Governance

Regulatory Sandbox

Controlled environment for testing innovative AI under regulatory supervision.

How the laws define this

Establishing a regulatory sandbox provides a controlled, supervised framework where developers, startups, and organizations can test innovative artificial intelligence systems, products, or business models prior to full market deployment. Authorities agree that sandboxes foster innovation while maintaining safety, public interest, and regulatory oversight. The primary divergence involves eligibility criteria and legal relaxations. Both the Roadmap for the Regulation of Artificial Intelligence in Ukraine and the White Paper on Artificial Intelligence Regulation in Ukraine explicitly restrict testing to systems with medium or high human rights impact. In contrast, instruments like the Hanoi Smart City Development Action Plan to 2030 and the Karnataka IT Policy 2025-2030 AI Mission apply sandboxes broadly to new products, services, or business models without impact restrictions. Furthermore, while the Lithuanian Artificial Intelligence Strategy and Sveriges nationella AI-strategi (2026) grant temporary regulatory exemptions or relief, Finland's Laki tekoälyasetuksen toimeenpanosta emphasizes supervised testing to demonstrate compliance without mentioning legal waivers.

Synthesised from the 24 statutory definitions below. Each one is quoted in full, with its source.

How jurisdictions differ

What is distinctive in each definition, binding law in force first. Showing 8 of the 25 instruments that define this term; all are listed under Definitions below.

JurisdictionInstrumentStatusWhat is distinctive
European UnionRegulation (EU) 2026/1744 of the European Parliament and of the Council of 8 July 2026 amending Regulations (EU) 2024/1689, (EU) 2018/1139 and (EU) 2023/1230 as regards the simplification of the implementation of harmonised rules on artificial intelligence (Digital Omnibus on AI)In ForceSpecifies simplification of AI compliance obligations for developers and deployers through controlled environments established by competent authorities.
SloveniaAct on the Implementation of the (EU) Regulation on Harmonised Rules on Artificial IntelligenceIn ForceManaged specifically by the Ministry for Digital Transformation with defined conditions, oversight, reporting and safeguards.
Tatarstan, RussiaTatarstan Autonomous Vehicle Experimental Legal Regime (ELR) ProgramIn ForceCreated by an experimental legal regime with relaxed regulatory requirements for testing autonomous vehicles in logistics.
IranStatute of the National Artificial Intelligence OrganizationIn ForceAllows companies certain legal relaxations while testing innovative AI applications.
FinlandAct on the Implementation of the Artificial Intelligence ActIn ForceLimits testing to providers developing innovative AI systems before market placement.
GermanyAct on the Implementation of Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 on Laying Down Harmonised Rules on Artificial Intelligence and Amending Regulations (EC) No 300/2008, (EU) No 167/2013, (EU) No 168/2013, (EU) 2018/858, (EU) 2018/1139 and (EU) 2019/2144 and Directives 2014/90/EU, (EU) 2016/797 and (EU) 2020/1828 (Act on the Implementation of the Artificial Intelligence Regulation - AI-MIG)In ForcePromotes AI real-world laboratories under KI-MIG to test under controlled real-world conditions while reducing regulatory burdens.
NorwayDatatilsynet Regulatory Sandbox for privacy-friendly innovation and AI (Sandbox for Responsible AI)In ForceFocuses on piloting privacy-friendly AI and digitalisation projects to clarify data protection law application.
Saudi ArabiaNational Strategy for Data & Artificial Intelligence (NSDAI)In ForceAdministered under SDAIA as a formally managed program for piloting AI with time-limited permissions.

What it triggers

  • Under Regulation (EU) 2026/1744, competent authorities establish controlled environments to facilitate compliance and innovation for testing innovative AI systems.source
  • In Slovenia, the Ministry for Digital Transformation manages supervised testing frameworks with defined conditions, oversight, reporting and safeguards.source
  • In Tatarstan, Russia, the ELR Program allows testing new technologies under relaxed requirements with safeguards to inform future legislation.source
  • Under the Act on the Implementation of the Artificial Intelligence Act in Finland, providers can develop and test innovative AI systems before market placement.source

Definitions (25)

A time‑bounded test environment operated under supervisory arrangements that allows controlled piloting of AI applications with specified oversight, risk controls and temporary regulatory flexibilities to evaluate safety, impacts, and liability allocation prior to full deployment.

A formally managed program or environment administered under SDAIA where companies and agencies can pilot AI systems or privacy-enhancing technologies under relaxed or tailored regulatory conditions, with oversight, reporting requirements, and time-limited permissions to evaluate safety, compliance, and commercial viability prior to scaled deployment.

A national experimental framework allowing providers/operators to develop and trial innovative AI systems under regulatory supervision with tailored oversight, reporting obligations, eligibility criteria and exit conditions to facilitate safe innovation while ensuring compliance and learning for regulators.

A supervised testing framework established under the Act and managed by the Ministry for Digital Transformation that permits providers or deployers to trial AI systems under defined conditions, oversight, reporting and safeguards to support innovation while ensuring compliance with safety and legal obligations.

