The pilot works and nobody has seen where the data goes
It was built against whichever endpoint was quickest to sign up for, and the question of what leaves the building was left until the thing was working.
A running system that cannot be approved for the data it was built to handle.