EU–Ukraine Defence Procurement: Eligibility First

The European Commission has approved €6.1 billion in new defence procurement for Ukraine under the Ukraine Support Loan. For suppliers, however, the decisive question is not the size of the envelope. It is whether a specific product, corporate structure, supply chain and contract can pass the eligibility and validation rules attached to the financing.

What was approved — and what was not

On 24 August 2026, the Commission announced approval of €6.1 billion in new defence procurement for Ukraine, covering air and missile defence systems, missiles, ammunition and radars. The amount forms part of the €90 billion Ukraine Support Loan for 2026–2027, indicatively divided into €30 billion for budgetary support and €60 billion for Ukraine’s defence industrial capacities. The Commission stated that the new approval was additional to €16 billion in previously approved procurement plans, of which €8.35 billion had already been disbursed. Commission announcement, 24 August 2026

This should not be read as an open €6.1 billion call for suppliers. Nor does the announcement itself award contracts. Ukraine requests funding on the basis of contracts or agreements and product schedules; the Commission then decides whether the conditions for release are satisfied.

A separate development followed in September. On 8 September, the Commission President publicly welcomed Member State agreement on a derogation enabling Ukraine to purchase crucial products for Patriot air-defence systems. Several implementing decisions dated 11 September formally approved derogations from the standard eligibility rules, including Commission Implementing Decision (EU) 2026/2073. Those decisions concern the legal route for particular products that do not meet the default conditions. They are not the legal act that created or announced the €6.1 billion procurement envelope. Commission statement on the Patriot derogation

That distinction matters. A funding decision, a product schedule, a derogation, a procurement procedure, a contract and a disbursement are different legal steps.

The governing mechanism: product-specific eligibility

The central instrument is Regulation (EU) 2026/467, which established the Ukraine Support Loan through enhanced cooperation. It is directly applicable in participating Member States and has been in force since 27 February 2026.

Chapter IV supports urgent public investment in Ukraine’s defence industry and its integration with the European defence industry. Article 13 does not confer a general status of “eligible supplier”. It makes particular activities, expenditure and measures eligible only if the relevant defence product and implementation method satisfy the Regulation.

The permitted categories are broad. Category one includes ammunition and missiles, artillery, ground combat capabilities, small NATO class 1 drones and related counter-drone systems, critical-infrastructure protection, cyber and military mobility. Category two includes air and missile defence, maritime capabilities, NATO class 2 and 3 drones, strategic enablers, C4ISTAR, space assets, artificial intelligence and electronic warfare.

This breadth creates market relevance, but not automatic access. A company selling an eligible type of product can still be blocked by its ownership, supply chain, manufacturing arrangements, IP restrictions or procurement route.

The five eligibility tests suppliers should run first

1. Establishment and control

As the default rule, manufacturers and relevant production subcontractors must be established and have their executive management structures in the EU, an EEA EFTA State or Ukraine. They must not be controlled by another non-associated third country or an entity established there.

An EU subsidiary is therefore not necessarily sufficient. The analysis must reach the ultimate control structure and determine whether a third-country parent, investor or contractual arrangement can exercise decisive influence. The Regulation permits certain controlled EU-established manufacturers or subcontractors to qualify following investment screening and, where necessary, mitigation, or on the basis of guarantees verified by the Member State of establishment. Those guarantees must protect operational autonomy and prevent unauthorised third-country access to classified or sensitive information.

2. Component origin

The cost of components originating outside the EU, EEA EFTA States and Ukraine must not exceed 35% of the estimated cost of the defence product’s components. No component may be sourced from a third country that conflicts with the security and defence interests of the Union and its Member States.

The denominator is important: Article 13(4)(g) refers to the estimated cost of components, not automatically to the total contract price. A high-level statement that a product is “made in Europe” is not enough. Suppliers need a costed bill of materials, defensible origin methodology, supplier declarations and a process for managing changes in components during performance.

