Summary Yes, the proposed Cloud and AI Development Act (CADA) explicitly supports AI in the defence and aerospace sectors through its Cloud and AI Leadership Initiatives. As proposed, the regulation identifies these industries as strategic priorities for industrial AI and cooperative European industrial models, aiming to foster sovereign, secure, and collaborative development without exposing sensitive data. CTOs and architects should note that while CADA provides a framework for funding, infrastructure, and cooperation, it operates alongside, and does not replace, existing EU defence funding instruments like the European Defence Fund (EDF).

Detail

The Cloud and AI Development Act (CADA), proposed by the European Commission on 3 June 2026 (COM(2026) 502 final), establishes a comprehensive framework to strengthen Europe's cloud and AI ecosystem. A central pillar of this proposal is the Cloud and AI Leadership Initiatives, designed to bridge the gap between advanced research and large-scale industrial deployment. Within this framework, the defence and aerospace sectors are not merely included; they are identified as critical domains requiring targeted support to ensure technological sovereignty, security, and resilience.

Strategic Focus on Defence and Aerospace

Under Article 6(2) of the proposed regulation, the Cloud and AI Leadership Initiatives pursue specific operational objectives. Operational objective 5 focuses on accelerating the development and uptake of industrial AI across the Union's strategic sectors. The text explicitly lists "defence" and "aerospace" (via the broader transport sector) among the priority areas for this support.

Furthermore, Article 6(2) introduces operational objective 6, which supports the development of advanced platforms for the large-scale deployment of AI agents. This is particularly relevant for defence applications requiring autonomous execution capabilities, such as drone swarms or automated threat detection systems, which require robust orchestration frameworks to ensure safety and legal compliance.

Grand Challenges: Industrial and Cooperative Models

The specific mechanisms for supporting these sectors are detailed in Annex I of the proposal, which outlines the "Grand Challenges" to be addressed by the Leadership Initiatives.

Grand Challenge 5: Industrial AI This challenge aims to accelerate the development and deployment of European industrial AI across strategic sectors. Annex I(5) explicitly lists defence and aerospace (under the transport sector) as sectors that could benefit from industrial AI. The proposal emphasizes the need for specialized computing resources and testing facilities to validate AI systems in real-world environments before large-scale deployment. For the aerospace sector, this could involve AI systems for flight management, predictive maintenance, or autonomous navigation. For defence, it supports the development of AI models capable of serving high-value applications, such as logistics optimization or intelligence analysis, while ensuring secure deployment.

Grand Challenge 6: Cooperative European Industrial Models Recognizing the sensitivity of defence and aerospace data, Annex I(6) introduces a framework for developing cooperative European industrial models. This challenge focuses on enabling collaboration at a European industrial scale without exposing commercially sensitive or classified data between participants.

The proposal highlights the use of advanced confidentiality-preserving technologies, such as:

  • Federated and distributed training approaches: Where algorithms are brought to the data rather than data being transferred centrally.
  • Secure execution environments and encryption-based processing.
  • Access compartmentalisation and protections against data extraction.

Annex I(6) explicitly lists defence, aerospace, and cybersecurity as strategic sectors that could benefit from these cooperative models. This is crucial for the defence industry, where multiple entities (e.g., prime contractors, subcontractors, and national defence agencies) need to collaborate on AI development without sharing raw, sensitive data that could compromise national security or intellectual property.

Synergy with Existing Defence Instruments

The proposal carefully positions CADA as complementary to existing EU defence policies. Recital 19 states that the Cloud and AI Leadership Initiatives could support the development of advanced capabilities in the defence sector "in full complementarity with, and without prejudice to, dedicated Union instruments in support of the defence industry, including the European Defence Fund (EDF) and the European Defence Industry Programme (EDIP)."

This means CADA does not replace the EDF but rather provides the underlying cloud infrastructure, AI stack autonomy, and cooperative frameworks that enable defence projects funded by other instruments to succeed. It aims to reduce dependencies on third-country technologies by fostering a homegrown AI ecosystem that can meet the stringent security and performance requirements of the defence sector.

Data Sovereignty and Security

For defence and aerospace applications, data sovereignty is paramount. CADA's broader sovereignty framework (Title IV) ensures that cloud services used in these sectors can be assessed for their level of Union assurance. While the specific procurement rules for defence are often governed by national security laws, CADA provides the technical criteria for assessing whether a cloud service offers sufficient protection against unauthorized access, service disruption, and extraterritorial data access by third countries. This is particularly relevant for Union assurance levels 3 and 4, which allow for the secure hosting of classified information and require strict controls on third-country influence.

What this means for you

For CTOs, architects, and SMEs in the defence and aerospace sectors, CADA presents both opportunities and strategic considerations:

  1. Access to Sovereign AI Infrastructure: If your organization relies on third-country cloud providers for AI training or deployment, CADA encourages a shift towards European sovereign cloud services. This may involve migrating workloads to services that meet higher Union assurance levels, ensuring that sensitive defence data remains under EU jurisdiction and control.
  2. Participation in Cooperative Models: SMEs in the defence supply chain can leverage the cooperative European industrial models framework to collaborate with larger primes or other SMEs. By using federated learning and secure enclaves, you can contribute to AI model training without exposing your proprietary data or algorithms. This lowers the barrier to entry for AI adoption in highly regulated environments.
  3. Funding and Testing Opportunities: The proposal highlights the need for testing and validation facilities. Defence and aerospace companies should monitor calls for expressions of interest related to Grand Challenge 5 and Grand Challenge 6, which may offer access to specialized computing resources and real-world testing environments for AI systems.
  4. Strategic Alignment: When designing AI architectures, consider the requirements for AI agents and autonomous systems outlined in Article 6(2). Building systems that are compliant with emerging EU standards for transparency, safety, and sovereignty will position your company favorably for future public procurement and joint EU defence projects.

Common misconceptions

  • Misconception: CADA replaces the European Defence Fund (EDF).
    • Reality: CADA is complementary. It focuses on the underlying cloud and AI ecosystem, infrastructure, and cooperative frameworks, while the EDF and EDIP provide direct funding for defence research and industrial projects. CADA enables the technological base upon which EDF-funded projects can be built.
  • Misconception: CADA mandates the use of open-source AI for all defence applications.
    • Reality: While CADA promotes open-source solutions to reduce vendor lock-in and enhance security (Article 41), it does not mandate open-source for all defence applications. The choice of technology depends on security, performance, and sovereignty requirements. However, open-source components are encouraged as part of a sovereign AI stack.
  • Misconception: Defence data can be freely shared across borders under CADA.
    • Reality: CADA provides tools for secure cooperation (e.g., federated learning), but it does not override national security laws or classified information handling protocols. Data sovereignty remains strict, and any cross-border data flow must comply with both CADA's assurance levels and existing EU/national defence regulations.

Related

This is general information about a draft EU regulation, not legal advice.