Book an Appointment
Funding · State of NRW · NRW.BANK

A 50% grant for your digital AI product

Under its “Digitalisation” track, the NRW programme “Mittelstand Innovativ & Digital (MID)” funds the development of marketable digital products built on key technologies such as AI, machine learning, data mining or AR/VR. The state covers 50% of external development costs, up to €15,000. We build your product as the contractor — with security by design and CRA/AI Act conformity from sprint one.

€15,000maximum grant
50%of eligible costs
5recognised key technologies
Lottery procedure — open year-round16 slots drawn per monthRegister your interest anytime in the NRW.BANK customer portal; slots are drawn monthly. If your entry is drawn, you have 28 days to submit the application — so prepare the product concept and quote now.

What is MID-Digitalisierung?

“Mittelstand Innovativ & Digital (MID)” is a funding programme run by NRW’s Ministry of Economic Affairs (MWIKE); the granting authority is NRW.BANK. The Digitalisation track subsidises the development or substantial enhancement of marketable digital products with high innovation potential. The condition: the product must use at least one key technology — artificial intelligence, machine-learning algorithms, data-mining methods, real-time/high-speed processing or AR/VR — address a concrete target group and promise realistic market exploitation.

Eligible are project-related expenses for external services — exactly the development work an external team like ours delivers for you. The grant is pro-rata funding: 50% of eligible costs, with a minimum of €4,000 and a maximum of €15,000, paid as a non-repayable subsidy. Our approach: your product is built securely from the start — security by design, sound handling of AI risks, and CRA and AI Act requirements designed in rather than retrofitted at a premium.

Looking to digitalise internal processes? See the MID-Digitale Prozesse track

Looking to strengthen your IT security? See the MID-Digitale Sicherheit track

The four building blocks in detail

Each block is part of the funded external service — and directly linkable (anchor link).

01 · Product concept

Use case & application readiness

Approval stands or falls with the justification: high innovation potential, a concrete target group, realistic market exploitation and the use of a recognised key technology. We sharpen your product idea along exactly these criteria.

  • Working out the use case: which problem does the product solve, for whom, and why now?
  • Technology mapping: AI, machine learning, data mining, real-time processing or AR/VR — described verifiably, not as a buzzword
  • Market-exploitation perspective: target group, competition, revenue model — documented application-ready
  • Feasibility assessment including data situation, interfaces and dependencies
  • Result: a project description and quote you can submit within the 28-day window
02 · Development

Secure product development

The core of the grant: the development itself, delivered as an external service. We build AI-powered products with a security team’s eye — so your innovation project never becomes a security liability.

  • Architecture and technology stack matched to use case, data situation and operating model
  • AI integration with judgement: model selection, RAG/agent architectures, protection against prompt injection and data exfiltration
  • Development along secure SDLC principles: threat modeling, code reviews, hardened CI/CD
  • Iterative delivery with testable increments — matching the chosen implementation period of 3 to 12 months
  • Clean handover: source code, documentation and operating guide belong to you
03 · Conformity

CRA & AI Act from sprint one

A new digital product is born into two regulatory waves: the Cyber Resilience Act demands security evidence for products with digital elements, the AI Act transparency and risk management for AI features. Retrofitting is expensive — we design it in from the start.

  • CRA readiness: security by design, SBOM, vulnerability management and update processes as part of the architecture
  • AI Act classification: the risk class of your AI feature, transparency obligations and the required technical documentation
  • Privacy in the product: privacy by design, legal bases for training and usage data
  • Reporting processes and documentation prepared so later CE conformity and customer audits build on them
  • Result: a product you can sell in a regulatorily clean way — including to enterprise customers
04 · Testing & market entry

Hardening & evidence

Before market entry we test the product the way attackers and procurement teams will: technically through security testing, formally through the evidence your customers want to see.

  • Security testing of the new product: application pentest, API and AI-specific test cases
  • Hardening and remediation directly within the development team — short paths instead of findings ping-pong
  • Robust security and architecture documentation as collateral for sales and due-diligence requests
  • Support with the final report: project outcome, added value and exploitation perspective presented clearly
  • Optionally afterwards: operations, monitoring and further development outside the grant

All four building blocks together form the funded external service — the state covers 50% of costs, with a minimum grant of €4,000 and a maximum of €15,000. In the free funding check we verify whether your product idea meets the criteria.

Book a free funding check

The competencies we bring into your product

Each topic with its own page — directly linkable (anchor).

AI & machine learning

From RAG to agent architectures: we build AI features that are product-grade, not just demo-grade. Our own Vami solutions are the proof.

Learn more

Security by design & SSDLC

Threat modeling, secure architecture and hardened development pipelines — security as a property of the product, not an appendix.

Learn more

CRA conformity

Your product has digital elements? Then CRA duties apply: SBOM, vulnerability management, reporting processes — planned in from the start.

Learn more

AI Act conformity

Risk classes, transparency obligations and technical documentation for AI features — so your product is still sellable in 2027.

Learn more

Product pentest

Application and API pentests plus AI-specific test cases — the new product gets tested before your customers and attackers do.

Learn more

Privacy in the product

Privacy by design for training and usage data: legal bases, data minimisation and deletion concepts built into the design.

Learn more

The 50% model: the state pays half

The grant is pro-rata funding on external services — predictable, but with your own share and upfront payment. Here is how the maths works.

50% pro-rata funding

The grant covers 50% of eligible costs. The assessment basis is the quote at the time of application — your own share remains fully predictable.

€4,000 to €15,000 grant

The minimum grant is €4,000 — equivalent to at least €8,000 of project volume. The ceiling is €15,000 at €30,000 of eligible volume; higher spending is allowed, funding stops at the cap.

