Sovereign AI for Defence Departments & Organisations
Personnel, logistics, procurement, finance and estates are the backbone of national security, and they run on classified networks with decades of legacy systems. The platform modernises that back office with governed AI, one ontology of units, assets and people, and no compromise on classification.
One record of units, assets and people
Personnel, equipment, readiness and contracts modelled once across HR, logistics, finance and estate systems, so a question has one answer.
Legacy wrapped, not replaced
Mainframes and line-of-business systems stay the systems of record; agents act through governed interfaces on top of them.
Classified back office
HR, procurement and logistics workflows automated inside air-gapped environments, with clearance enforced at every retrieval.
A defence ministry is also one of the largest administrations in the country: it recruits, pays, trains and moves people, buys and maintains equipment, and manages estates and budgets, mostly on systems that predate the internet and networks that must never touch it. AI can take the routine work out of that bureaucracy, but only if it runs inside the classified perimeter, respects clearance, and leaves the decision with an accountable officer.
Read this if you're leading personnel, logistics, procurement, finance, estates, digital transformation or IT in a ministry of defence, a headquarters, a defence agency or a service command.
For defence departments and organisations, Scrydon is the sovereign AI and data platform that runs governed agents and analytics across the defence back office, grounded in one ontology of units, assets, personnel and contracts, on classified and air-gapped networks, with legacy systems wrapped rather than replaced and every action attributed to an accountable person.
It runs identically in a national sovereign cloud, in the ministry's own data centres and on disconnected classified networks, so there is one accredited stack from the unclassified service desk to the enclave, and one governance model for every agent.
The largest administration in the country, on the oldest systems
Behind every operation stands an administration that is among the largest in the country. A ministry of defence recruits, trains, pays, posts and moves people, buys and maintains equipment, manages estates, contracts and budgets, and answers to a court of audit and a parliament for all of it. Most of that work runs on systems that predate the internet, and much of it on classified networks that must never touch it, which is why the back office has had little AI at all, or shadow use on unclassified copies.
The data problem is the same one every large organisation has, made harder by classification. Who is where, qualified for what and available when lives in HR, training, medical and unit systems that disagree. Requirements, contracts, deliveries and maintenance sit in separate tools with spreadsheets as the joins. And every decision about a person, a contract or a budget has to be taken by an accountable officer and explained afterwards, so automation has to stop at the point where discretion begins.
Personnel and readiness in silos — Who is where, qualified for what and available when is spread across HR, training, medical and unit systems that do not agree.
Procurement and logistics by hand — Requirements, contracts, deliveries and maintenance live in separate tools; the joins are spreadsheets and the audit is a project.
Networks that cannot be connected — Much of the work happens on classified networks with no AI at all, or shadow use on unclassified copies.
Accountability by law — A decision about a person, a contract or a budget has to be taken by an accountable officer and explained to the court of audit and parliament.
One ontology, governed agents, and the officer decides
The platform models the department in one ontology: units, personnel, qualifications, equipment, readiness, contracts, sites and budgets, mapped from the HR, logistics, finance and estate systems already in use. Legacy mainframes and line-of-business systems are wrapped with governed interfaces rather than replaced, so a posting, a purchase or a maintenance record has one representation while the systems of record stay where they are.
On that model, agents take over the routine: assembling a procurement file and checking it against the rule, drafting a maintenance schedule from readiness and parts data, preparing a posting round, producing the report the auditor asks for. Anything discretionary is routed to an accountable officer, who approves, changes or rejects, and the decision, the rule and the reasoning are recorded together. Where the ministry has to work with other departments or allies, data spaces let it publish governed data products under its own policy without moving raw data.
- 1
Model
Units, personnel, assets, contracts, sites and budgets modelled in one ontology, mapped from the HR, logistics, finance and estate systems already in use.
- 2
Wrap
Legacy systems are wrapped with governed interfaces, so agents read and act through them without a migration.
- 3
Automate
Agents prepare postings, procurement files, maintenance schedules and reports, and route anything discretionary to a person.
- 4
Decide and audit
An accountable officer approves. Decision, rule and reasoning are recorded together for the auditor.
Accredited once, from the service desk to the enclave
A defence department is accredited as a whole, and the platform is built to be accredited once. It runs air-gapped on the classified network with open-weight models served locally and updates through the accredited channel, and the same stack runs connected in a national sovereign cloud or the ministry's own data centres for the unclassified estate. One platform from the service desk to the enclave means one assessment, one evidence set and one governance model for every agent.
Control is enforced where the data is used. Classification is first-class metadata applied at retrieval, so nothing is served above the reader's clearance even inside the same network. Agents act under scoped identities with permissions per system and per action, and every action is attributed. The audit log, the policy decisions and the model inventory that result are the evidence for the security authority, the court of audit, ISO 27001 and the EU AI Act, produced by running the platform rather than written for the review.
Air-gapped where classified — The full platform runs disconnected on classified networks with open-weight models served locally; the same stack runs connected for the rest.
Clearance at retrieval — Document classification is first-class metadata and is enforced when data is read, so nothing is served above the reader's clearance.
Inter-agency without pooling — Data spaces let the ministry share governed data products with other departments and allies without moving raw data.
Evidence by construction — Audit log, policy decisions and the model inventory are the accreditation evidence, produced by running the platform.
Keep an eye on this space
What changed for your sector in European AI sovereignty, and what we learned in the field. A few times a year, no drip campaign.
