The European Commission published EN 18286:2026 in the Official Journal as the first harmonised standard supporting the AI Act. Developed by CEN and CENELEC, it gives providers of high-risk AI systems a legal pathway to meet the quality management system requirements in Article 17. The publication follows Commission Implementing Decision (EU) 2026/2274; providers implementing the standard receive a presumption of conformity for the Article 17 requirements it covers.

EN 18286 turns Article 17 requirements into an operational quality management system (QMS) built around the AI system lifecycle rather than the organisation. It is the only AI QMS standard with a presumption of conformity. Providers can layer it on ISO/IEC 42001, ISO 9001 or a sectoral QMS such as ISO 13485, rather than replace those standards. It also allows regulated-sector providers to integrate the requirements into existing systems instead of running a parallel one. Organisations without ISO/IEC 42001 can use EN 18286 to extend an existing QMS or create their first one before placing high-risk AI systems on the EU market or putting them into service.

The standard marks a milestone in implementing the AI Act ahead of high-risk AI system requirements applying in December 2027 and August 2028. The Commission says further harmonised standards are expected to follow.

The European Commission published EN 18286:2026 in the Official Journal as the first harmonised standard supporting the AI Act. Developed by CEN and CENELEC, it gives providers of high-risk AI systems a legal pathway to meet the quality management system requirements in Article 17. The publication follows Commission Implementing Decision (EU) 2026/2274; providers implementing the standard receive a presumption of conformity for the Article 17 requirements it covers.

EN 18286 turns Article 17 requirements into an operational quality management system (QMS) built around the AI system lifecycle rather than the organisation. It is the only AI QMS standard with a presumption of conformity. Providers can layer it on ISO/IEC 42001, ISO 9001 or a sectoral QMS such as ISO 13485, rather than replace those standards. It also allows regulated-sector providers to integrate the requirements into existing systems instead of running a parallel one. Organisations without ISO/IEC 42001 can use EN 18286 to extend an existing QMS or create their first one before placing high-risk AI systems on the EU market or putting them into service.

The standard marks a milestone in implementing the AI Act ahead of high-risk AI system requirements applying in December 2027 and August 2028. The Commission says further harmonised standards are expected to follow.