A restricted, supervised environment where AI developers can test systems—particularly those with medium or high human rights impact—against anticipated regulatory requirements, receive guidance and feedback, and refine compliance measures before full market deployment, without immediate legal penalties for non-compliance.

A supervised testing environment where AI developers may evaluate systems (restricted to those with medium or high human rights impact) against anticipated regulatory requirements, receive structured feedback from the Expert Committee, and iterate designs prior to full market deployment; designed as a learning rather than enforcement mechanism during Stage One.

A supervised pilot environment that allows developers and public-sector actors to test AI solutions under controlled conditions with limited regulatory exemptions and oversight, enabling experimentation, evaluation of impacts, and iterative improvement prior to broader deployment.

A sector‑specific, state‑mandated experimental framework where providers and operators can test AI systems under supervised conditions with tailored regulatory support and oversight, enabling innovation while ensuring compliance with safety, transparency and risk‑management obligations laid out in the implementing measures.

A regulatory sandbox is a supervised, time‑limited environment established by authorities (including privacy‑focused sandboxes) in which innovators can pilot novel AI applications under tailored oversight and temporary legal/regulatory clarification to assess risks, compliance needs, and real‑world impacts before broader deployment.

A controlled environment where organisations can test innovative products or services with regulatory oversight and tailored guidance; used to pilot privacy-friendly AI and digitalisation projects while clarifying how existing data protection law applies and how to operationalise compliance.

A formally authorised testing environment established by national authorities where providers can experiment with AI systems under regulatory supervision and tailored conditions to enable innovation while ensuring oversight, reporting and safeguards for safety and fundamental rights.

A framework set up by a regulator that allows small-scale, live testing of new innovative products, services, business models or delivery mechanisms in a controlled real-world environment. The Hanoi plan encourages such sandboxes for new technologies and services, with an emphasis on transparency, risk management, and public interest protection.

A framework established by a regulator to allow the testing of novel technologies and business models in a controlled environment, often with temporary waivers or relaxations of regulatory requirements, to foster innovation.

A controlled environment created by an experimental legal regime where new technologies and business models can be tested under relaxed regulatory requirements, with appropriate safeguards, to gather data and inform future permanent legislation. This approach allows innovation to flourish without compromising public safety or existing legal principles.

A framework that allows companies to test innovative AI applications under regulatory supervision with certain legal relaxations.

A framework allowing companies to test AI systems under reduced regulatory oversight to foster innovation while maintaining basic transparency.

A framework that allows providers to develop and test innovative AI systems under regulatory supervision before they are placed on the market.

A regulatory sandbox is a framework set up by a regulator to allow small-scale, live testing of new products, services, business models, or delivery mechanisms in a controlled environment. It enables innovators to experiment without immediate full regulatory burden, while regulators gather insights to inform future policy.

Regulating for Growth BillDefinition 18 of 25

Regulatory sandboxes, or AI real-world laboratories, are environments promoted by the KI-MIG where innovative AI systems can be tested under controlled, real-world conditions. They aim to reduce regulatory burdens for innovators while maintaining safety and ethical standards, fostering trustworthy AI development.

A framework that allows businesses to test innovative products, services, or business models in a live market environment, while benefiting from relaxed regulatory requirements or enhanced regulatory guidance and oversight.

"Regulatory sandboxes" are mechanisms to support innovation, where startups and enterprises can experiment with new AI technologies and business models under a relaxed regulatory environment. This is done with guidance and oversight to facilitate their scaling and success, balancing innovation with safety and ethical considerations in a controlled testing environment.

Controlled environments established by competent authorities to allow for the testing and development of innovative AI systems under regulatory supervision, facilitating compliance and innovation.

Regulatory sandboxes are environments designed to foster innovation by allowing businesses to test new AI models and propositions in a controlled setting. They are equipped with built-in consumer safeguards to mitigate risks while enabling the development of novel AI technologies.

Experimental frameworks that provide a controlled setting for companies and startups to develop and test novel AI products and services, offering temporary relief from specific complex regulations to foster innovation.

A regulatory sandbox is a supervised setting where innovators can test AI applications under controlled conditions. In the declaration, sandboxes are a tool for practical experimentation, learning, and safe deployment.

Not to be confused with

Conformity Assessment

Conformity assessment verifies high-risk AI systems meet requirements before market placement, while regulatory sandboxes enable supervised testing of innovative AI.

Questions and answers

What is a regulatory sandbox under the EU Digital Omnibus on AI?

It is a controlled environment established by competent authorities for testing and developing innovative AI systems under supervision. This facilitates compliance and innovation as per Regulation (EU) 2026/1744.

How does Slovenia implement AI regulatory sandboxes?

The framework is managed by the Ministry for Digital Transformation, permitting trials under defined conditions, oversight, reporting and safeguards. It supports innovation while ensuring safety and legal compliance.

What distinguishes Tatarstan's regulatory sandbox for autonomous vehicles?

It operates under an experimental legal regime with relaxed requirements and safeguards for testing in logistics. The program gathers data to inform permanent legislation.