Third-country control in EU defence funding: how EDIP, SAFE and EDF each test it

There is no single "EU control test" for defence funding. Three instruments now dominate the landscape — the European Defence Industry Programme (EDIP), the SAFE instrument and the European Defence Fund (EDF) — and each of them applies its own definition of control, its own entity conditions and its own component-origin rules. A company that prepares one answer and reuses it across all three will, sooner or later, answer the wrong question.

This guide sets out what each regulation actually says, at article level, and what facts an organisation should have in order before a call, a tender or a prime contractor asks. It is general information, not legal advice, and it does not determine eligibility under any programme — only the awarding authority does that.

Why "control" is three different questions

Ownership and control tests exist because EU defence instruments channel public money and sensitive capability. Each instrument was negotiated separately, so each defines the concept for its own purposes:

• EDF — Regulation (EU) 2021/697 defines control in Article 2(6) and adds a distinct notion of executive management structure in Article 2(7). The entity conditions sit in Article 9, and Article 9(4) provides for guarantees: a route by which an entity controlled by a non-associated third country (or a non-associated third-country entity) may participate if guarantees approved by the Member State in which it is established are in place.
• EDIP — Regulation (EU) 2025/2643 defines control in Article 2(8), with entity conditions in Article 9 (in particular paragraphs 1, 3, 5 and 6). It adds product-level tests: the component-origin rules in Article 10(3)-(4) (the 35% logic) and the design-freedom condition in Article 10(5).
• SAFE — Council Regulation (EU) 2025/1106 works at the level of the procurement: contractors and subcontractors must meet the establishment and control conditions of Article 16(3); the product must respect the 35% component-cost rule of Article 16(10); and Article 16(11) requires the ability to use, maintain and modify the equipment without restriction from a non-associated third country.

The practical consequence: the same shareholding structure can raise a flag under one instrument and none under another. A veto right held by a non-EU investor, a parent company outside the Union, an executive appointed by a third-country entity — each fact must be read against each regime's own wording.

The EDF test (Regulation (EU) 2021/697)

The EDF entity conditions in Article 9 apply to recipients and to entities involved in an action. Where an applicant is established in the EU or an associated country but controlled (Article 2(6)) by a non-associated third country or third-country entity, participation is possible only under the conditions the regulation sets — including the Article 9(4) guarantees approved by the Member State of establishment.

Two further EDF features matter in practice. First, the executive management structure definition (Article 2(7)) means that influence over management — not only share ownership — is part of the picture. Second, EDF development actions are consortium-based: Article 10(4) requires a consortium of at least three eligible legal entities established in at least three different Member States or associated countries, at least three of which — in at least two different Member States or associated countries — are not controlled by the same entity and do not control each other. Consortium design is therefore itself a control question.

The EDIP test (Regulation (EU) 2025/2643)

EDIP — in force with a EUR 1.5 billion envelope for 2025-2027 and its first work programme adopted on 30 March 2026 — applies its own control definition (Article 2(8)) and entity conditions (Article 9). On top of the entity layer, EDIP tests the product:

• Article 10(3)-(4) — the component-origin rules, commonly summarised as the 35% logic: the cost share of components originating outside the eligible perimeter is capped, and components must not be sourced contrary to the security interests of the Union and its Member States.
• Article 10(5) — design freedom: the supported product must not be subject to restrictions by a non-associated third country that would limit the Member States' ability to use it.

For suppliers this means the question is no longer only "who owns you?" but "where do your components come from, and who can restrict your product?" — questions that reach into the supply chain and into licensing terms.

The SAFE test (Council Regulation (EU) 2025/1106)

SAFE makes up to EUR 150 billion in loans available to Member States for common procurement. Because the money flows through national procurements, the tests bite at contract level:

• Article 16(3) — contractors and subcontractors must satisfy establishment and control conditions, to be verified per procurement.
• Article 16(10) — the cost of components originating outside the eligible perimeter must not exceed 35% of the estimated cost of the end product's components.
• Article 16(11) — the equipment must be usable, maintainable and modifiable without restriction imposed by a non-associated third country.

Suppliers who expect to sell into SAFE-financed procurements should therefore be able to evidence component origin by cost share, and to show that no third-country licence term blocks modification — before the tender, not during it.

The horizon: FDI screening

Ownership questions do not stop at funding instruments. Regulation (EU) 2026/1386 — the new EU framework for the screening of foreign investments — applies from 17 January 2028 (Article 31); until then, Regulation (EU) 2019/452 and the national screening regimes apply. Defence and dual-use activities sit squarely within the minimum sector scope national mechanisms must cover (Article 4(15)). An investor or target preparing a transaction today should treat the national regimes as the operative layer and the 2028 framework as the direction of travel.

What to have in order before anyone asks

The facts are the same across regimes — it is the tests that differ. A well-prepared internal file contains, at minimum: the full ownership chain with percentages and ultimate beneficial owners; any special rights (veto, blocking, board appointment) and who holds them; the composition and nationality profile of executive management; production and development locations; component origin mapped by cost share, with evidence obtainable from suppliers; and any third-country restrictions attached to licences or technology in the product. Each fact should then be read against the specific regime in play — EDF Article 2(6)/9, EDIP Article 2(8)/9/10, SAFE Article 16 — rather than against a generic notion of "control".

Structuring exactly this file — fact by fact, regime by regime, with every question anchored to the relevant provision — is what the DFM Professional Packs are built for. The workbooks produce preliminary flags for internal preparation; they never produce an eligibility determination, which remains the awarding authority's alone.

---

Article references confirmed against the official texts on EUR-Lex (source-check 2026-07-08; latest check 2026-07-12): Regulation (EU) 2021/697; Regulation (EU) 2025/2643; Council Regulation (EU) 2025/1106; Regulation (EU) 2026/1386; Regulation (EU) 2019/452. This article is general information, not legal advice.