UAW Survey)
Data Collection
Raw data capture from field operations, government databases and social media
IDENT / HART
- 270+ million unique identities
- Fingerprints, facial images, iris scans
- 400,000+ transactions per day
- Integrates with FBI NGI
Medicaid Data
- ~80 million patient records
- Names, addresses, SSNs
- Transferred to ICE via HHS order
- Partial injunction in 20 states
IRS Data
- 150+ million taxpayer records
- Income, addresses, SSNs
- DOGE "mega API" project
- IRS-ICE sharing agreement (Jan 2025)
TECS
- CBP's primary enforcement system
- Travel history, border crossings
- Integrates with APIS (air travel)
- Lookout and seizure tracking
SEVIS
- International student tracking
- Visa compliance monitoring
- Educational institution data
Social Security Admin
- 70+ million benefit recipients
- SSNs, addresses, disability records
- Part of DOGE integration plan
Commercial OSINT platforms licensed by DHS/ICE/CBP to monitor, scrape and analyze social media activity. Exposed in UAW v. Department of State (Case 1:25-cv-08566, Oct 2025).
ShadowDragon / SocialNet
- Maps connections across 200+ social media platforms
- Builds relationship graphs from public posts
- Licensed by both ICE and State Department
- Used by Tiger Team to produce Reports of Analysis
Fivecast ONYX
- Automated OSINT with AI-driven analysis
- Cross-platform social media monitoring
- Licensed by CBP, ICE and TSA simultaneously
- Deployed at National Vetting Center
Babel X
- DHS-wide license maintained since 2017
- Multilingual content analysis and translation
- Monitors foreign-language social media posts
- Part of the National Targeting Center toolkit
Cobwebs / Pen-Link
- $5.3 million ICE contract
- Deep and dark web monitoring
- Automated identity resolution
- Link analysis across web activity
Skopenow
- Automated social media profiling
- Generates comprehensive digital dossiers
- Licensed by both ICE and DHS
- Behavioral pattern analysis
Data Flows
Watchlists
Linking individuals, assigning risk scores and generating intelligence reports
SPARTA
- Generates "HEL-C" intelligence reports
- Flags "aggressive protesters"
- Compiles multi-source intelligence
- Integrates with ImmigrationOS
GRAPEVINE
- "Call chaining" via metadata
- Proximity-based linking
- Guilt-by-association profiles
- Contact tracing (phone, email)
SLIPSTREAM
- Scrapes protest footage / livestreams
- Sentiment analysis
- Facial recognition on videos
- Archives deleted posts
HUMMINGBIRD
- Originally Afghan refugee vetting
- Now tracks domestic protesters
- Immigration activist monitoring
- Legal authority unclear
REAPER
- Function largely unknown
- Possibly escalation triggers
- Predictive targeting
BLUEKEY / SIENNA
- Functions unclear
- Likely location / comms metadata
- Behavioral flags and tagging
The Federal Watchlisting Pipeline
Per the 2013 Watchlisting Guidance (U//FOUO), leaked by Edward Snowden. This is the formal nomination-to-screening process that feeds the systems above.