External services, not in-house work

Eligible are project-related expenses for external services — the work of your external development partner. Your own staff, own hardware or internal effort do not count.

Reimbursement after completion

The programme works on a cost-reimbursement basis: you pay upfront, and the grant is paid out in one sum after project completion, settled invoices and the proof of use.

Worked example: a development project with €30,000 of eligible external services yields the maximum grant of €15,000. The implementation period is your choice: 3, 6, 9 or 12 months — plus time for the proof of use.

VAT is not eligible and is neutral for companies entitled to deduct input tax. No legal entitlement: NRW.BANK decides at its due discretion within available budget funds; the MID-Digitalisierung directive (MBl. NRW. 2026 No. 10) applies as amended.

Who is eligible?

The key requirements and exclusions from the directive and FAQ — we check your eligibility free of charge in the first call.

SME under the EU definition

Micro and small enterprises (under 50 employees, max. €10m turnover or balance sheet) and medium-sized enterprises (under 250 employees, max. €50m turnover or €43m balance sheet) with a registered office in NRW.

A product with innovation potential

Funded is the development or substantial enhancement of a marketable digital product with high innovation potential, a concrete target group and realistic market exploitation — the application must substantiate this.

A key technology is mandatory

The product must use at least one of the five technologies: AI, machine-learning algorithms, data mining, real-time/high-speed processing or AR/VR.

Project not yet started

Only projects that have not yet started at the time of approval are funded — even a legally binding commissioning counts as the start.

A competent contractor

The commissioned company must prove relevant references and competence. Affiliations between client and contractor are excluded.

Blocking period: once every two years

Each company may use this track only once within two years — measured from receipt of the proof of use; affiliated and partner companies count towards this.

De-minimis & no double funding

De-minimis aid under Regulation (EU) 2023/2831 (max. €300,000 per company within three years); no other public grants may fund the same measure.

Excluded sectors

Hospitals, clinics, medical care centres and medical practices as well as agriculture and forestry (except processing/marketing) are not eligible.

Six steps to your funded product

We know the process from funded projects — and prepare the product concept, quote and evidence ready for submission.

01

Funding check & product idea

Free and non-binding: we check SME status and de-minimis headroom, and whether your product idea meets the criteria — innovation potential, target group, key technology.

02

Expression of interest in the portal

You register in the NRW.BANK customer portal and express your interest in the lottery — possible year-round, with no deadline and no documents.

03

Draw & application within 28 days

Slots are drawn monthly. If yours is drawn, the application is unlocked — you have 28 days. With the prepared concept and quote you submit immediately; if you are not drawn, you take part again the following month.

04

Wait for approval

Only the grant notice allows you to commission — any legally binding order placed earlier puts the entire grant at risk.

05

Product development

3, 6, 9 or 12 months, depending on the chosen period: concept, secure development, conformity and testing, delivered iteratively. You settle the invoices upfront.

06

Proof of use & payout

Project completion in the portal, final report with outcome and exploitation perspective, invoices and proof of payment — then the grant is reimbursed in one sum.

Frequently asked questions

Answered at a glance — the NRW.BANK directive and FAQ remain authoritative.

Which products are eligible?

Marketable digital products with high innovation potential — newly developed or substantially enhanced. The product must address a concrete target group, promise realistic market exploitation and use at least one key technology: AI, machine-learning algorithms, data mining, real-time/high-speed processing or AR/VR. The application must substantiate these criteria — and that substantiation is exactly what we work out with you.

Is our in-house development eligible?

No — funded are project-related expenses for external services, i.e. the work of an external contractor. Your own staff, internal effort or own hardware do not count. That makes the programme ideal for bringing in an experienced external development team without carrying the full cost risk.

How does the lottery procedure work?

In two stages: you express your interest in the NRW.BANK customer portal; 16 slots are drawn monthly for MID-Digitalisierung. If your entry is drawn, the application is unlocked automatically and you have 28 days to submit. If not, you take part again the next month without re-registering — which is why the product concept and quote should be ready before the draw.

How much funding do we actually get?

50% of eligible costs, with a minimum grant of €4,000 and a maximum of €15,000. Your project therefore needs at least €8,000 of eligible volume; the cap is reached at €30,000 — higher spending is allowed, funding stops at €15,000. VAT is not eligible.

When is the money paid out?

After the project: the programme works on a cost-reimbursement basis. You commission after approval, pay the invoices yourself first, and submit the proof of use, final report, invoices and payment evidence after completion — then the grant is paid in one sum. Plan for this pre-financing.

Can we combine this with other MID tracks?

The tracks are separate: each may be used once per company within two years — for MID-Digitalisierung the period runs from receipt of the proof of use. The same measure may never be funded twice; a product development project and, say, a separate security or process project are not mutually exclusive in principle. We check the scoping and your de-minimis headroom in the funding check.

Why a security company as the development partner?

Because your new product is sold into a regulated world: the Cyber Resilience Act demands security evidence for products with digital elements, the AI Act transparency and risk management for AI features — and your enterprise customers ask for both in procurement. We build AI-powered products ourselves (our Vami solutions) and design security and conformity requirements in from sprint one instead of retrofitting them expensively after launch.

Funding check: is your product idea MID-eligible?

30 minutes, free of charge: we check eligibility, the key-technology criterion and de-minimis headroom — and prepare the product concept and quote so you can submit right after the draw.

Note: this page is information provided by VamiSec GmbH and not a publication of NRW.BANK or the State of NRW. The funding decision rests with NRW.BANK as the granting authority; no legal entitlement.