Industries
SEC · DACH
Security & defence
Sovereign AI,
offline if needed.
Defence companies, dual-use manufacturers, security service providers and critical infrastructure. Classified data, export control, and systems that have to run without the internet.
01 · Topics
What keeps
you busy.
The topics that come up first when AI meets this industry. If one sounds familiar, that is where we start.
- 01Classified means offline
Many systems may not touch a public cloud. Most AI offers assume they can.
- 02Dual-use grey zones
The same model can serve civil and military use. That decides which rules apply, and which export controls.
- 03Demand grows faster than teams
Programmes and budgets grow. Engineers, analysts and documentation capacity do not grow at the same pace.
02 · Examples
Where AI
earns its keep.
Input, action, result. The places we would look first, because the work is repetitive, the data exists and a person still signs off.
- 01Document assistant on-premises
Manuals, specifications and reports → an assistant running inside your network → answers with the source, nothing leaves the building.
- 02Open-source analysis
Public sources and reports → filtered, translated and summarised → the analyst assesses and decides.
- 03Maintenance and logistics
Maintenance records and parts data → failure patterns and spare part forecasts → higher availability of systems.
- 04Security testing of AI systems
Your model or agent → tested for manipulation, data leakage and robustness → findings documented for the approval.
sample Illustrative examples, not client references.
03 · The rules
What applies,
and since when.
The rules we plan around in this industry. With the source, so your legal team can check our reading.
- 01Military use is outside the AI Act
AI systems used exclusively for military, defence or national security purposes are excluded. Once a system is also used for civil purposes, the AI Act applies.
Art. 2(3) AI Actin force - 02Dual-use items need export control
Exporting listed dual-use items, including some software and technology, needs an authorisation. Brokering and technical assistance can be covered too.
Regulation (EU) 2021/821in force - 03Classified information has its own rules
Companies handling classified information need security clearance procedures, and IT systems for classified data need approval. VS-NfD is the lowest level.
SÜG, VSAin force - 04Biometric identification is restricted
Real-time remote biometric identification in public spaces for law enforcement is prohibited except in narrow cases; untargeted scraping of facial images is prohibited outright.
Art. 5(1)(e), (h) AI Actsince 2 February 2025
Not legal advice Our reading as of September 2026, not legal advice.
04 · Services
Where to
start.
Build, Secure, Comply, Enable: the four services we would start security and defence projects with.
05 · Next steps
What happens
after you send it.
Four steps between your request and a decision. No step commits you to anything.
- 01 You send the requestThree questions about your situation, then your contact details. It takes a few minutes.
- 02 We read it and replyA person reads your answers and replies by email, with questions or a proposal for a first conversation.
- 03 First conversationYour use case, your data, the rules that apply. Afterwards you know whether and how to start.
- 04 Written proposalIf it fits: scope, approach and effort in writing. You decide.
06 · Download
Take it
with you.
For your team, as a PDF. Leave your email and we send it to you.
In preparation
Checklist: AI in classified and dual-use environments
Which rules apply when your AI serves defence, security or both.
What is inside
- When the AI Act applies and when it does not
- What export control means for models and software
- What to plan for approving IT systems with classified data
The PDF is being prepared. Request it now and you get it as soon as it is ready.
07 · Request
Tell us
where it hurts.
Three short steps. Your answers help us prepare the first conversation for your case.
- 01Your situation
- 02Your project
- 03Contact
08 · Questions
Questions
from this industry.
Short answers. Anything else goes into your request.
Can you work with classified information?
That depends on the clearance the project requires. We clarify the requirements with you before any classified material is shared.
Do open models really run without the internet?
Yes. Open-weight models run on your own hardware without a connection. Quality depends on model size and hardware; we test with your data.
Does the AI Act apply to us at all?
For exclusively military use, no. For dual-use products, security services and critical infrastructure, usually yes. We map it per system.
Security & defence
Your system,
your void.
Tell us where it hurts. We check which rules apply before the first line of code.