Thales S.A.

France · owned by Independent (France) · www.thalesgroup.com · 46 vendors

Thales S.A. is a French multinational technology and defense company that designs and builds electrical systems and provides services for the aerospace, defense, transportation, and security markets. The company operates across five major business segments: Aerospace, Defense & Security, Digital Identity & Security, Ground Transportation, and Space. Thales serves governments, institutions, and businesses worldwide, employing over 77,000 people in more than 68 countries.

Resilience scores

Disruption prediction

Thales S.A. has an estimated 11% probability of disruption in the next 6 months.

22 of Thales S.A.'s 46 vendors monitored for disruptions.

Technology vendors

Services catalogue

28 services in catalogue across 8 categories; runs on 46 sub-vendors.

Insights

Last updated 2026-08-14 · revision 18

46 direct vendors, 341 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Thales S.A. exhibits medium migration readiness, characterized by a strong foundation in its modern internal tech stack but significantly constrained by complex regulatory and data residency requirements. The company's adoption of a multi-cloud strategy (Microsoft Azure, AWS, Google Cloud Platform), extensive use of containerization (Kubernetes, Docker, Red Hat OpenShift), and robust CI/CD/automation tools (Jenkins, GitLab CI/CD, Ansible, Terraform) are major strengths, indicating a high technical capability for agile and efficient migrations. Their strong financial position also provides ample resources to fund large-scale migration initiatives. However, the migration process will be highly complex due to stringent regulatory demands, including GDPR, NIS2, ITAR, and EAR, which necessitate strict controls over data location, security, and access. Critically, Thales faces very strict data residency requirements, particularly for government, defense, and classified information, often mandating data processing and storage within specific geographic boundaries (e.g., France, EU, or allied nations). These requirements will significantly limit the flexibility of public cloud deployments for certain workloads, likely necessitating hybrid or sovereign cloud solutions and increasing the complexity and cost of migration. While vendor geographic diversity is good, the 'Vendor Lock-in Risk' is unknown, and the reliance on critical third-party software (as seen with the MOVEit incident) could present challenges if these systems are deeply integrated and difficult to re-platform. The presence of Oracle Database and Microsoft SQL Server alongside PostgreSQL also suggests some legacy database systems that may require more effort to migrate to cloud-native alternatives. Overall, while technically capable, the regulatory and data residency constraints will be significant hurdles, preventing a higher readiness score.

Financials

Three-year financials

Financial Resilience Score: 8/10

Thales demonstrates strong financial resilience underpinned by a substantial order book of approximately €49 billion (roughly 2.4x annual revenue), providing multi-year revenue visibility particularly in defence. The company benefits from a diversified portfolio across defence, civil aerospace, space, and digital identity/cybersecurity, which smooths cyclical exposure. Government-heavy customer mix, including major sovereign customers such as France, UK, Australia and Middle East nations, provides high credit-quality receivables and long-term programs. Cash generation is robust with free operating cash flow of €1,617M in 2023 and over €1,600M in 2024, regularly at or above net income levels. Investment-grade credit ratings (Moody's A3 / S&P A-) further support the resilience profile. Structural tailwinds from European rearmament, with NATO members raising defence spending toward or above 2% of GDP since 2022, provide a durable growth driver. However, resilience is tempered by execution risks on large fixed-price defence and space programs (Space segment reported losses in 2023 and required restructuring in 2024), geopolitical and export-control risks in Middle East sales, and integration complexity from the Imperva acquisition. Concentrated ownership by the French State (~25.7%) and Dassault Aviation (~24.6%) may constrain strategic flexibility.

Key strengths: Order book of ~€49 bn providing 2.4x revenue visibility, Diversified end markets across defence, aerospace, space, and cybersecurity, Government-heavy customer mix with high credit quality, Strong cash conversion with FCF at/above net income, Investment-grade credit ratings (Moody's A3 / S&P A-), Structural tailwinds from European rearmament and NATO 2% GDP defence spending

Risk factors: Program execution risk on large fixed-price defence and space contracts, Space segment losses in 2023 and restructuring in 2024, Geopolitical and export-control risk on Middle East defence sales, Integration complexity and increased goodwill from Imperva acquisition, FX exposure to USD, GBP and AUD, Concentrated ownership by French State (~25.7%) and Dassault Aviation (~24.6%)

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report