The European Commission published EN 18286, giving high-risk AI providers a standardised quality-management route to presumed compliance with covered AI Act requirements.
The European Commission has published EN 18286:2026 in the EU’s Official Journal, making it the first harmonised standard supporting implementation of the AI Act. Developed by European standards bodies CEN and CENELEC, the standard sets out a quality-management system for providers of high-risk AI systems. Companies that implement it receive a presumption of conformity with the Article 17 requirements covered by the standard.
EN 18286 turns those requirements into an operational system centred on the AI system’s lifecycle. The Commission says providers can integrate it with existing management frameworks, including ISO/IEC 42001, ISO 9001, or sector-specific systems such as ISO 13485, rather than necessarily creating a separate quality system. Organizations without ISO/IEC 42001 can also use the standard to expand an existing quality-management system or establish one for their high-risk AI work.
The publication gives providers a concrete compliance pathway as the EU prepares to apply requirements for high-risk AI systems. It does not cover every obligation under the Act: the presumption applies to the Article 17 requirements mapped to EN 18286. Harmonised standards are voluntary, and providers may use other methods to demonstrate compliance, but adopting a cited standard offers legal certainty for the requirements it addresses. The Commission says more harmonised AI standards are expected. For AI developers and compliance teams, this marks a transition from broad statutory duties toward practical, auditable processes for quality management across a system’s lifecycle. The new standard may also be relevant to regulated-sector companies seeking to fold AI controls into existing governance rather than operate parallel programs.