One sovereign platform that optimizes and secures dual-use factories, heavy industry, and critical raw material facilities — tracking carbon exposure, export control, and supply-chain resilience across 21 EU-regulated industries. Single-tenant. Finnish infrastructure. Every agent decision court-defensible.
On 30 March 2026, the European Commission adopted a €1.5 billion work programme under the European Defence Industry Programme (EDIP). €700M+ flows into production ramp-up. €240M into joint procurement. €100M into equity for defence SMEs. Every recipient needs sovereign compliance infrastructure. Aegis is the only EU-sovereign platform covering the full regulatory stack — ETS, CBAM, CSRD, NIS2, EU AI Act, and dual-use export control — in a single tenant.
EU defence contractors and their supply chains face ETS, CBAM, CSRD, NIS2, KRITIS, and EU AI Act simultaneously. When a lime facility burns in Finland, the cascade hits steel flux, cement feedstock, chemical precursors, and construction embodied carbon within days. No existing platform connects this chain. US platforms are CLOUD Act exposed and cannot serve EU sovereign defence procurement.
Plus 12+ additional agents: SiteSense, MaterialOracle, ScheduleGenius, Article12Logger, ArgusAgent (orbital intelligence, roadmap), and more.
Each use case is a task your organisation already recognises. Aegis makes the AI part of it verifiable and leaves the decision to a named person. Aegis does not perform the task and controls no physical equipment: it records, gates and reports through a signed ledger.
Your pilot does not start from zero. Every Aegis pilot includes the Lifetime World Model (LWM v2), trained to your environment. It starts from the archetype of your industry: the systems that are its first data sources, the AI already in use that the use cases govern, the decision points the ledger records and the people who approve the pilot. In Phase 0 we compare the archetype with your site and record every difference. The pilot scope is two use cases from different lenses (one legal or compliance, one business or operations), so two budget owners want the same pilot.
Status: LWM v2 is at specification stage. For 23 industries the starting point is an industry profile with benchmarks in the World Model code; for 7 more, Phase 0 builds it from the archetype. "Shown" means demonstrated on the DWS IQ Test Station (acceptance run TS-001); every other use case is pilot scope, not a delivered feature.
| Industry | LWM v2 starts from | Opening use case |
|---|---|---|
| Iron and steel | World Model industry profile | Publication control |
| Cement and lime | World Model industry profile | Disclosure obligation |
| Aluminium | World Model industry profile | Operation during a link cut |
| Chemicals and petrochemicals | World Model industry profile | Data stays local |
| Fertilizers | World Model industry profile | Disclosure obligation |
| RFNBO, green hydrogen and e-fuels | World Model industry profile | Decision trail |
| Power and heat generation | World Model industry profile | Operation during a link cut |
| Petroleum refining, oil and gas | World Model industry profile | Incident trail |
| Manufacturing (cross-sector) | World Model industry profile | Publication control |
| Construction and buildings | World Model industry profile | Stakeholder interaction |
| Road transport and logistics | World Model industry profile | Disclosure obligation |
| Multimodal freight logistics | World Model industry profile | Incident trail |
| Maritime shipping | World Model industry profile | Operation during a link cut |
| Shipbuilding | World Model industry profile | Stakeholder interaction |
| Aviation | World Model industry profile | Maintenance and operating decisions |
| Mining and quarrying | World Model industry profile | Operation during a link cut |
| Pulp, paper and printing | World Model industry profile | Disclosure obligation |
| Food and beverage | World Model industry profile | Decision trail |
| Textiles and nonwovens | World Model industry profile | Publication control |
| Electronics and network equipment | World Model industry profile | Data stays local |
| Automotive and batteries | World Model industry profile | Disclosure obligation |
| Pharmaceuticals | World Model industry profile | Version approval evidence |
| Real estate | World Model industry profile | Stakeholder interaction |
| Agriculture and livestock | Built in Phase 0 from the archetype | Data stays local |
| Waste management and recycling | Built in Phase 0 from the archetype | Disclosure obligation |
| Glass and ceramics | Built in Phase 0 from the archetype | Version approval evidence |
| Healthcare | Built in Phase 0 from the archetype | Access-management evidence |
| Financial services | Built in Phase 0 from the archetype | Scoring rationale |
| Public sector | Built in Phase 0 from the archetype | Decision trail |
| Data centres | Built in Phase 0 from the archetype | Disclosure obligation |
In October 2026, 483 scientists asked everyone who deploys cyber-capable AI to adopt high-assurance containment now, to default to air-gapping, and to record and report containment failures. This is how Aegis answers each point, and where it stands today.
