- Leonardo has connected more than 5,000 suppliers, 87% SMEs, to the AirSupply platform, and assesses 500 of them on about 200 KPIs with LEAP. Visibility flows down from the top: the prime sees you, you don’t see who sits below you.
- EDIP puts 1.5 billion euros on 2025-27 and requires non-EU components to stay under 35% of cost: to comply you have to know the origin of every component, and today that data lives in emails.
- Connext Filiere in Italy and SVI Connect in Germany match supply and demand. They are matchmaking, not software: neither produces the aggregate capacity map.
- The map cannot belong to a prime, because the prime is part of it. What is needed is a federated, sovereign layer: one node per plant, data that stays with the company, the buyer sees the status and not the content.
- Starting tomorrow an SME can build its own single-source supplier map, first in a sheet and then in a system, and ask districts and the Ministry for the same thing one level up.
The prime sees you. Whom do you see?
Leonardo has connected more than 5,000 suppliers to the AirSupply platform, 87% of them small and medium enterprises, with more than a thousand fully integrated; with the LEAP program it assesses 500 suppliers on about 200 KPIs. It is the most extensive digitization Italy’s defense supply chain has ever seen, and it came from the top: the platform serves the prime contractor, to see its suppliers, receive order confirmations, and measure deliveries.
For a supply-chain SME this means one more portal, one more confirmation cycle, and a dashboard that measures it. It means obligations. Visibility stays above. If your prime knows in real time when you deliver, do you know as much about your second-tier suppliers? About the heat treatment you outsource, the raw-material supplier, the electronics that arrive from a distributor? In most of the companies we have met, and in the national aerospace cluster alone 220 companies out of 276 are SMEs, the answer is a person making a phone call.
Sees
More than 5,000 suppliers on the platform, 500 assessed on about 200 KPIs.
Is seen by
The ministry and end customers, by contract.
Sees
Its own suppliers, usually by phone and email.
Is seen by
The prime, in real time: order confirmations, deliveries, KPIs.
Sees
Its own suppliers, on a good day.
Is seen by
Nobody beyond the direct customer. The country of origin lives on a delivery note.
Supply-chain digitization came down from the top for the prime’s compliance. It gave the SME obligations. Visibility stayed above.
A rule that requires a piece of data nobody has
The European Defence Industry Programme, EDIP, given final approval in December 2025, puts 1.5 billion euros on 2025-27 and sets a simple rule: in funded projects, components from non-EU countries cannot exceed 35% of cost. It is a rule about the supply chain, and to comply you have to know the origin of every component, tier by tier. Today, in an SME, that data lives in emails with the supplier, on delivery notes and, on a good day, in a spreadsheet column updated by hand.
That is the whole paradox. European funds, Readiness 2030’s 800 billion and SAFE’s 150 included, reward whoever can prove provenance; the industrial base that has to prove it is made of more than 2,500 SMEs that never needed a system to do so. Oliver Wyman, analyzing more than 600 sub-tier suppliers, says it another way: most supply chain departments do reactive problem-solving, one issue at a time. A component’s origin stays a detail until someone asks for it. Then it becomes a problem all at once.
Matchmaking yes, software no
Institutional answers are arriving. In Italy Confindustria launched Connext Filiere in June for aerospace and defense, with Leonardo, Fincantieri, and Avio Aero as anchors: a sector worth 21.4 billion euros with 54,300 employees, where more than 80% of companies are SMEs. In Germany, the same month, BDSV and BME opened SVI Connect to connect SMEs with the large defense groups. In France Sopra Steria and the Ministère des Armées are working on SME access to defense markets.
They are all useful initiatives, and they are all the same thing: they match supply and demand. A prime looks for a machining supplier, an SME presents itself. None of the three produces the missing data, that is how much the supply chain as a whole can produce, with which components, and from where. That data does not come from a digital trade fair. It comes from the plants, one by one, and from a way to add them up without anyone having to hand their numbers to a competitor.
