Palantir develops many of the tools which implies they’ve run them themselves also. For example, they have tools for scraping social media platforms to build profiles of people. You don’t build those tools without running them along the way. They just make their clients run them most of the time for liability reasons (it’s a lot harder to prosecute the CIA for spying)