| Recommendation | What Aegis does | Status |
|---|---|---|
| Default to air-gapped | Every pilot step runs in an OpenShell sandbox with no network unless the signed scope declares the step non-core and names its endpoints. DWS Box is designed to run without a cloud connection. | In the pilot code; verified per site at acceptance |
| High-assurance containment | Landlock is a hard requirement: a host without it fails closed and never runs an unconfined step. System paths are read-only; only the step's own sandbox directory is writable. | In the pilot code |
| Human in the loop for critical actions | A recommendation waits until a named person answers it. Operator stop (kill authority) works with the uplink severed. | Shown on the DWS IQ Test Station (TS-001) |
| Least privilege, no shared secrets | An action runs only with a single-use lease signed by the site key: one action, one subject, at most 15 minutes, never replayed. Agent permissions expire. | Shown on the DWS IQ Test Station (TS-001) |
| Limits on money and compute, with automatic cut-off | Per-agent limits on money, compute and actions from the signed scope; the first use that reaches a limit is written to the ledger and stops the agent, with no network needed. | Budget module in the pilot code; wiring into each pilot workflow is pilot scope |
| Record and learn from containment failures | Every decision and incident goes to a signed, hash-chained ledger kept on your hardware; the incident trail gives the facts for NIS2 24 h and 72 h reports. | Ledger in the pilot code; incident report pack is pilot scope |
| A recognised lifecycle standard | Mapping to the ETSI baseline for securing AI (EN 304 223, formerly TS 104 223: design, development, deployment, maintenance, end of life), next to the existing EU AI Act and NIS2 matrix. | In progress; ISO 27001 planned, no date |
Market signal (June 2026): the U.S. Army made Palantir Foundry its NGC2 cloud data layer and Anduril Lattice its tactical data layer — proof that command-and-control is won at the sovereign data layer. Europe has no equivalent baseline; the U.S. stack carries CLOUD Act exposure and an EU AI Act gap. Aegis is the EU-sovereign answer.
| Dimension | Palantir AIP | Anduril Lattice | C3.ai | Aegis |
|---|---|---|---|---|
| Jurisdiction | US (CLOUD Act) | US (CLOUD Act) | US (CLOUD Act) | Finland (EU) |
| EU AI Act | Roadmap | Not native | Not native | Article 12 logging designed in |
| Agent Governance | Proprietary | Hardware sensors | Dashboards | KYA Specification (court-defensible) |
| Cross-Vertical Intel | Single vertical | Single vertical | Single vertical | 21 industries, one ledger |
| Carbon / CBAM | None | None | None | ETS, CBAM, CSRD native |
| EU Certification | None announced | None announced | None announced | PiTuKri self-assessment (52 criteria); ISO 27001 / SOC 2 planned |
| Year 1 Cost | ~€920K+ | Custom (high) | ~€300K+ | From €72K |
| Aegis Standard | Aegis Defence | Aegis Sovereign | |
|---|---|---|---|
| Onboarding + Integration | €59,990 | €59,990 | €59,990 |
| Monthly subscription | €999/mo | €1,999/mo | €4,999/mo |
| Year 1 total | €72K | €84K | €120K |
| AI Agents | Skilled agents, KYA governance | Skilled agents + ArgusAgent (SAR imagery search) | Skilled agents + custom agent development |
| GPU / LLM inference | Cloud API only | NVIDIA L40S in-cluster inference (EU cloud) | Dedicated GPU cluster (customer-sited on request) |
| Support | Standard (next business day) | Priority (4h SLA) + dedicated account manager | Dedicated engineering team + custom SLA |
| EDIP compliance reporting | — | Included | Included |
| Deployment | UpCloud Helsinki (managed) | UpCloud Helsinki (managed) | Air-gapped / on-premises option |
| vs. Palantir | 13x cheaper | 8x cheaper | Still cheaper at any config |
Zero egress costs on all tiers. All prices exclude VAT. Annual billing available.
Hardware is not part of the Aegis licence. DWS supplies the software platform and the governance layer. If you want owned hardware, DWS Box bundles the licence with an Acer Veriton GN100, a DGX Spark or an Acer RTX laptop configuration, priced separately on the price list. Defence-tier GPU inference runs on L40S nodes inside the EU-hosted single-tenant cluster — nothing is shipped to site. Sovereign on-premises and air-gapped deployments run on customer- or partner-procured hardware, scoped per engagement.
Supply continuity. The models we adopt ship as open weights, so the inference layer is portable by design rather than tied to one vendor's stack. A non-NVIDIA fallback path (AMD, Intel accelerators) is carried in our supply-risk plan, and hardware compatibility is validated per engagement rather than assumed. The full supply-risk register is available under NDA.
Single-tenant. Finnish infrastructure. Court-defensible governance. Start with the Aegis Pilot: 3 months, €19,990, credited against the licence if you proceed within 6 months. Release candidate in 2026; general availability Q1 2027, after the first pilot acceptance record.