Thales HexaForce Is Selling an Open Stack, Not a Closed System. Here Is What That Means for European Defence AI Founders.

On 25 September, Defence News reported that Thales is "quite advanced" in discussions with a number of NATO countries about its artificial intelligence-powered command-and-control system HexaForce defensenews.com. Thales announced HexaForce on 17 September 2026, describing it as a sovereign, AI-enhanced multi-domain C2 system built for NATO and allied nations eurasiareview.com. A product eight days old was already moving into serious procurement conversations. The speed matters as much as the product itself.

The context is not a routine prime-contractor sale. It is a direct commercial response to a structural political problem inside NATO: member states that are uncomfortable with dependence on a single American platform. NATO's Maven Smart System achieved its full technical operational capability on 22 June 2026, confirmed by SHAPE's own press release shape.nato.int. The system met all of Allied Command Operations' requirements and earned full security accreditation for use on classified networks janes.com. That maturity advantage is real, but it is not preventing challengers from gaining traction.

What HexaForce Actually Is

Thales is positioning the system as a multi-domain C2 overlay that can connect to legacy and national systems from the strategic to the tactical level, while allowing users to choose their own AI models and avoid vendor lock-in. That framing is commercially significant: Thales is not asking nations to rip out existing infrastructure. It is selling interoperability as the product.

The architecture is specific. cortAIx is Thales' organisation in charge of AI, made up of 800 engineers and researchers covering the entire development chain from fundamental research to product integration thalesgroup.com. This is confirmed directly on Thales' own website, not just in secondary press coverage. HexaForce incorporates AI developed through cortAIx, integrating large language models and agentic AI technologies, and the platform aims to support operators during all mission phases ciol.com.

The performance target Thales has set is concrete but should be read as a trial objective. Thales is conducting field tests aimed at eventually increasing processing capacity from 100 to 1,000 targets per day airforce-technology.com. That is a programme aspiration under live trial, not a certified operational rate. The technology builds on Artemis.IA, a data platform that has been in use by the French Ministry of Defense since 2023 armyrecognition.com. This is not a green-field prototype. It carries production lineage.

HexaForce spans land, air, sea, cyber, the electromagnetic spectrum, space, and information operations within one C2 architecture, and Thales says the system supports command requirements involving more than 100,000 personnel eurasiareview.com. The AI-enhanced architecture has undergone interoperability testing during NATO CWIX 2026 indefencemag.com.

The Sovereignty Argument Is Doing Real Commercial Work

The political dimension of this product launch is unusually explicit. French officials and the broader European defence establishment have been building the case for an alternative to Maven since before HexaForce existed. The French firms that helped develop Arcadia, a predecessor sovereign C2 system, include Mistral AI, Safran, Thales, and Airbus, as part of a broader push in Paris to strengthen Europe's technological sovereignty in defence euronews.com. Arcadia "is our response to Maven," said a French Army general staff official in a media briefing cited by Defense News defensenews.com.

That framing extends directly into HexaForce. Arcadia uses a decentralised mesh network design and complies with NATO's Federated Mission Networking standards cryptobriefing.com, and those design choices carry over into HexaForce's architecture. The product line is continuous, not parallel.

The procurement signals from individual NATO members are the most commercially significant data points in this cycle. Vice Admiral Thomas Daum, Inspector of the German Cyber and Information Domain Service, confirmed in April 2026 that the Bundeswehr will not select Palantir for its planned military cloud and AI project, citing data-sovereignty constraints that exclude foreign-OEM personnel access to national German datasets grosswald.org. The Bundeswehr is now assessing 30 artificial intelligence tools that could help speed up battlefield decision-making by processing data from drones and satellites, with a prototype expected in the second quarter of 2027 thenextweb.com. Most of the companies involved are German, while French firm ChapsVision is among the few foreign candidates still in the running thenextweb.com.

The Dutch political mandate is a comparable signal. The Dutch State Secretary for Defence stated in the House of Representatives that a "fully fledged alternative" to Palantir must be available within two years techzine.eu. That is a procurement signal, not a preference statement. Timelines like that set RFI and tender cycles in motion.

The Open Stack Is the Market Entry Point

The critical commercial design choice, and the one most relevant to founders, is that HexaForce's architecture supports NATO Federated Mission Networking and Data-Centric Security standards byteseu.com. Thales is not building a closed ecosystem. It is building a platform that requires, and therefore actively creates demand for, specialist components beneath it.

Thales identifies mission planning, operational-picture consolidation, and related C2 functions as areas the system addresses, with the architecture tested during NATO CWIX 2026 indefencemag.com. Each of those functional areas is a potential contract surface for a specialist venture sitting below the orchestration layer.

The competitive environment at NATO level is also becoming deliberately plural rather than sole-source. Following a competitive procurement process, the NATO Communications and Information Agency awarded contracts to Anduril, Palantir, and Athea SAS ncia.nato.int for the first implementation phase of a programme called Enhanced Air Command and Control, or eAirC2, designed to let NATO's Command Structure and member nations share operational information fast enough to keep pace with modern air and missile threats defence-industry.eu. The contracts were signed on 7 July 2026 at the NATO Summit Defence Industry Forum anduril.com. Multi-vendor award structures at NCIA signal that NATO is deliberately keeping options open, not consolidating on a single supplier.

