Future-Proofing Compliance in Grant Management: What Funders Need to Know for 2025–2027
Compliance, particularly in the Public Sector, is no longer a background task. For funders in the UK and EU, regulations around artificial intelligence, data, procurement, accessibility, and cybersecurity are reshaping how grant management systems (GMS) must be designed, delivered, and governed. Choosing the right system today is about future-proofing for tomorrow’s obligations.
Artificial Intelligence Act (EU)
The EU’s AI Act is the world’s first major legal framework for AI. Prohibited AI practices have been banned since February 2025. Obligations for general-purpose AI models take effect in August 2025, and duties for high-risk AI systems (such as tools used in funding decisions) apply from August 2026.
Impact on grantmakers: any AI-supported scoring, triage or monitoring must be explainable, logged, and overseen by people. Human-in-the-loop review and auditable decision trails will become standard.
Data Act (EU)
The EU Data Act, applicable from September 2025, strengthens rights around data portability, access, and cloud switching.
Impact on grantmakers: systems must allow secure data export, support contractually defined exit strategies, and avoid vendor lock-in.
UK Procurement Act 2023
In force since February 2025, this act reforms how public bodies procure and manage contracts. A new regime of notices and transparency duties now applies across the grant lifecycle.
Impact on grantmakers: GMS solutions must generate audit-ready data and align to standardised notice requirements.
Accessibility
Accessibility has moved up the compliance agenda.
WCAG 2.2 standards are expected of all UK public sector digital services.
The European Accessibility Act (EAA) becomes enforceable in June 2025, requiring consumer-facing platforms to meet accessibility requirements.
Impact on grantmakers: public portals must be designed inclusively, with accessibility testing and statements embedded.
Cybersecurity & Resilience
NIS2 Directive: enforced nationally from October 2024, applies to many public and research funders.
Cyber Resilience Act (CRA): phased requirements from September 2026 (vulnerability disclosure) and December 2027 (full obligations for digital products).
Impact on grantmakers: expect stricter due diligence on software suppliers, requirements for SBOMs (software bills of materials), and stronger incident reporting.
Identity & Trust
The eIDAS 2.0 regulation requires EU Member States to make the EU Digital Identity Wallet (EUDI) available by the end of 2026, enabling strong, portable digital identities.
Impact on grantmakers: GMS platforms should plan to support secure login via EUDI and other government/enterprise identity providers.
How to Prepare: A Buyer’s Checklist for Grant Management Systems (2025–2027)
When evaluating grant management systems, funders should ensure their platform offers:
Feb 2025 – EU AI Act (Prohibited AI practices banned): Ensure any AI-assisted functions in grant assessment or reporting comply with new restrictions.
Feb 2025 – UK Procurement Act 2023 (Transparency obligations in force): Systems must generate audit-ready exports, aligned with the new notice and transparency regime.
Jun 2025 – European Accessibility Act (EAA): Public-facing portals must comply with accessibility standards; design inclusively (WCAG 2.2 AA).
Aug 2025 – EU AI Act (GPAI obligations): Prepare for controls around general-purpose AI models; ensure explainability and logging.
Sep 2025 – EU Data Act (Applicable): Guarantee secure data portability and cloud exit strategies; avoid vendor lock-in.
Aug 2026 – EU AI Act (High-risk system duties): Implement human-in-the-loop governance, risk management, and full decision audit trails.
Sep 2026 – Cyber Resilience Act (Early obligations): Plan for vulnerability disclosure processes and supplier due diligence.
End 2026 – EU Digital Identity Wallet (EUDI): Prepare for strong, portable identity verification; support government and enterprise IdPs.
Dec 2027 – Cyber Resilience Act (Full obligations): Meet secure-by-design requirements, software bills of materials (SBOMs), and full CRA compliance.
At AIMS, compliance isn’t an add-on. We embed configurable workflows, strong audit trails, accessibility, and integration flexibility so funders can adapt with confidence. Future-proofing your GMS means aligning with both today’s needs and tomorrow’s rules.
-
Grantmaking 101: Standardisation vs Flexibility in Grantmaking
Should grantmakers standardise their processes or allow flexibility across programmes? This article explores how organisations can balance governance, efficiency and consistency with the need for programme-specific design in modern grantmaking.
-
Grantmaking 101: What is a shared grant management service?
Grant programmes rarely sit neatly in one place. Across government, local authorities and public bodies, different teams often manage different funding schemes with their own processes, systems and reporting requirements. But while grant programmes may vary in purpose, many of the core grant management activities are fundamentally the same.
A shared grant management service provides a common foundation for managing multiple grant programmes through shared systems, governance controls and operational processes. Rather than forcing every scheme into a single rigid model, a well-designed shared service standardises the areas that should remain consistent — such as audit trails, reporting, approvals and applicant registration — while still allowing flexibility for different policy objectives and funding models.
For organisations managing grants at scale, shared grant management services can improve governance, reduce duplication, strengthen reporting and create a more consistent experience for applicants and administrators alike.
-
How Manual Grant Processes Slow Teams Down
Manual grant management processes can quietly slow down entire organisations. From spreadsheets and email chains to reporting delays and compliance risks, disconnected workflows create inefficiencies that impact teams, applicants, and leadership alike. This article explores the hidden operational costs of manual grant administration and why more organisations are moving toward modern grant management software.
-
Digital Sovereignty in Grant Management: Why Control, Resilience and Deployment Choice Matter
Digital sovereignty in grant management is becoming a critical priority for public sector and research organisations. As requirements around data control, security, and deployment flexibility increase, grantmakers must ensure their systems can meet evolving regulatory and operational demands.
-
Grant Management Software: A Practical Checklist for Organisations
Learn how grant management software can improve funding tracking, reduce admin, and ensure compliance with this practical checklist for organisations.
-
One Platform, Many Programmes: Scaling Multi-Agency Grant Administration with a Single Grant Management System
How can multiple agencies collaborate effectively when managing shared funding programmes? This article explores how a multi-agency grant management platform can centralise applications, evaluations, reporting and oversight, enabling organisations to coordinate funding programmes more efficiently and transparently.