For software-intensive, AI-enabled or autonomy products, the treatment of licences, embedded software and other non-hardware inputs may require product-specific clarification. It should not be improvised after the contract is selected for financing.

3. Production location and subcontractors

The default position is that the infrastructure, facilities, assets and resources used by manufacturers and relevant production subcontractors are located in the EU, an EEA EFTA State or Ukraine. External facilities may be used where no readily available alternative exists and the arrangement does not conflict with EU and Member State security interests.

The Regulation also contains a specific route for certain non-associated production subcontractors allocated between 15% and 35% of contract value. It depends on a qualifying pre-existing contractual relationship or a commitment to study replacement of the input within two years. This is not a general exemption for every external subcontractor; the Article 13 definition and the precise role of the entity must be tested.

4. Design authority and intellectual property

For category-two products, the manufacturer must be able to decide, without third-country restrictions, on the definition, adaptation and evolution of the procured product’s design. This includes the legal authority to substitute or remove components subject to third-country restrictions.

The Regulation does not simply demand formal ownership of every IP right. It demands sufficient legal authority over design evolution and component substitution. A licence, technology-transfer agreement, shareholder veto, source-code restriction or export-control condition may therefore determine eligibility even where the product is technically suitable.

For suppliers of air-defence, larger drone, AI, EW, maritime or C4ISTAR systems, an IP schedule should identify who owns the background technology, who may modify the design, whether source materials are accessible, which third parties must consent and whether the required rights survive a change of supplier or component.

5. Procurement vehicle and contract timing

Article 13(8) permits several implementation methods:

• procurement by Ukraine, validated by the Commission or participating Member States;

• Ukrainian participation in common procurement under the SAFE instrument;

• agreements between Ukraine and Member States or the European Defence Agency;

• procurement agreements with international or intergovernmental organisations; or

• contributions to the Ukraine Support Instrument, the Ukraine Investment Framework for dual-use goods or other EU programmes.

Contracts under these routes may be eligible if signed after 14 January 2026 and if they comply with Article 13. The date rule is necessary but not sufficient. The responsible buyer, legal procedure, validation route and funding request must align.

In practical terms, most companies cannot apply to the Commission for a share of the €6.1 billion. They must enter through a procurement conducted by Ukraine, a prime contractor or consortium, a Member State or EDA arrangement, an international procurement mechanism, or another permitted programme route.

A derogation is exceptional, not a supplier strategy

Article 13(5) allows a non-compliant product to receive financing where Ukraine has an urgent operational need and either no compliant equivalent exists at the necessary scale and speed, or the non-compliant product can be delivered significantly faster. Ukraine must provide the supporting information, including a legal commitment concerning delivery time. The Commission must check the case after consultation with the expert group and approve the derogation by implementing act.

The derogation route has already been used for drones with more than 35% non-EU/EEA EFTA/Ukrainian component value, and the September process concerning Patriot products shows that it can address strategic third-country dependencies. Commission overview of the Ukraine Support Loan and derogations

But a supplier cannot treat Article 13(5) as a routine cure for a non-compliant structure. The request is made and justified within the Ukraine–Commission implementation process. It requires evidence of urgency, lack of an equivalent or sufficient delivery advantage, and a product-specific implementing decision. The commercially stronger position remains compliance with the default rules.

Auditability is part of eligibility

Under Article 14, Ukraine prepares a schedule for each product or measure for which it intends to request assistance. The schedule describes the product and provides information on Article 13 compliance. A funding request must include a compliant contract or agreement — signed or in final draft — and the corresponding schedule.

For direct Ukrainian procurements, validation may include sample checks of contracts, invoices and delivery certificates, supplier inspections and physical verification of deliveries. The Regulation also requires a dedicated account, monthly reporting on payments and recipients, monitoring across the project cycle and Commission access to information needed for checks, audits and investigations. Classified and sensitive information is protected under dedicated security rules.