NATO said it would select a single solution for long-term implementation at the end of the assessment period ncia.nato.int. That evaluation window is a live market opportunity for components that can demonstrate interoperability with any of the three platforms.

Where the Tensions Are

Thales is running an asymmetric race. Palantir currently benefits from having a system already integrated into the Alliance's operational environment, while HexaForce is still moving through its deployment and development phase defensenews.com. First-mover integration advantage in C2 is durable: every system that feeds data into a C2 platform creates a dependency that is hard to unwind without retraining users and rebuilding data pipelines.

The "overlay" positioning cuts both ways. It is commercially smart because it does not require displacement of Maven at NATO headquarters. But it also means HexaForce must prove value as an addition rather than a replacement, a harder sell in constrained defence budgets where nations do not want to fund two platforms doing adjacent jobs.

Germany's situation illustrates the tension precisely. Military software programmes often struggle at the integration stage, and one of Palantir's selling points is that its different capabilities sit within a single system. Germany is trying to reach the same point by putting several pieces together, which gives it more control over the technology but also makes the project harder thenextweb.com. The German approach is structurally dependent on a functioning supplier ecosystem beneath whatever coordination layer eventually wins the evaluation.

A German assessment of Arcadia noted that the data and technology powering that system come exclusively from French defence companies, naming Mistral AI, Safran, Thales, and Airbus thenextweb.com. Berlin's concern is that swapping one foreign dependency for another is not sovereignty. That concern is real and will shape how non-French NATO nations approach any Thales-led platform. Founders building genuinely multi-national, EU-wide supplier propositions, rather than French national champions, are better positioned in the German procurement environment.

For Founders

The open-architecture signal is the story. When a prime at Thales' scale builds a platform explicitly designed to let customers plug in their own LLMs and third-party systems, it is not being altruistic. It is acknowledging that the C2 orchestration layer cannot credibly solve every specialist problem internally. That acknowledgment is a procurement opening for ventures with domain-specific capability.

Know which layer you are in. HexaForce competes at the command orchestration layer: situational picture, planning cycles, effector allocation. The functions below that layer, including domain-specific sensor fusion, cyber threat intelligence ingestion, logistics AI, and EW data normalisation, are where specialist ventures can position as components rather than competitors to a prime.

FMN and DCS compliance is now table stakes. HexaForce natively supports NATO Federated Mission Networking and Data-Centric Security standards byteseu.com. Any software product that wants to connect to NATO command infrastructure needs to speak those standards. Arcadia is built to adhere to NATO's Federated Mission Networking standards, a point explicitly contrasted with Maven's certification status cryptobriefing.com. The interoperability argument is becoming the procurement argument. If your product cannot demonstrate FMN compliance, it cannot sit inside the stack that several NATO nations are actively evaluating. Building to those standards early is a moat, not a checkbox.

The German and Dutch signals are the short-term tender window. The Bundeswehr is assessing 30 AI tools with a prototype expected in Q2 2027 and full deployment planned for 2028 thenextweb.com. The Dutch two-year mandate is similarly time-bounded techzine.eu. Both represent MoD-level demand that is not yet matched to contracts. Ventures with sovereign data architecture, EU-based compute, and verifiable FMN interoperability should be in front of both defence ministries now, not waiting for a formal tender notice.

The Arcadia consortium model is worth studying. Mistral AI brings natural language processing and AI reasoning capabilities to Arcadia, Safran contributes defence-specific AI expertise, and Thales and Airbus provide hardware integration and systems engineering euronews.com. A French national LLM was pulled into a defence C2 system alongside primes in clearly defined functional roles. That is not an accident of proximity. Founders building defence-adjacent AI components, particularly those with data-residency guarantees and EU-sovereignty credentials, should be actively seeking consortium positioning on future national C2 programmes, not just direct government sales.

The eAirC2 evaluation is a live market opening for nine months. Under an initial evaluation phase, Anduril will deploy Lattice inside the NATO environment, with the work carried out through Anduril UK and the company's Europe team anduril.com. All three awardees, Anduril, Palantir, and Athea SAS, are building towards a single-source selection ncia.nato.int. Each of those competing platforms needs specialist integrations to demonstrate breadth. Ventures that can demonstrate working integrations with more than one candidate platform now, rather than promising them on a roadmap, are the ones that will get pulled into these conversations.

The sales cycle is long, but the political urgency is shortening it. Thales launched HexaForce on 17 September and was already in "quite advanced" talks with NATO nations by 25 September defensenews.com. That is unusually fast for defence software. The political pressure created by Maven's sole-source position at SHAPE is compressing decision timelines across the Alliance. The window is open. The question is whether European ventures have the compliance posture to walk through it.