EU AI Act update: Regulation (EU) 2026/1744 was published in the Official Journal on 24 July 2026 and entered into force on 27 July 2026. Check the consolidated AI Act and route-specific application dates before relying on older timelines. Consolidated AI Act EU AI Act update: Regulation (EU) 2026/1744 is in force; check route-specific application dates. Consolidated AI Act

Blog · March 2026 · 8 min read

IMPLEMENTATIONConfirmed deadline with uneven national readiness

AI Regulatory Sandboxes Under the EU AI Act: 2026 Baseline and Digital Omnibus Update

Sandbox timing watch

Regulation (EU) 2026/1744 requires Member States to ensure that at least one national AI regulatory sandbox is operational by 2 August 2027. Verify national implementation, access conditions and competent-authority arrangements before relying on a particular route.

Regulatory update

Regulation (EU) 2026/1744 is in force. Apply the amended route-specific dates.

Regulation (EU) 2026/1744 was published in the Official Journal on 24 July 2026 and entered into force on 27 July 2026. It moves Article 6(2) / Annex III high-risk obligations to 2 December 2027 and Article 6(1) / Annex I product-integrated high-risk rules to 2 August 2028. Article 50 transparency, AI literacy, prohibited-practice and other duties retain route-specific dates. Continue inventory, role classification, vendor evidence, Article 50 trigger review and evidence-file preparation.

Executive Summary

Under the consolidated Regulation (EU) 2024/1689, as amended by Regulation (EU) 2026/1744, Member States must ensure at least one national AI regulatory sandbox is operational by 2 August 2027.

For SMEs, the practical question is whether the relevant national sandbox, access rules and authority process are available; verify those current national facts before applying.

European innovation lab with startup founders, regulator observers, and product engineers testing AI systems inside a controlled compliance sandbox
The sandbox question is moving from policy concept to implementation requirement.

What the law requires

Article 57 remains part of the AI Act. Regulation (EU) 2026/1744 is in force and moves the deadline for Member States to ensure at least one AI regulatory sandbox is operational to 2 August 2027. Use the consolidated AI Act as the current legal source and verify national implementation locally.

Regulation (EU) 2026/1744 gives Member States until 2 August 2027 to ensure at least one sandbox is operational. It does not remove the need for SMEs to map candidate systems, evidence questions, testing safeguards, and regulator-facing documentation.

Why Article 58 matters for SMEs

Article 58 deals with the detailed arrangements. For SMEs, three points matter commercially:

Startup compliance team reviewing sandbox application workflow, testing protocol, and evidence outputs with regulators on screen
The best sandbox use case is not PR. It is faster learning, better evidence, and less conformity waste.

What is happening at EU level

The Commission has already run consultation on a draft implementing act that will set common rules for how sandboxes are established and operated. That is the governance layer you should monitor because it affects access conditions, process design, and how comparable sandboxes become across the Union.

The EDPS has also disclosed an AI Sandbox pilot for EU institutions. That does not solve Member State rollout, but it is a signal that supervisory bodies are already testing sandbox capacity and methods in practice.

What SMEs can actually do now

ActionWhy nowWhat to prepare
Map the system use caseSandboxes are for concrete systems, not abstract “AI strategy”.Purpose, users, data, risk tier, expected benefits.
Define the test questionRegulators need to see what compliance uncertainty the sandbox helps resolve.Specific regulatory unknowns, metrics, safeguards, and stop criteria.
Build an evidence packSandbox participation should generate reusable conformity and governance evidence.Technical docs, risk analysis, human oversight design, logging approach.

Founder recommendation

EU AI Compass should not position sandboxes as a mass-market shortcut. They are still implementation-stage instruments. But you should publish and productise sandbox readiness content now because SMEs will need a way to decide whether applying is worth the effort.

Use the Compliance Checker for risk triage and the Local FRIA Generator to start building the evidence base that a sandbox application is likely to need.

FAQ: AI regulatory sandboxes after the Digital Omnibus agreement

Did the sandbox deadline already move to 2 August 2027?

Yes. Regulation (EU) 2026/1744 is in force and moves the Article 57(1) deadline for Member States to ensure at least one AI regulatory sandbox is operational to 2 August 2027.

Should SMEs wait for the final sandbox date before preparing?

No. SMEs should still maintain a basic evidence file: AI system purpose, owner, vendor, data categories, risk assumptions, human oversight, testing notes, and the reason a sandbox route may be useful.

About the author: Abhishek G Sharma is the founder of Move78 International Limited.

Disclaimer: This page is educational and operational guidance only. It is not legal advice. Published: March 2026. Last reviewed: 2 September 2026.

Official sources checked

Need More Practical Guidance?

Explore the free EU AI Compass tools and guides to classify your use case, understand your obligations, and move to the next compliance step.

Source basis

Update context: Sandbox page updated in Wave 1 P0 to reflect the statutory 2 August 2027 sandbox date and the need to verify national implementation.

Source basis: Regulation (EU) 2026/1744 and Regulation (EU) 2024/1689 as consolidated from 27 July 2026, including Article 57, Article 58 and Article 113. The Commission announcement and Council releases of 7 May 2026 and 29 June 2026 are legislative history, not the current-law source.

Digital Omnibus status: Regulation (EU) 2026/1744 sets 2 August 2027 as the national sandbox operational date; verify the applicable national implementation and access route.

Use limit: This page is for educational and operational planning only. It is not legal advice, a conformity assessment, certification, or a compliance guarantee.