Last call: SPRI grants of up to €100,000 for cybersecurity and AI in Basque businesses
SPRI has two non-repayable grant programmes open, offering up to €100,000 per company (60% of eligible costs): Artificial Intelligence 2026, closing on 2 November, and Industrial Cybersecurity 2026, closing on 23 November. Both are awarded in the order in which complete applications are received, so it is best not to wait until the last day. Cybertix has experience delivering these projects and meeting SPRI’s administrative requirements, helping you define, implement and document your project.
The two grants at a glance
| Industrial Cybersecurity 2026 | Artificial Intelligence 2026 | |
|---|---|---|
| Deadline | 23 November 2026, 23:59 | 2 November 2026, 23:59 |
| Budget | €14 million (increased from €11 million on 9 October) | €14 million |
| Grant | Non-repayable funding of up to 60% of eligible costs and €100,000 per company per year | Non-repayable funding of 60%, up to €100,000 per company |
| Who can apply | Industrial companies and related service businesses of any size with an operating centre in the Basque Country | Industrial companies and related service businesses of any size with an operating centre in the Basque Country |
| What it funds | Company and product cybersecurity, consultancy, engineering, training and awareness, related hardware and software | AI and data strategy and governance, data infrastructure, AI solutions and skills development |
| Procedure | Awarded in order of receipt of complete applications | Awarded in order of receipt of complete applications |
| Apply | ayudas.spri.eus/ciberseguridad | ayudas.spri.eus/dmdato |
Why you should not wait until the last day
SPRI assesses applications individually, in the order in which they are completed, and funds are limited. It has already increased the Industrial Cybersecurity budget this year, a clear sign of strong demand. The sooner a well-documented application is submitted, the sooner it is assessed and the more likely funding is to remain available.
Can my company apply?
Check these four questions:
- Are you an industrial company or a service business connected to industry? Businesses of any size may apply.
- Do you have an operating centre in the Basque Country where the project will take place, with a direct impact on your activity?
- Do you have a new project that you would commission from an expert external company? Work carried out in-house is not eligible.
- For AI, can you deliver the project within a maximum of 12 months?
If your answers are yes, a quick conversation is worthwhile. If you are unsure, write to us and we will review it with you.
What you can fund and how we help
| If you want to… | How Cybertix helps you |
|---|---|
| Understand your position: assessment, audit and staff awareness measurement | Consultancy and auditing: vulnerability analysis, penetration testing and threat intelligence. |
| Define a strategy: master plan and action plan | Strategic IT, OT and IoT consultancy, with realistic priorities and timelines. |
| Implement measures: network and system protection, detection and response | Cyber defence and 24/7 All-in-One SOC. |
| Achieve certification: ISO 27001, ENS, TISAX and other standards | Compliance and secure AI: gap analysis, implementation and guidance. |
| Protect your product: secure design, code review, vulnerability management and assessment | Secure development and security by design, CRA and IEC 62443-4-1. |
| Train your workforce | CYBERFORGE and cyber exercises. |
| If you want to… | How Cybertix helps you |
|---|---|
| Govern AI: policies aligned with the AI Act and ISO/IEC 42001 | AI governance within Compliance and secure AI. |
| Apply AI solutions to processes and automation | AI, development and cybersecurity team: AI automation. |
| Build secure AI by design | Secure development of applications incorporating AI. |
| Train your team in AI and its responsible use | Training and awareness. |
How we work with you
We have experience delivering these projects and meeting SPRI’s administrative submission requirements. Your company submits the application; we prepare what you need:
- Initial conversation: we check whether your project fits and which grant applies.
- Clear scope: we define the project around eligible project categories.
- A technical and financial proposal tailored to SPRI’s requirements.
- Delivery within the programme deadline.
- Supporting documentation organised from the outset to avoid surprises.
We work for you so you can focus on your business without worries or disruption. We are part of the Basque cybersecurity ecosystem and understand the needs of industry in the Basque Country.
Book a 30-minute call to check your eligibilityFrequently asked questions
Which SPRI cybersecurity and artificial intelligence grants are open in 2026?
Industrial Cybersecurity 2026 (until 23 November) and Artificial Intelligence 2026 (until 2 November). Both offer non-repayable grants of up to 60% of eligible costs and €100,000 per company.
When do applications close?
AI applications close on 2 November 2026 at 23:59; Industrial Cybersecurity applications close on 23 November 2026 at 23:59.
Who can apply?
Industrial companies and related service businesses of any size with an operating centre in the Basque Country, provided the project and investment take place there.
What does “successive awarding” mean?
Applications are assessed individually in the order in which they are completed, while funding remains available. It is therefore advisable to apply early with complete documentation.
Can I apply for both grants?
They are separate programmes with their own rules. Check the official terms for compatibility in your case or ask us to review them.
Is work carried out by my own team eligible?
No. The rules require costs to be incurred with expert external companies and linked to the project.
Can Cybertix submit the application for me?
Your company submits it. Cybertix helps define the project, prepare the technical and financial proposal, deliver it and compile supporting documentation.