I've just returned from the Munich Security Conference, where I attended alongside our partners at Oracle Corporation.
The tone this year was unmistakable. Europe is taking sovereign defence seriously. It has to. The speeches from leaders including Keir Starmer and Marco Rubio reinforced that the political will is there. The direction of travel is clear.
The open question is pace.
There is broad agreement that Europe must invest more in its own security architecture. That spending needs to happen now, not in three or five years' time. You do not get time back in geopolitics. Delay compounds risk.
But for me, the most important theme was not about budgets. It was about capability, and specifically how policy is limiting it.
In multiple conversations, I found myself reflecting on the same issue.
We use existing rules and processes as a comfort blanket for things we fundamentally cannot do at speed:
- Can we share operational data instantly with an ally like Japan if circumstances demand it?
- Can we procure capability today from outside the traditional defence ecosystem if the need is exceptional?
- Can we integrate an external AI model if it outperforms our own?
- Can we move certain decisions into autonomous systems where speed would materially change outcomes?
Whether we should do any of these things is a strategic choice. That is a legitimate debate. But at present, in many cases, we do not even have the option. Policy removes the choice before strategy is considered.
That is a capability problem.
Speed is a capability. It is not a slogan. In modern defence, tempo shapes outcomes. When adversaries are unencumbered by our governance structures, friction becomes asymmetric. Systems designed for a slower era quietly constrain those trying to operate at modern tempo.
The Strategic Defence Review set an ambition of a wartime footing. That ambition is hard to realise if policy becomes the excuse rather than the enabler.
At Whitespace, we build sovereign AI systems for Defence and National Security because control matters. Sovereignty is about data control, architectural control, and the ability to operate securely across cloud, edge, on-premise and fully air-gapped environments. Our platform, Collective, is designed to connect governed data, reasoning and action inside secure environments with full audibility.
But sovereign capability is not isolation. It is controlled choice.
True sovereignty means having the ability to collaborate with allies at pace, to deploy new capability safely when required, and to evolve frameworks as threats evolve. It means treating speed as something designed for, not something apologised for.
The mood in Munich was serious. The intent is there. Europe understands the stakes.
Now we need to ensure that capability, policy and pace move together. Because in this environment, delay is not neutral.