Use cases for defence departments
Personnel, logistics, procurement and the classified back office on one sovereign platform.
Back Office Automation
Administration
Challenge
Manual approval processes, procurement delays, and administrative burdens slow down operational readiness and consume valuable personnel hours.
Solution
Automate common approval use cases, procurement requests, and HR processes with intelligent agents that ensure policy compliance.
Read more
Streamlined operations allowing personnel to focus on mission-critical tasks rather than paperwork.
Secure Supply Chain Logistics
Logistics
Challenge
Managing sensitive hardware transport requires real-time coordination, but cloud-based logistics platforms expose location data to foreign entities.
Solution
Sovereign agents monitor IoT sensors on edge devices, re-routing shipments based on threat data and weather, communicating only via encrypted channels.
Read more
Resilient automated logistics that functions intermittently offline and leaks no metadata to third-party providers.
Single Source of Truth for Personnel & Assets
Force Management
Challenge
Personnel records, equipment status and unit rosters live in half a dozen legacy systems that don't agree with each other, so a simple question like "which units have this equipment operational today" takes a manual reconciliation exercise.
Solution
An ontology models personnel, equipment and units as entities once, mapped from every source system, so "this unit" or "this asset" means the same thing everywhere it's referenced.
Read more
Force readiness questions that used to take a data call across multiple systems now resolve instantly against one consistent model.
Air-Gapped AI for Classified Government Data
Classified Networks
Challenge
Ministries, intelligence services and national security bodies hold data at RESTRICTED and above that can never touch the internet, so they get no benefit from AI at all, or staff quietly use consumer tools on unclassified copies.
Solution
The complete platform, with open-weight models, retrieval, agents and analytics, runs inside the classified network with no outbound connection, and updates arrive through the accredited channel the network already uses.
Read more
AI on classified material with nothing leaving the enclave, one accredited stack instead of scattered pilots, and a full audit trail for the security authority.
What Defence Departments & Organisations has to comply with
The regulations that decide whether AI can run on this data at all. Each page lists what the framework asks and which platform controls answer it — properties and refusals, not a checklist.
ISO 27001 · ISO/IEC 27001
Applies to: Any organisation that operates an information security management system — routinely required of software vendors, service providers and regulated enterprises by customers, regulators and procurement.
How the platform supports itAI Act · EU AI Act
Applies to: Providers, deployers, importers and distributors placing AI systems on the EU market or whose AI output is used in the EU.
How the platform supports itGDPR · General Data Protection Regulation
Applies to: Any organisation that processes the personal data of people in the EU/EEA, whether established in the Union or offering goods, services or monitoring from outside it.
How the platform supports itISO 42001 · ISO/IEC 42001
Applies to: Any organisation that develops, provides or uses AI systems and wants a certifiable management system for doing so responsibly — providers and deployers preparing for the EU AI Act in particular.
How the platform supports it
What these outcomes actually run on
A ministry's architect asks whether it runs on the classified network, how legacy systems are integrated and how agents are governed. These are the pages that answer those questions.
Sovereign Foundations
The zero-trust foundation the whole platform sits on — the same stack from air-gapped to cloud.
Air-Gapped
The full platform running offline, on networks with no route to the internet.
AI OS
The runtime that maps a process to steps, routes each step to a system, an agent or a person, and gives it the context to act.
Ontology Based Data Platform
The semantic layer that turns tables into the entities your business talks about.
Data Spaces
Data shared across organisational boundaries without handing over ownership of it.
AI Governance
Policy, data-loss prevention and audit applied to every AI action, with the evidence an assessor can read.
Frequently asked questions
Can AI automate the defence back office without replacing our legacy systems?+
Does it run on the classified network?+
How do we get one view of personnel, readiness and assets?+
How do we share with other departments and allies without handing over data?+
How is an agent's action attributed for the auditor?+
Do you partner on tenders and framework contracts?+
Prefer to write? Email hello [at] scrydon.com and we will get back to you.
Keep going
Three routes from here: the rules you will be measured against, the platform these outcomes run on, and the sessions where we walk through them.
The rules that apply
Each regulation, what it asks, and the controls the platform provides for it.
The platform behind it
The AI Operating System, Analytics and Sovereign Foundations, page by page.
Every use case
All of them in one place, grouped by the sector that knows them best.
How – Inside the AI OS: running governed agents on your own cluster, live
17 Sept 2026, 09:00
Part 2 of the Sovereign AI series, for engineers and architects. No slides after minute five: an agent gets an identity and scoped permissions, calls tools over governed MCP, retrieves from the ontology rather than raw tables, runs inside the sandbox and is stopped when it steps outside policy, and everything lands in the audit trail — then the same stack brought up on a disconnected network. Properties and refusals, shown rather than claimed.
Other parts of Defence
The other dedicated pages under Defence, and the sector overview they hang off.
NATO & Allied Interoperability
Coalition operations and exercises: one common picture with per-nation releasability, agents across domains and nations, and lessons that carry from one exercise to the next.
Read the pageDuring Missions
Operations, command and control, ISR and the tactical edge: one common operational picture, a live battlespace twin and multi-domain agents under command approval, on disconnected networks.
Read the pageDefence Industrial Base
Primes, integrators and suppliers: export-control-aware engineering assistants, programme digital threads and sub-tier supply-chain mapping inside the company's perimeter.
Read the page