Executive Summary
Current law still points to an AI regulatory sandbox establishment route under Regulation (EU) 2024/1689. The 29 June 2026 Council-adopted Digital Omnibus text would move the national sandbox establishment deadline to 2 August 2027 once published in the Official Journal and in force.
For SMEs, the practical question is now two-track: monitor 2026 sandbox readiness under current law, but plan for a possible 2027 operationalisation route while final adoption and publication remain pending.
What the law requires
Article 57 remains part of the current published AI Act operative baseline. The 29 June 2026 Council-adopted Digital Omnibus text would postpone the deadline for national competent authorities to establish AI regulatory sandboxes until 2 August 2027 once it is published in the Official Journal and in force. Treat that later date as adopted-pending-OJ planning content until Official Journal publication and entry into force are verified.
That gives Member States more implementation time if the agreement is adopted. It does not remove the need for SMEs to map candidate systems, evidence questions, testing safeguards, and regulator-facing documentation.
Why Article 58 matters for SMEs
Article 58 deals with the detailed arrangements. For SMEs, three points matter commercially:
- Application, selection, participation, and exit processes are supposed to be simple and clearly communicated.
- SMEs and start-ups should have access free of charge, subject only to exceptional recoverable costs.
- Learning outcomes are meant to help participants with conformity assessment obligations and code-of-conduct uptake.
What is happening at EU level
The Commission has already run consultation on a draft implementing act that will set common rules for how sandboxes are established and operated. That is the governance layer you should monitor because it affects access conditions, process design, and how comparable sandboxes become across the Union.
The EDPS has also disclosed an AI Sandbox pilot for EU institutions. That does not solve Member State rollout, but it is a signal that supervisory bodies are already testing sandbox capacity and methods in practice.
What SMEs can actually do now
| Action | Why now | What to prepare |
|---|---|---|
| Map the system use case | Sandboxes are for concrete systems, not abstract “AI strategy”. | Purpose, users, data, risk tier, expected benefits. |
| Define the test question | Regulators need to see what compliance uncertainty the sandbox helps resolve. | Specific regulatory unknowns, metrics, safeguards, and stop criteria. |
| Build an evidence pack | Sandbox participation should generate reusable conformity and governance evidence. | Technical docs, risk analysis, human oversight design, logging approach. |
Founder recommendation
EU AI Compass should not position sandboxes as a mass-market shortcut. They are still implementation-stage instruments. But you should publish and productise sandbox readiness content now because SMEs will need a way to decide whether applying is worth the effort.
Use the Compliance Checker for risk triage and the Local FRIA Generator to start building the evidence base that a sandbox application is likely to need.
FAQ: AI regulatory sandboxes after the Digital Omnibus agreement
Did the sandbox deadline already move to 2 August 2027?
Not as final law yet. The current published EU AI Act remains operative until OJ publication and entry into force, while the 29 June 2026 Council-adopted Digital Omnibus text would move the sandbox establishment date to 2 August 2027 once published in the Official Journal and in force.
Should SMEs wait for the final sandbox date before preparing?
No. SMEs should still maintain a basic evidence file: AI system purpose, owner, vendor, data categories, risk assumptions, human oversight, testing notes, and the reason a sandbox route may be useful.
About the author: Abhishek G Sharma is the founder of Move78 International Limited.
Disclaimer: This page is educational and operational guidance only. It is not legal advice. Published: March 2026. Last reviewed: 30 June 2026.
Official sources checked
- https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-57
- https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-58
- https://digital-strategy.ec.europa.eu/en/consultations/commission-seeks-feedback-draft-implementing-act-establish-ai-regulatory-sandboxes-under-ai-act
- https://www.edps.europa.eu/system/files/2026-03/2026-03-04-imco-libe-ai-act-wg_en.pdf
- https://ec.europa.eu/commission/presscorner/detail/en/ip_26_1024
- https://www.consilium.europa.eu/en/press/press-releases/2026/05/07/artificial-intelligence-council-and-parliament-agree-to-simplify-and-streamline-rules/