NATO / AUKUS / Allied Liaison · Buyer Intelligence
Book 1 · Ch 6 · Choosing the Right Hill

Allied Buyer Map: Five Eyes + NATO Ladder

What the four allied defense-research agencies look like as buyers, what the pathway into each actually requires, and which one NorthAI should enter first.

3.2 · NATO / AUKUS / Allied Liaison · artifact id: allied-buyer-map-v0.html · 2026-05-28 · v0
From Shrink-Wrap It, applied to NorthAI · Ch 6: Choosing the Right Hill
Market access determines speed to market. Products aligned with existing vehicles can be sold immediately upon authorization. Products requiring new vehicle access add 12-24 months.
Shrink-Wrap It · Ch 6 · The right hill is the hill where your capabilities give you the best chance of reaching the summit

The hill-selection logic applies directly to allied-market sequencing. NorthAI has OSI&A-proven intelligence-fusion credentials that map cleanly onto NATO STO's research agenda. That is the existing vehicle. UK DSTL via QinetiQ is the highest-yield hill, but it requires a 12-24 month prime-partnership ramp. The same concentration-beats-diversification principle that governs NorthAI's US product strategy governs its allied entry sequence: one hill first, full resources, then the next.


Headline: The buyer ladder, ranked by entry friction

Five Eyes defense-research agencies and NATO STO/NCIA operate federated procurement regimes that strongly favor cleared primes over direct foreign-vendor sales. US-based vendors like NorthAI enter via two routes: tech-sub under an allied prime (the slow, high-yield path) or research-consortium via NATO STO CONSIST calls (the faster, lower-revenue proof-of-concept path).

The critical sequencing insight (from R7 research, 2026-05-28): NATO STO research partnership is the only allied entry that clears in 6-9 months. Every bilateral agency (DSTL, DST, DRDC) requires 12-24 months of prime-partnership and clearance vetting before first contract. Enter NATO STO first to build allied credibility, then use that credibility as collateral for bilateral agency bids.

Agency cards

UK · Priority 2

UK DSTL

Defence Science and Technology Laboratory. Trading Fund under the Ministry of Defence. Porton Down primary site.

Budget~£200-250M (approx USD $250-300M equiv.)
Workforce~2,400 scientific and engineering staff
AI programsSIGINT automation, HUMINT NLP triage, autonomous C2, cyber defense automation
Vendor routeUS vendor → QinetiQ or Rolls-Royce Defence (UK prime) → DSTL contract
Time to contract12-24 months via prime partnership
BarrierHIGH: UK Trusted Contractor vetting, source-code disclosure, MoD security clearance
NorthAI fitMEDIUM-LOW at current product scope; OSI&A heritage is attractive but NorthStar + Tech Vector need SIGINT specificity to land DSTL interest
Entry move: Approach QinetiQ's US-facing defence analytics practice (QinetiQ Inc., McLean VA) before approaching DSTL directly. QinetiQ Inc. already holds US security clearances and has existing DSTL relationships. A tech-sub arrangement can be structured under QinetiQ's existing DSTL framework contracts within 3-6 months, vs 12-18 months for a direct application.
Australia · Priority 3

Australia DST Group

Defence Science and Technology Group. Executive Agency under the Department of Defence. Primary sites: Fishermans Bend (Melbourne), Edinburgh (Adelaide).

Budget~AUD $260-310M (approx USD equiv. after exchange)
Workforce~1,200 scientists and engineers
AI programsAutonomous systems (Ghost Shark UUV, AUD $1.7B), intelligence fusion, space-based imagery, cyber analytics
Vendor routeUS vendor → BAE Systems Australia or Raytheon Australia → DST Group / DMO contract. ITAR approval required.
Time to contract12-18 months (ITAR approval + FSC vetting + DST relationship)
ITAR gateVERY HIGH: source-code escrow required for SaaS platforms; Australian Facility Security Clearance (FSC) mandatory
NorthAI fitMEDIUM: OSI&A / OUSD R&E pedigree signals Pentagon familiarity; Ghost Shark program signals appetite for US AI integration
ITAR advisory: NorthAI must confirm with US State Department (DDTC) whether Tech Vector and NorthStar fall under USML Category XIV (intelligence-related software) before approaching Australian Defence. Export Control Classification Number (ECCN) determination may qualify for NATO Technology Control Plan (TCP) exemption, which also covers Australia under the AUSMCA defence partnership.
Canada · Priority 4

Canada DRDC

Defence Research and Development Canada. Under the National Defence Act. Centres in Ottawa, Atlantic, Pacific, Toronto (cyber), Valcartier (Quebec).

