Filter Search for grants
Call Navigation
Call key data
Digital Investigations
Funding Program
Internal Security Fund (2021-2027)
Call number
ISF-2026-TF2-AG-CYBER-DIGITAL
deadlines
Opening
15.09.2026
Deadline
15.12.2026 17:00
Funding rate
90%
Call budget
€ 5,000,000.00
Estimated EU contribution per project
between € 1,000,000.00 and € 2,500,000.00
Link to the call
Link to the submission
Call content
short description
The objevtives of this call are (1) developing capacity and expertise of law enforcement and judicial authorities; (2) contributing to the implementation of EU law and strategic documents; and (3) fostering cross-border cooperation between law enforcement/judicial authorities and private entities.
Call objectives
Proposals should focus on:
- Enhancing the operational capacity of law enforcement and/or judicial authorities to investigate cyber-attacks and cyber enabled crime, for instance through specific training, investigative techniques and tools (including for) with a focus on top threat priorities (excluding online child sexual abuse, which is covered by specific calls for proposals) as presented in Europol Internet Organised Crime Threat Assessment 2025. Areas that have been identified by EU Member States as needing particular attention include: digital forensics (mobile forensics, computer forensics, network forensics, IoT forensics including automotive forensics, cloud forensics), visual data analysis, malware analysis and reverse engineering capabilities, cryptocurrencies tracing, identifying and disrupting criminal infrastructures, analysis and seizure, efficient storage, processing, analysis and transfer of big data and large datasets, understanding and exploiting “threat intelligence” and metadata, OSINT, crime involving the use of AI by offenders.
- Enhancing the operational capabilities of law enforcement and/or judicial authorities to address the challenges posed by the use of encryption by criminals and its impact on criminal investigations, for instance through training and/or by supporting the establishment, extension and development of points of expertise and their networking at EU level or supporting the development of a toolbox of alternative investigation techniques to obtain needed information encrypted by criminals (with the exclusion of measures that could weaken encryption in general or could have an impact on a larger or indiscriminate number of people)
- Enhancing the capabilities of law enforcement and/or judicial authorities through the use and/or adaptation of Large Language Models and AI-based solutions to improve analysis, translation, transcription of data as well as detection of AI materials generated for criminal pruposes.
- Enhancing the operational capacity of law enforcement and/or judicial authorities to cooperate across borders, for instance supporting the gathering and provision of digital evidence, supporting the secondment of officials, improving the efficiency of 24/7 (permanent) law enforcement contact points for cybercrime, establishment of dedicated platforms
- Enhancing the cooperation between private entities and/or authorities in the area of cybersecurity and law enforcement and/or judicial authorities, taking remedial action, including by setting of appropriate information exchange systems (or interfaces to make better use of existing systems)
- Increasing and enhancing reporting of cybercrime to law enforcement authorities
read more
Expected effects and impacts
Projects selected under this call for proposals should aim to achieve one or more of the following outcomes in the field of countering cybercrime and supporting digital investigations:
- increasing operational capacity and capabilities of law enforcement and/or judicial authorities,
- increasing the availability of technical tools for law enforcement,
- increasing awareness on best practices and available solutions as well as building synergies amongst relevant stakeholders will be an asset
Expected results
Taking into account important achievements and policy developments in the area of cybercrime and digital investigations so far, the projects should build on scientific material available in the domain and in particular exploit, where possible, publicly available material resulting from relevant projects supported by the European Commission (e.g. under Horizon Europe, ISF) as well as from any other relevant project.
Much of the R&I effort undertaken so far on countering cybercrime, and supported by EU funding, led to findings and outcomes, promising technological prototypes and organisational solutions that should constitute the basis for further development. There is a strong added value in promoting European innovation, as it leads to reinforcement of existing and development of new civil security practitioners’ capabilities. Synergies between Union-funded R&I with the Internal Security Fund can hence facilitate funding to security practitioners and authorities to build on successful research results, support testing, validating or deployment of new methods and technologies stemming from R&I actions.
Projects are not supposed to include a feasibility study or similar scoping exercises: these activities to prepare the practical implementation of the project have to be already carried out as a preliminary step, before the grant agreement is signed.