Reasonable Suspicion Standard
- "Irrefutable evidence or concrete facts are not necessary" (§3.5)
- Single-source information — including social media posts — can support a nomination (§3.6)
- Behavioral indicators include travel patterns, "associations," and online activity (§3.9)
- DHS and DOS have lower standards for immigration-related watchlisting (§2.5)
Biometric-Only Nominations
- A fingerprint, iris scan, facial image, or DNA sample alone is sufficient to nominate to TIDE/TSDB (§2.1)
- No biographical information required
- Links Layer 01 (IDENT biometrics) directly to watchlist placement
- Field scans at the border become nominations
Non-Terrorist Records in TIDE
- Spouses & children of suspected terrorists (TIDE Code 17)
- Associates with unknown involvement (Code 50)
- Other relatives — fathers, brothers, etc. (Code 160)
- "Possible nexus" — insufficient evidence for suspicion (Code 99)
- Lost/stolen passports (Code 89)
Threat-Based Upgrades
- The White House can direct TSC/NCTC to place entire categories of people on No Fly or Selectee lists (§1.59)
- Valid for 72 hours without normal review
- Renewable in 30-day increments
- Directly relevant to NSPM-7 targeting of protesters
Encounter Feedback Loop
- CBP encounters at ports of entry generate "encounter packages" (§5.4.1)
- Includes pocket litter, companion info, interview notes, biometrics
- Fed back into TIDE via the Encounter Management Application (EMA)
- DHS has more encounters than any other agency (§5.4)
No Fly List Criteria
- Threat of international or domestic terrorism involving aircraft (§4.5.1)
- Threat of domestic terrorism to the homeland (§4.5.2)
- Threat of international terrorism against U.S. facilities abroad (§4.5.3)
- "Operationally capable" of a violent act of terrorism (§4.5.4)
- All Guantanamo Bay detainees automatically included (§4.6)
System Interlinking
Palantir Layer
The brain: where all data is integrated, analyzed and made searchable
FALCON
- Federal Acquisition and Location Network
- Hourly location tracking via cell phones
- Black Asphalt integration (civil asset forfeiture)
- No automatic account deprovisioning
ICM
- Investigative Case Management
- Tracks persons, vehicles, vessels, aircraft
- Relationship mapping (like GRAPEVINE)
- Integrates TECS, IDENT, SEVIS, FBI systems
- "Also supports immigration enforcement"
ImmigrationOS
- $29.9M contract (April 2025)
- Targeting & Enforcement Prioritization
- Self-deportation tracking
- "End-to-end immigration lifecycle"
- Built on ICM infrastructure
Palantir Foundry
- "Read center of all IRS systems"
- Unified API layer for all agencies
- Cloud-based data integration
- FedRAMP High approved (Dec 2024)
Palantir Gotham
- Backend for ImmigrationOS / ELITE
- Used by ICE, DHS, FBI, CBP
- Fusion center integration
- Link analysis and pattern detection
IRS-NG
- Central portal for tracking "domestic terrorists"
- Accesses 28+ federal databases simultaneously
- Includes TSDS, WLS, IDENT, NCIC, SSA, DMV records
- Tracks names, SSNs, aliases, addresses, biometrics
- Evidence: social media, Fox News, "open-source research"
- No crime required for inclusion
LEAD TRACKER
- Intake, triage, analysis, tasking
- Manages "executable final orders of removal"
- Interfaces with ICM
- Enforcement disposition tracking
Integration Architecture
The 28+ Databases Accessible Through IRS-NG
According to leaked DHS documents, the Intelligence Reporting System — Next Generation gives federal agents simultaneous access to at least 28 different databases, plus DMV records, seized device data and "certain law enforcement and/or intelligence data."
Terrorism & Watchlists
- Terrorist Screening Dataset (TSDS)
- Watchlist Service (WLS)
Travel & Border Control
- Secure Flight Passenger Data (SFPD)
- Automated Targeting System (ATS)
- Arrival and Departure Info System (ADIS)
- Advance Passenger Info System (APIS)
- Electronic System for Travel Authorization (ESTA)
- Electronic Visa Update System (EVUS)
- Border Crossing Information (BCI)
- I-94 data
Immigration & Students
- Non-Immigrant Information System (NIIS)
- Student and Exchange Visitor Program (SEVP)
- Enforcement Integrated Database (EID)
- Criminal Arrest & Immigration Records (CAIR)
- Natl. Security Entry-Exit Registration (NSEERS)
- Central Index System (CIS)
Law Enforcement & Criminal
- National Crime Information Center (NCIC)
- Interstate Identification Index (III)
- Seized Asset and Case Tracking (SEACATS)
Biometrics & Identity
- Automated Biometric ID System (IDENT)
- Global Enrollment System (GES)
Government Records
- SSA Death Master File
- Consular Consolidated Database (CCD)
- Electronic Questionnaires for Investigations (e-QIP)
Commercial & Trade
- Automated Commercial Environment (ACE)
- Automated Export System (AES)
- Importer Security Filing & manifests
Additional Access
- DMV licenses and records
- Data from seized / cloned devices
- "Certain law enforcement / intelligence data"
Result: A single domestic terrorism investigation can query travel history, criminal records, biometrics, visa status, school enrollment, seized assets, death records and device data — all without a warrant.