Budget~CAD $550-650M across all centres (approx USD $400-480M equiv.)
Workforce~800 scientists and engineers
AI programsIntelligence analytics (AI-assisted SIGINT/HUMINT/OSINT fusion at DRDC Toronto), autonomous systems, cyber intelligence, allied interoperability
Vendor routeUS vendor → Thales Canada or CAE as tech sub → DRDC contract. Alternatively: NRC IRAP grant pathway for unclassified R&D (CAD $200K-$1M)
Time to contract12-20 months (ITAR + CISP + Canadian Secret clearance vetting); NRC IRAP grants: 9-12 months
NorthAI fitMEDIUM: Five Eyes heritage familiar; DRDC Toronto intelligence-analytics focus aligns with NorthStar. NRC IRAP is the fastest unclassified entry.
NRC IRAP fast path: The National Research Council Industrial Research Assistance Program (IRAP) is open to US companies and provides CAD $200K-$1M per innovation project without requiring ITAR vetting or Canadian security clearance (for unclassified scope). NorthAI could apply for an IRAP grant targeting "multi-source intelligence fusion for allied interoperability" as a proof-of-concept, then leverage the funded output as the basis for full DRDC procurement engagement.
NATO · Priority 1 (fastest entry)

NATO STO + NCIA

NATO Science and Technology Organization (research consortium) plus NATO Communications and Information Agency (procurement body). Combined annual research and IT budget: EUR 350-450M.

STO budget~EUR 180-220M (research grant pool, multi-national)
NCIA budget~EUR 150-200M (IT operations and procurement)
AI programsSTO: Cognitive Warfare, Decision Support Under Uncertainty, Data Analytics for Defence. NCIA: Air Operations Centre modernisation, Intelligence Fusion Centre, Cyber Defence threat automation
STO entry routePartner with TNO (Netherlands) or Fraunhofer (Germany) to bid a CONSIST call. CONSIST calls open twice per year (April and October). 2-3 month vetting for foreign vendors.
NCIA entry routeRegister NATO NCAGE code (10 business days via US State Dept) + NCIA Neo eProcurement portal. Bid as tech sub to existing NATO prime (Thales, Airbus, Booz Allen).
Time to contractSTO research: 6-9 months total. NCIA procurement: 4-6 weeks for registration + 8-16 weeks per-contract cycle.
NorthAI fitMEDIUM-HIGH: STO CONSIST call on "Multi-Source Intelligence Fusion" or "AI-Assisted Decision Support" maps directly to NorthStar. NCIA FMN modernisation includes AI analytics as an emerging priority.
Fastest path to allied contract: Approach TNO (Netherlands Organisation for Applied Scientific Research) or Fraunhofer Institute (Germany) to co-bid a NATO STO CONSIST call. Both organisations actively seek US partners with Pentagon-pedigree AI credentials. NorthAI's OSI&A heritage is differentiated collateral in a NATO research consortium proposal.

Recommended sequence

1

NATO STO research partnership (now → 6-9 months)

Identify the next NATO STO CONSIST call targeting intelligence analytics or cognitive warfare (calls open April and October each year). Contact TNO or Fraunhofer to propose a co-bid. NorthAI contributes OSI&A-validated multi-source intelligence fusion methodology; the EU partner contributes NATO member status and institutional credibility.

Outcome: NATO STO award + published research = credibility collateral for all subsequent allied bids. Estimated contract value: EUR 500K-EUR 2M over 2-4 years. Non-exclusive; does not block bilateral agency relationships.