What federated means, and why the map cannot belong to a prime
The aggregate map of production capacity cannot belong to a prime contractor, for a simple reason: the prime is part of it. Leonardo knows how much its suppliers can produce for Leonardo; it does not know, and must not know, how much they produce for Fincantieri or for a German prime. The reverse holds too. And an SME that handed its numbers to a platform owned by a customer would lose the only bargaining lever it has.
Federated means this: one node per plant, owned by the company, holding its data and its rules. Nodes talk to each other by each one’s rules. The buyer, or a ministry, sees the status, how much and when and from where, without seeing the content: neither prices, nor drawings, nor the full customer list. Technically it is less exotic than it sounds. It is the same principle as data sovereignty applied to a network instead of a single company, and the governance that makes it possible, information classes and written rules, is the one in the second piece of this series.
An American case shows it can be done. L3Harris reports rebuilding, with Palantir’s platform, the country of origin of its products’ components by reading millions of shipping documents, and using the same tool to find shortages in night-vision goggle production. It is proof that provenance can be rebuilt from documents that already exist. In Europe the same work has to be done without bringing the data of 2,500 companies inside a single vendor, and that is exactly why the layer has to be federated.
The deterrent was the capacity to produce
In Venice, between the sixteenth and seventeenth centuries, the Arsenal employed thousands of people and, by tradition, could launch a galley a day in an emergency, with assembly lines, standardized parts, and orderly warehouses. Rival powers feared the factory that could build a galley a day more than the fleet already at sea. The deterrent was production capacity, made visible and known to all.
Four centuries later the principle is the same, and Commissioner Kubilius’s number in the first piece of this series, four million shells versus two, says Europe lost visibility over its own capacity even before the capacity itself. That is what the map is for: to know, and to make known, how much the supply chain can produce. It is the piece of deterrence built with software, in the factory and between factories, and one that cannot be built at the front.
What an SME can do, and what to ask those above
The first thing needs no software. It is the single-source map of your own suppliers: a sheet, one row per component, with supplier, country of origin, cost share, lead time, qualified alternative, and date of the last check. In most companies this sheet exists in three partial versions, in purchasing, quality, and production; making it one is a month’s work, and it pays for itself at the first EDIP or prime-contractor question.
| Component | Supplier | Country of origin | Cost share | Lead time | Qualified alternative | Last check |
|---|---|---|---|---|---|---|
| Light-alloy raw part | Supplier A | IT | 18% | 6 wks | Yes (Supplier D) | 03/2026 |
| Heat treatment | Supplier B | DE | 4% | 2 wks | No | 11/2025 |
| Electronic board | Distributor C | to be checked | 23% | 14 wks | No | never |
The second is to move that sheet into the one place where the company’s know-how and rules live, so that it updates from delivery notes and orders instead of by hand, and an agent in production can answer the question “where does this component come from” with the source. It is the step where the sheet becomes a node.
The third is a question to ask the district, the cluster, and the Ministry: is there a federated layer where my node can talk to the others without handing over my data? Today the answer is no. The 2026 AI and Defense Strategy talks about data consolidation and open architectures against lock-in, and it is the right frame; the federated layer for SMEs, one node per plant, is what is still missing, and it is worth raising a hand for.
Supply chain, visibility, and data, in practice
What is AirSupply and what changes for an SME supplying Leonardo?
AirSupply is the supplier collaboration platform adopted by Leonardo, extended to more than 5,000 suppliers, 87% SMEs, with more than a thousand fully integrated. For an SME it means managing orders, confirmations, and deliveries on the prime’s portal and being measured, with LEAP, on about 200 KPIs. It gives the prime visibility over the SME; it gives the SME no visibility over its own suppliers.
What does EDIP require on non-EU components?
The European Defence Industry Programme, given final approval in December 2025 with 1.5 billion euros for 2025-27, requires that in funded projects components from non-EU countries not exceed 35% of cost. To comply you have to know the origin of every component along the supply chain, a piece of data that in most SMEs lives in emails and delivery notes.