A single IRS-NG query pulls 28+ federal databases simultaneously — travel history, criminal records, biometrics, visa status, school enrollment — all without a warrant. The evidence standard: Fox News segments and Twitter posts are treated as actionable intelligence.
Field Tools
Mobile surveillance deployed by agents during street operations
ELITE
- Map-based targeting interface
- Pins = potential deportation targets
- "Confidence scores" for addresses
- Photos, DOB, A-numbers included
- Powered by Palantir Gotham
Mobile Fortify
- Smartphone-based face scanning
- Contactless fingerprint capture
- Connects to IDENT (270M+ records)
- 100,000+ field scans documented
- Known accuracy problems
I.R.I.S. / MORIS
- Iris scanning from 1 meter away
- Liveness detection built-in
- Works on any smartphone
- Connects to FBI NGI & IDENT
- Contract finalized Aug 2025
FALCON Mobile
- Real-time database queries
- GPS tracking
- Field interview documentation
- Integration with FALCON Tipline
Field Workflow
Policy Framework
Executive orders and directives that authorize the surveillance infrastructure
NSPM-7: Domestic Terrorism
- Expands definition beyond violence to include "advocacy"
- Designates Antifa as "domestic terrorist organization"
- Authorizes preemptive surveillance of designated threats
- Creates legal basis for IRS-NG watchlist entries
- Enables financial surveillance via FinCEN collaboration
- DHS officials struggle to implement "patently outrageous directives"
- DOJ implementation memo by AG Bondi (September 2025)
"Eliminating Information Silos" EO
- Mandates data sharing across all federal agencies
- Removes restrictions on immigration-related data transfer
- Authorizes "mega API" development by DOGE
- Creates unified search across IRS, HHS, SSA, VA databases
- Legal basis for Medicaid-to-ICE data pipeline
IRS-ICE Data Sharing Agreement
- Grants ICE access to tax records without warrants
- Includes ITIN holder data (millions of taxpayers)
- Enables employer raid targeting through W-2 analysis
- Circumvents traditional privacy protections
- Implemented immediately after inauguration
HHS Medicaid Data Order
- Requires transfer of Medicaid enrollment data to ICE
- Affects 80+ million patient records
- Includes immigration status, addresses, family composition
- Creates chilling effect on healthcare access
- No judicial oversight required
EO 14161 — "Protecting From Foreign Terrorists"
- Signed on inauguration day
- Directs "enhanced vetting" of all visa applicants
- Authorizes ideological screening of social media
- Legal basis for the "Catch and Revoke" initiative
- Cited in UAW v. DOS as enabling viewpoint discrimination
EO 14188 — "Protecting Against Invasion"
- Declares immigration emergency
- Authorizes "all necessary resources" for enforcement
- Enables interagency surveillance coordination
- Provides legal cover for ICE social media monitoring
- Works in tandem with EO 14161 to create dual legal basis
Section 287(g) Agreements
- Deputizes local police as immigration agents
- Grants access to ICE databases (IDENT, ICM)
- Enables immigration checks during routine stops
- Creates pipeline from local jails to deportation
- Expanded dramatically under Trump 2.0
Secure Communities Program
- Automatically runs fingerprints against immigration databases
- Triggers ICE detainers in local jails
- Active in thousands of jurisdictions nationwide
- No probable cause required for immigration holds
- Feeds FALCON targeting algorithms
Policy Workflow: From Executive Order to Deportation
These policies create a legal framework that circumvents traditional Fourth Amendment protections. By labeling activists as "domestic terrorists" under NSPM-7, the government claims authority for warrantless surveillance. The "Eliminating Silos" executive order mandates data sharing that was previously prohibited by agency-specific privacy laws. Together, they create a surveillance system that operates largely outside judicial oversight.
Key Players
The network of individuals whose financial interests, political decisions and policy choices built and maintain the surveillance apparatus
Contractor Ecosystem
On March 1, 2026, hacktivists breached DHS's Office of Industry Partnership (oip.dhs.gov) and leaked the details of 6,800+ organizations that applied for DHS contracts — and the 1,409 contracts awarded totaling $844.6 million.
