The EU AI Act's sandbox deadline arrives
August 7, 2026 · by Eve Harper
Part of the archive: a retrospective issue compiled after the fact so the record is complete. It was not sent to subscribers.
The most consequential sandbox date of the summer was not a product launch. On August 2 the EU AI Act's requirement that every member state run at least one AI regulatory sandbox became operative.
I want to be careful here, because the gap between what the law requires and what actually exists on that date is the whole story.
What moved
EU AI Act Article 57 sandbox obligation is now operative
As of August 2, under Article 57 of the EU AI Act, each member state must have at least one AI regulatory sandbox operational. That is the statutory position. On the ground it is uneven: Spain's AESIA sandbox is the concrete, running example, while many states are still standing theirs up. Read "all 27 now have one" as the legal target, not a description of reality.
Twilio: dedicated email IPs, and a webhook IP change to diary
On the enterprise side, August 6 brought Twilio Email dedicated IPs with an automatic 41-day warm-up, and on August 4 Twilio flagged a new US East regional IP for webhook traffic, effective September 15, for anyone who validates by source IP. The second one is a calendar entry: if you allowlist Twilio IPs, put September 15 down now.
A caveat I will not paper over
There is reporting about a "Digital Omnibus" proposal that may push some AI Act sandbox obligations to 2027. I could not open a primary source that confirms the status of that delay, so I am not going to state it as fact. What I can say cleanly: the Article 57 date is August 2, 2026, and Spain's AESIA is the one clearly operational sandbox I can point to today. If the timeline shifts, you will read the sourced version here first.
Worth a click
- EU AI Act, Article 57 ↗ The actual text of the sandbox obligation.
- AESIA (Spain) ↗ Spain's sandbox and its practical AI Act guidance, the concrete example.
That closes the catch-up. From here, these go out live every Friday. Eve
Sources: EU AI Act, Article 57 ↗, AESIA guides ↗, Twilio changelog ↗