Do Connext Filiere and SVI Connect solve the visibility problem?
No. Connext Filiere in Italy and SVI Connect in Germany match supply and demand between large groups and SMEs: useful matchmaking, not supply-chain software. Neither produces the aggregate map of production capacity or the origin of components, which come from the plants one by one.
What does a federated supply chain mean?
One node per plant, owned by the company, holding its data and its rules. Nodes talk to each other by each one’s rules and the buyer, or a ministry, sees the status, how much and when and from where, without seeing prices, drawings, or customers. It is data sovereignty applied to a network instead of a single company.
Why can’t a prime contractor build the production capacity map?
Because it is part of it. A prime knows how much its suppliers produce for it, not how much they produce for competitors, and it must not know. An SME that handed its numbers to a platform owned by a customer would lose the only bargaining lever it has. The map has to sit on a federated layer, with the data staying inside each company.
Where does an SME start to map its suppliers?
From a single-source sheet: one row per component with supplier, country of origin, cost share, lead time, qualified alternative, and date of the last check. It is a month’s work, merging the partial versions held by purchasing, quality, and production. Then the sheet moves into the one place where the company’s know-how and rules live, so it updates from delivery notes and orders and becomes a node.
Sources
- [1]SupplyOn, “Leonardo extends AirSupply to the entire supply chain and kicks off second phase of LEAP”. www.supplyon.com
- [2]Industria Italiana, “LEAP, Leonardo e AirSupply”. www.industriaitaliana.it
- [3]Council of the EU, “European Defence Industry Programme: Council gives final approval”, December 8, 2025. www.consilium.europa.eu
- [4]European Parliamentary Research Service (EPRS), briefing on European rearmament, 2025. www.europarl.europa.eu
- [5]BNP Paribas Economic Research, Readiness 2030 one year on, March 2, 2026. economic-research.bnpparibas.com
- [6]European Commission, Defence SMEs. defence-industry-space.ec.europa.eu
- [7]Forbes, Oliver Wyman, “European defense buildup may cause supply chain delays and shortages”, June 25, 2025. www.forbes.com
- [8]L’Imprenditore, “Aerospazio e difesa, Confindustria punta sulle PMI: nasce la piattaforma Connext Filiere”, June 2026. www.limprenditore.com
- [9]Oplan, “Deutsche Rüstungsindustrie startet Plattform zur Stärkung der Lieferketten”, June 3, 2026. oplan.de
- [10]Sopra Steria, “Sopra Steria and the French Ministry of Defence join forces to support SME access to defence markets”. www.cs-soprasteria.com
- [11]L3Harris, “Palantir and L3Harris: reindustrializing defense through AI”, December 16, 2025. www.l3harris.com
- [12]Agenda Digitale, “Strategia IA e Difesa 2026: cosa cambia per imprese, filiere e sovranità tecnologica”. www.agendadigitale.eu
- [13]Wikipedia, “Arsenale di Venezia”. it.wikipedia.org
- [14]EU Perspectives, “Kubilius: we ask defence industry to speed up”, April 2026. euperspectives.eu
- [15]L’Imprenditore, CTNA, “Aerospace: a growing supply chain, 80% of the sector is SMEs”. www.limprenditore.com
This page is written by Raffaele Zarrelli, founder of Yempik, with editing done with Claude. It is the third piece in the series on AI for the defense factory and supply chain. Every number links to its source in the text; the reference to the Venetian Arsenal is historical and reported by tradition. No client data or name appears in the piece; companies named are named for public facts. It is about supply chain, data, and rules; no weapon systems, no geopolitics, no legal advice.
Do you run a company in the supply chain? Let’s discuss this thesis.
If you lead a defense SME, a district, or a technical office that sees the supply chain up close, write to us. We sell nothing on the first call: we want to know whether the federated map holds inside your supply chain, or whether we are getting something wrong.