6,885
Private companies, defense contractors, universities and government agencies — all seeking DHS contracts through the Office of Industry Partnership.
1,409
Won contracts spanning SBIR, LRBAA and SVIP programs from 2004 to 2025, awarded to 640 unique companies.
$844.6M
Combined value of all awarded contracts. This is the R&D pipeline — operational contracts (like Palantir's $970M) flow through separate procurement.
50 States
Top states: California (947), Virginia (859), Maryland (444), Texas (365), Florida (345). The beltway corridor dominates.
Palantir Technologies
The primary systems integrator for ICE/DHS surveillance. Applied through OIP in addition to their massive sole-source contracts ($970M+) through other procurement channels.
Anduril Industries
Peter Thiel-backed defense startup. Builds autonomous surveillance towers and drone systems for border monitoring.
Raytheon
Won contracts including SeaSCRAPER ($6.3M) undersea surveillance cable and maritime domain awareness tools. 13 separate division entries in the applicant pool.
Booz Allen Hamilton
Won identity and biometric fusion contracts ($3.5M+) including Identity Capability Exploration and Multimodal Biometric Fusion studies feeding IDENT/HART.
Microsoft & Amazon
Both appear in the applicant pool. Microsoft Corporation (Redmond, WA) and Amazon Web Services — providing the cloud backbone for DHS systems.
HBGary
Infamous for proposing to attack WikiLeaks and journalists. Won DHS botnet detection contracts before being exposed by Anonymous in 2011.
| Company | Project | Amount ↓ | Year |
|---|
The OIP breach exposes the full R&D pipeline behind DHS surveillance — 6,800+ organizations competing to build the tools documented in this dashboard. While the largest operational contracts (Palantir, NEC) flow through separate procurement, this data reveals the breadth of the surveillance-industrial complex: from $59.2M biometric accuracy programs (SAIC's DEBIASE) to SIM card cracking tools ($69K to EWA Government Systems) to social media analytics toolkits (Progeny Systems).
The pipeline runs from small Phase I research grants ($100K) to multi-million dollar Phase II deployments — a conveyor belt turning academic research into field-deployed surveillance technology.
The R&D to Deployment Pipeline
Data from the "ICE Contracts" leak published by Distributed Denial of Secrets on March 1, 2026. Originally exfiltrated from DHS Office of Industry Partnership (oip.dhs.gov) by a group calling themselves the "Department of Peace." Contains details on 6,681 organizations that applied for DHS contracts and 1,409 awarded contracts. Personal identifying information has been excluded from this dashboard.
Real Cases
How Palantir's data architecture leads to targeting real people
4.8 million undocumented immigrants hold Individual Taxpayer Identification Numbers (ITINs) and pay federal taxes annually — contributing an estimated $11.6 billion in state and local taxes per year. Despite paying into systems they cannot benefit from (Social Security, Medicare, most federal programs), their tax data is now being weaponized against them through the IRS-ICE data sharing agreement.
They pay taxes. They get no benefits. And now their tax records are used to deport them.
Chandler Patey
Chandler Patey, 29, protests outside Portland ICE facility and lets protesters use his bathroom. No crime alleged.
Dustin Ragsdale
Dustin Ragsdale holds a pride flag, wears Batman sweatpants and uses a megaphone at protests. Lives across from an ICE detention center. No crime alleged.
"Mossy Matriarch"
"Mossy Matriarch", 30, is a Washington state photographer and small business owner who posts on social media asking for protest supply donations.
Nicole Cleland & Alex Pretti
Nicole Cleland and Alex Pretti attend immigration court hearings to monitor due process. Constitutional right to observe courts.
Mississippi Worksite Raids
ICE analyzes W-2 and Social Security data through Palantir's FALCON system to identify immigrant workers at seven processing plants across Mississippi.
ITIN Taxpayers
4.8 million undocumented immigrants file taxes annually using ITINs. January 2025: IRS-ICE data sharing agreement grants access to tax records.
Mahmoud Khalil
Mahmoud Khalil, Columbia University graduate student and lawful permanent resident, organized campus protests. Visa revoked under "Catch and Revoke" initiative.