Proposals that strengthen and clearly link with actions led in the context of EMPACT e.g. through capacity building activities are especially welcomed, in particular those which will contribute to the strategic autonomy of the EU in this domain.
Applications should demonstrate that projects do not duplicate existing work or products and include evidence of user needs. In this respect, applicants are expected to be especially aware of activities deployed by the European Cybercrime Centre (EC3), the Europol Innovation Lab, as well as relevant projects and networks, such as the European Anti-Cybercrime Technology Development Association (EACTDA) that can contribute to the sustainability of project’s result after the end of the project, the European Cybercrime Training and Education Group (ECTEG) that can contribute to the creation of training materials.
When relevant, projects should make use of and build on existing communities of experts in their area of activity: reference to specific communities constituted under previous projects (e.g. CYCLOPES, ULTRA,…) or formed autonomously (for instance those existing on the Europol Platform of Experts) will be considered an asset. Use of existing EC tools or platforms, such as JRC’s analytical platform for monitoring cryptocurrencies activity, will be considered an asset.
The tools developed in the framework of projects under this Call shall be made available for their use to any law enforcement authority (LEA) in the EU, as well as to Europol, at little or no cost. A commitment to distribute developed tools through the Europol Tools Repository will be considered an asset.
To foster they uptake, usability and maintenance, tools developed under this call should not thought in isolation. They should be developed when possible following EU guidance and best practices such as those made availed by EACTDA and Europol on licensing schemes, interoperability or usability.
Law enforcement authorities in the EU should be involved in the full development cycle of the project deliverables. The final tools developed for law enforcement use should be owned by law enforcement in the EU.
Proposals should pay specific attention to the necessary access to realistic datasets for the development, validation and testing of tools. The use of the Europol sandbox can facilitate validation against realistic law enforcement datasets and operational scenarios, thereby supporting a more meaningful assessment of the developed tools. A commitment to test developed tools making use of the Europol sandbox, including setting aside the necessary resources, will be considered an asset. When relevant, the creation of reusable datasets for the trainings, evaluation and testing of solutions is welcome as well.
The applications should clearly demonstrate how this will be implemented, how the ownership will be transferred to the LEA, and how the sustainability of the solution after the end of the project will be ensured.
read more
Eligibility Criteria
Regions / countries for funding
eligible entities
Education and training institution, International organization, Non-Profit Organisation (NPO) / Non-Governmental Organisation (NGO), Other, Private institution, incl. private company (private for profit), Public Body (national, regional and local; incl. EGTCs), Research Institution incl. University, Small and medium-sized enterprise (SME)
Mandatory partnership
Yes
Project Partnership
In order to be eligible, the applicants (beneficiaries and affiliated entities) must:
- be legal entities:
- public or private bodies
- be established in one of the eligible countries, i.e.:
- EU Member States (including overseas countries and territories (OCTs)), excluding Denmark,
- third countries that have an operational agreement with Europol.
Proposals must be submitted by:
- minimum 2 applicants (beneficiaries; not affiliated entities) from at least 2 different participating EU Member States
- the following entities can NOT apply as coordinator:
- profit making entities
- international organisations, irrespective of their country of establishment
- entities established in non-EU countries.
Specific cases and definitions
Exceptional funding - Entities from third countries are only exceptionally eligible, if the third country has an operational agreement with Europol and if they are part of a consortium composed of at least two independent entities, at least one of which is established in an EU Member State. Such entities can ONLY participate as co-beneficiaries.
Natural persons -Natural persons are NOT eligible (with the exception of self-employed persons, i.e. sole traders, where the company does not have legal personality separate from that of the natural person).
Entities without legal personality - Entities which do not have legal personality under their national law may exceptionally participate, provided that their representatives have the capacity to undertake legal obligations on their behalf, and offer guarantees for the protection of the EU financial interests equivalent to that offered by legal persons.
EU bodies - EU bodies can NOT be part of the consortium.
Associations and interest groupings - Entities composed of members may participate as ‘sole beneficiaries’ or ‘beneficiaries without legal personality’.