2

UK DSTL via QinetiQ (months 4-18)

Approach QinetiQ Inc. (McLean VA) during the NATO STO bid preparation. QinetiQ is the most natural UK prime for DSTL intelligence-analytics work and has an established US presence. Frame the initial conversation as a tech-sub positioning discussion, not a sale. Use the NATO STO bid as the proof-of-concept credential.

Outcome: QinetiQ tech-sub arrangement scoped for a DSTL innovation fund project (typical: £50K-500K, 1-3 years). DSTL contracts are multi-year and sticky once established.

3

Canada DRDC via NRC IRAP (months 3-12, parallel)

Apply for an NRC IRAP grant in parallel with the NATO STO bid. IRAP is unclassified and does not require ITAR or Canadian clearance for unclassified scope. Target topic: "multi-source intelligence fusion for allied interoperability." Use IRAP award as the bridge to DRDC Toronto procurement engagement.

Outcome: CAD $200K-$1M grant. Proof-of-concept for DRDC Toronto. 9-12 month timeline. Lower friction than bilateral intelligence contract.

4

Australia DST via BAE Systems Australia (months 12-24+)

Engage BAE Systems Australia only after US authorization (FedRAMP or IL4) is stable and ITAR ECCN classification is confirmed. Australian Facility Security Clearance (FSC) and source-code escrow requirements are non-negotiable for defence-classified work. The Ghost Shark UUV program and autonomous systems pipeline creates genuine demand for intelligence-fusion capability.

Condition: Do not pursue until US revenue is stable and FOCI analysis (see firewall-precedents-v0.html) confirms the raise structure does not create additional ITAR complications.

Comparison table

Agency Budget (USD equiv.) Vendor route Time to first contract Barrier NorthAI fit Recommended priority
NATO STO ~EUR 200-250M (research grants) Co-bid CONSIST call with TNO / Fraunhofer 6-9 months MEDIUM (2-3 mo vetting) MEDIUM-HIGH First
NATO NCIA ~EUR 150-200M (IT ops) NCAGE registration + tech sub to NATO prime 4-6 weeks entry + 8-16 weeks per contract MEDIUM-HIGH MEDIUM Parallel with STO
UK DSTL ~USD $250-300M equiv. QinetiQ tech sub 12-24 months HIGH MEDIUM-LOW (scale-up required) Second
Canada DRDC ~USD $400-480M equiv. (all centres) NRC IRAP grant; then Thales Canada / CAE sub 9-12 months (IRAP); 12-20 months (classified) HIGH (classified); LOW (IRAP) MEDIUM Third (parallel via IRAP)
Australia DST ~AUD $260-310M BAE Systems Australia tech sub + ITAR + FSC 12-18 months VERY HIGH MEDIUM (post-ITAR confirmation) Fourth (deferred)

Open questions (for Tim + Stephanie to answer before Phase 3 activates)

  1. ITAR status: Has NorthAI sought an Export Control Classification Number (ECCN) determination for Tech Vector, NorthStar, and Defense BD? A controlled classification (USML Category XIV) triggers licensing requirements for all allied-market discussions, including informal conversations with QinetiQ, TNO, and BAE Australia.
  2. NATO Vendor baseline: Is NorthAI or CHN Analytics registered in the NATO Vendor Management System (VMS)? NCAGE code acquisition is a 10-business-day US State Department process that should happen before Phase 3 activates, not after.
  3. Allied investor structure: If the current PE/VC raise includes any UK, Canadian, Australian, or European investor taking a 5%+ board-seat position, FOCI mitigation is triggered. See firewall-precedents-v0.html for structure options before closing any allied round.
  4. OSI&A prime disclosure: Confirming the US prime contractor for the 2018-2023 OSI&A engagement (hypothesized SOSi / Exovera) would significantly strengthen any CONSIST call proposal, as it demonstrates end-to-end intelligence-community delivery at the sub-of-prime level.
  5. Five Eyes data-access gate: Does NorthAI require allied classified data access for product demonstration, or can NATO STO research operate on open-source / NATO Unclassified data? The answer determines whether Trusted Contractor / FSC / CISP vetting is required at the research stage or only at the procurement stage.