Rümeysa Öztürk
Rümeysa Öztürk, Tufts University student, flagged through social media surveillance. ICE attempted arrest based on viewpoint-based screening.
Mohsen Mahdawi
Mohsen Mahdawi, Columbia University student who organized campus encampment, arrested by ICE at his own citizenship ceremony.
Medicaid Patients
80+ million Americans receive Medicaid, including children born to immigrant parents. June 2025: HHS orders transfer of Medicaid enrollment data to ICE.
Every case follows the same architecture: data collected for legitimate purposes (tax compliance, healthcare, court observation, mutual aid) → fed into Palantir's systems via IRS-NG → weaponized for surveillance and enforcement → constitutional rights chilled.
The "evidence" standard is dystopian: Fox News segments, random Twitter posts and living near an ICE facility are treated as intelligence. DHS agents admit to "Alex Jones-level paranoia and wild leaps" in their analysis. The infrastructure doesn't just target "criminals" — it transforms ordinary civic participation into grounds for permanent federal surveillance.
Union surveys filed in UAW v. Department of State (Oct 2025) quantify the speech suppression:
- 84.4% of noncitizen UAW respondents changed their social media activity
- 97.2% of those who changed behavior cited fear of immigration consequences
- 1,000+ UAW members, 223 CWA members and 1,655 AFT members surveyed
- Respondents report deleting posts, avoiding protests, self-censoring political opinions and withdrawing from campus organizations
This is no longer theoretical. The surveillance infrastructure documented in this dashboard is producing measurable, population-level speech suppression among noncitizen workers, students and academics across the United States.
The Thiel-Musk-Miller Network
How political donations, personal relationships and policy decisions created a closed loop of profit and power
Timeline
Chronological record of how two decades of decisions built today's surveillance apparatus
Sources
This dashboard synthesizes reporting from investigative journalists, leaked government documents, federal contracts and FOIA requests. All claims are sourced from publicly available documents or verified reporting.
Primary Investigations
-
Ken Klippenstein — "Feds Identify 'Leader of Antifa'" (Feb 2026)
kenklippenstein.com -
Ken Klippenstein — "The Deportation Machine Comes Home" (Jan 2026)
-
404 Media — ELITE System Exposure (Jan 2026)
404media.co -
Subtxt Press — "The Deportation Machine Comes Home" (Jan 2026)
substack.com/@subtxtpress
Government Documents & Contracts
-
ImmigrationOS Contract — 70CMSD24F00000213
SAM.gov -
HUD-GNMA Contract — 47QTCA24D004L-86615526F00002
-
DHS Privacy Impact Assessment — IRS-NG System
-
NSPM-7 — National Security Presidential Memorandum
-
Executive Order — "Eliminating Information Silos"
Leaked Data
-
DHS OIP Breach — "Department of Peace" (March 2026)
-
Distributed Denial of Secrets — "ICE Contracts" Release
Legal Filings
-
UAW v. Department of State — Case 1:25-cv-08566 (Oct 16, 2025)
-
Executive Order 14161 — "Protecting the United States from Foreign Terrorists and Other National Security and Public Safety Threats" (January 20, 2025)
-
Executive Order 14188 — "Protecting the American People Against Invasion" (January 29, 2025)
Historical Context
-
WikiLeaks Vault 7 — CIA ExpressLane exposure (2017)
-
Mississippi Raids — ICE Operations (August 2019)
-
Migration 5 Alliance — Five Eyes Biometric Sharing
-
Palantir Student Boycott — 1,200+ Students Pledge (2019)
Financial & Accountability
-
POGO Investigation — Stephen Miller Palantir Stock (June 2025)
pogo.org -
Peter Thiel Political Spending
-
Palantir Stock Performance
-
In-Q-Tel Investment — CIA Venture Capital (2005)
Policy & Legal Framework
-
IRS-ICE Data Sharing Agreement (January 2025)
-
HHS Medicaid Data Order (June 2025)
-
Section 287(g) Agreements
-
Secure Communities Program
-
Snowden Archive (via DDoSecrets) — 2013 Watchlisting Guidance (U//FOUO)
Additional Resources
-
FOIA.io
View FOIA Tracker -
Interactive Dashboards
-
Subtxt Press Editorial Policies
-
Project Documentation