What Is a Regulatory Sandbox?
The term comes from software engineering: a “sandbox” is an isolated environment where code runs without affecting the rest of the system. In regulation and urban development, a regulatory sandbox is a framework that allows companies to test new products and services in real market conditions — but with relaxed rules, oversight, and a time limit. If something goes wrong, the consequences stay contained.
The idea originated primarily in finance. The UK's Financial Conduct Authority (FCA) created one of the world's first regulatory sandboxes in 2016, giving fintech startups the ability to test financial products with real consumers under regulatory supervision. According to the FCA, the sandbox offers reduced time-to-market, lower costs, and built-in consumer protection safeguards. Applications are accepted year-round from firms of all sizes and sectors.
From Fintech to Entire Cities
The sandbox concept doesn't stop at financial services. Governments around the world are applying similar models to urban planning, transport, energy, and healthcare. Entire neighborhoods or city districts are being turned into testing zones where autonomous vehicles operate freely, drones make deliveries, and IoT sensors monitor air quality in real time.
According to World Bank data, by 2020 more than 73 regulatory sandboxes had been established across over 57 countries. Over 56% were created between 2018 and 2019, while roughly 20% appeared in just the first half of 2020 — a sign of explosive growth. The East Asia and Pacific region leads in sandbox numbers, closely followed by Europe and Central Asia.
UK FCA Example: The FCA accepts applications from companies of all sizes — startups, banks, technology firms. Each test has a clear objective, limited scale, and a specific time frame. Firms can apply at any point throughout the year.
NEOM: The World's Largest “Sandbox City”
If any project embodies the sandbox city idea at extreme scale, it's NEOM in Saudi Arabia. Incorporated in 2019, NEOM spans 26,500 square kilometers on the northwest coast and aims to become the “city of the future” — a massive testbed for technologies that would be impossible to deploy elsewhere.
Within NEOM, distinct districts are being built: THE LINE, a 170-kilometer linear city with no cars; Oxagon, an industrial port city designed from scratch; and Trojena, a mountain tourism destination. Each section functions as a sandbox — a testing ground for autonomous transport, 100% renewable energy, AI-driven urban planning, and biotechnology. By 2024, the NEOM Green Hydrogen Company had completed financing for the world's largest green hydrogen plant.
Europe and the EU AI Act
The European Union embedded the sandbox concept directly into legislation. The AI Act (2024) mandates the creation of national AI sandboxes in every member state. The goal: companies developing high-risk AI — such as credit scoring systems or biometric recognition — can test their products in a controlled environment before launching to the market.
Countries like Spain were early movers with their AI sandbox pilot, while the UK continues to expand its FCA sandbox into areas like stablecoins and open finance. Meanwhile, cities like Trikala in Greece — which has tested autonomous buses for years — already function as unofficial technology sandboxes, even without formal regulatory frameworks in place.
Why Sandboxes Work
Their value comes down to three points:
- Reduced risk: Testing happens with a limited number of users and within a set timeframe. If it fails, losses stay managed.
- Faster innovation: Without a sandbox, a fintech startup could spend years getting full licensing. Inside a sandbox, it can launch within months.
- Better regulation: Regulators see in real time how technology works, and write rules based on data instead of assumptions.
The Risks Worth Watching
Sandboxes aren't a cure-all, though. Critics point out that:
- Companies may use sandboxes as a marketing tool without real intent to scale.
- Relaxed rules could expose citizens to risks — for instance, autonomous vehicle tests in residential areas.
- Ambitious projects like NEOM face criticism over human rights, costs, and timeline realism.
- Countries with weak institutional frameworks may lack the oversight capacity a proper sandbox requires.
What Comes Next
The trend is clear: more governments will create sandboxes — not just for fintech, but for AI, autonomous vehicles, drones, digital health, and energy. The EU, through the AI Act, is making sandboxes a mandatory policy tool. Meanwhile, mega-projects like NEOM show what a city-scale sandbox looks like — though with significant caveats.
For smaller, agile cities, the opportunity is real. Compact testing zones can attract startups, create jobs, and make local economies more competitive. What's needed is political will, institutional frameworks — and a properly designed safety net.
Key insight: Regulatory sandboxes are turning entire cities into innovation laboratories. But success depends as much on institutional rigor as it does on the technology being tested.