Countries currently negotiating association agreements - Beneficiaries from countries with ongoing negotiations for participation in the programme (see list of participating countries above) may participate in the call and can sign grants if the negotiations are concluded before grant signature and if the association covers the call (i.e. is retroactive and covers both the part of the programme and the year when the call was launched).
Israeli applicants - With regard to Israeli entities, please follow the Guidelines on the eligibility of Israeli entities and their activities in the territories occupied by Israel since June 1967 for grants, prizes and financial instruments funded by the EU from 2014 onwards.
No projects directly benefitting the Georgian authorities – which include central government, local authorities, agencies and state-owned enterprises – will be allowed. However, if required, regional capacity building events benefiting more than one country involving Georgia can take place at technical level but only if these events are held outside Georgia. The costs of participation for these public officials and similar persons cannot be covered by the EU grant. Assistance to civil society, independent media and countering disinformation is nevertheless possible. Regarding this, do note that under the revised laws, Georgian participants could face criminal liability if they participate or get their travel/accommodation paid for participation in EU-funded events without pre-authorisation by Georgian authorities. Particular caution is therefore required before deciding to invite or fund the participation of Georgian individuals or organisations. A case-by-case risk assessment should be conducted to evaluate whether their participation might be considered to fall under the remit of the law.
EU restrictive measures - Special rules apply for entities subject to EU restrictive measures under Article 29 of the Treaty on the European Union (TEU) and Article 215 of the Treaty on the Functioning of the EU (TFEU) and entities covered by Commission Guidelines No 2013/C 205/05). Such entities are not eligible to participate in any capacity, including as beneficiaries, affiliated entities, associated partners, third parties giving in-kind contribution, subcontractors or recipients of financial support to third parties (if any).
EU conditionality measures - Special rules apply for entities subject to measures adopted on the basis of EU Regulation 2020/2092. Such entities are not eligible to participate in any funded role (beneficiaries, affiliated entities, subcontractors, recipients of financial support to third parties, etc). Currently no such measures are in place.
Following the Council Implementing Decision (EU) 2022/2506, as of 16th December 2022, no legal commitments (including the grant agreement itself as well as subcontracts, purchase contracts, financial support to third parties etc.) can be signed with Hungarian public interest trusts established under Hungarian Act IX of 202128 or any entity they maintain.
Affected entities may continue to apply to calls for proposals. However, in case the Council measures are not lifted, such entities are not eligible to participate in any funded role (beneficiaries, affiliated entities, subcontractors, recipients of financial support to third parties). In this case, co-applicants will be invited to remove or replace that entity and/or to change its status into associated partner. Tasks and budget may be redistributed accordingly.
Additional information
Topics
Relevance for EU Macro-Region
EUSAIR - EU Strategy for the Adriatic and Ionian Region, EUSALP - EU Strategy for the Alpine Space, EUSBSR - EU Strategy for the Baltic Sea Region, EUSDR - EU Strategy for the Danube Region
UN Sustainable Development Goals (UN-SDGs)
project duration
24 months
Additional Information
Proposals must be submitted electronically via the Funding & Tenders Portal Electronic Submission System (accessible via the Topic page in the Search Funding & Tenders section. Paper submissions are NOT possible.
Proposals (including annexes and supporting documents) must be submitted using the forms provided inside the Submission System (NOT the documents available on the Topic page — they are only for information).
Proposals must be complete and contain all the requested information and all required annexes and supporting documents:
- Application Form Part A — contains administrative information about the participants (future coordinator, beneficiaries and affiliated entities) and the summarised budget for the project (to be filled in directly online)
- Application Form Part B — contains the technical description of the project (template to be downloaded from the Portal Submission System, completed, assembled and re-uploaded)
- Part C — contains the project’s contribution to EU programme key performance indicators (to be filled in directly online)
- mandatory annexes and supporting documents (templates to be downloaded from the Portal Submission System, completed, assembled and re-uploaded):
- list of previous projects (key projects for the last 4 years, not limited to EU-funded projects): template available in Part B but to be submitted as a separate annex.
Proposals are limited to maximum 50 pages (Part B without annexes).
Call documents
Call Document ISF- 2026-TF2-AG-CYBERCall Document ISF- 2026-TF2-AG-CYBER(828kB)