This changes the supplier’s documentation burden. Evidence should be designed before signature, not reconstructed after a payment query. At minimum, the file should be capable of substantiating:

• corporate establishment, management and ultimate control;

• relevant subcontractors and their share and function;

• component origin and the cost calculation supporting the 35% ceiling;

• location of production assets and any justified external facilities;

• design and IP authority for category-two products;

• export licences, end-use conditions and third-country restrictions;

• contract, invoice, delivery, acceptance and change-control records.

Testing, military acceptance and NATO codification may be commercially or contractually decisive, but they are not universal eligibility conditions created by the €6.1 billion announcement. Their relevance must be established from the technical specification, the selected Ukrainian or European procurement route and the applicable acceptance regime.

Eligibility does not replace export-control or sanctions clearance

Article 13 approval answers whether expenditure may be supported under the Ukraine Support Loan. It does not replace the other approvals required to perform the contract.

EU exporters must separately classify military and dual-use items, identify the competent national licensing authority and assess brokering, technical assistance, transit, re-export and end-use conditions. Dual-use controls are governed at Union level by Regulation (EU) 2021/821; military-export decisions remain subject to national licensing systems operating within the EU framework established by Common Position 2008/944/CFSP. Sanctions screening must cover counterparties, beneficial owners, banks, logistics providers and restricted technology or origin links. Eligibility under the Loan is not a defence to a sanctions or export-control breach.

The contract must then allocate responsibility for licences, approvals, delays, end-use documentation, IP permissions, component substitutions, audit access, record retention and termination if financing or authorisation fails.

What defence suppliers should do now

1. Identify the route. Establish who the contracting authority or procurement agent is, how the product enters an Article 14 schedule and which Article 13(8) method will be used.

2. Classify the product. Determine whether it falls within category one, category two or another product for defence purposes. Category two carries the additional design-authority test.

3. Map control and the supply chain. Prepare the ownership chart, management locations, relevant subcontractors, production sites and a costed origin map.

4. Test IP and third-country restrictions. Confirm the legal ability to adapt the design and replace restricted components. Separate commercial licences from export-control permissions.

5. Build the evidence file. Align supplier declarations, contracts, invoices, delivery certificates, acceptance records and change-control procedures with the validation and monitoring model.

6. Decide before bidding. Record the outcome as Eligible, Potentially eligible subject to remediation or derogation, or Blocked. Do not rely on the funding headline as evidence of market access.

CORVUS perspective

The practical need is a short, defensible legal decision before substantial bid, engineering or partnership costs are incurred. An EU-funded Ukraine Defence Procurement Eligibility Review should test the supplier, product, supply chain and proposed contract against the applicable route and return one of three conclusions: Eligible / Potentially eligible / Blocked, together with evidence gaps and specific remedial actions.

The €6.1 billion announcement confirms demand. Regulation (EU) 2026/467 determines whether that demand can become a financeable contract.

Disclaimer

This article has been prepared by CORVUS AI for general informational and educational purposes only. It is intended to make complex legal and regulatory developments easier to understand.

It does not constitute legal advice and does not create a professional adviser–client relationship. The information should not be relied upon as a substitute for advice based on the specific facts, circumstances and applicable law relevant to your organisation or project.

The article reflects our understanding of the law and regulatory framework as of the date of publication. Legislation, case law, regulatory guidance and administrative practice may subsequently change. While reasonable care has been taken in preparing this article, CORVUS AI does not warrant that the information is complete or remains current after the date of publication. We do not undertake to update this content.

To the fullest extent permitted by applicable law, CORVUS AI excludes liability for loss arising from reliance on this article. Nothing in this article constitutes an offer or solicitation to provide regulated legal services in any jurisdiction where doing so would be unlawful.

AI-assisted preparation: This article was prepared with the assistance of AI tools. Its legal analysis, conclusions and final text were subject to human review and editorial control and were reviewed and approved prior to publication by Oleksandr Sobovyi, Founder & CEO of CORVUS AI. CORVUS AI retains editorial responsibility for the published content.

For advice tailored to your organisation, project or specific circumstances, please contact CORVUS AI.

Complex law. Clear action.