EN 18286:2026, Quality Management System for EU AI Act Regulatory Purposes
Issued by
CEN and CENELEC, under a European Commission standardisation request
- September 30, 2026 · Correction — Updated the entry from draft prEN 18286 to the published EN 18286:2026 (July 2026); the public enquiry closed in January 2026 (fact-check finding). (Cody Maxwell)
- October 1, 2026 · Correction — Rewrote the practical steps, newsletter hook, search description, and audience fields to match the entry's corrected content. (Cody Maxwell)
EN 18286:2026 sets quality management system requirements for AI providers under the EU AI Act. CEN and CENELEC published it in July 2026, the first European standard supporting the Act. It gives a presumption of conformity only once cited in the Official Journal.
Applies To
Overview
EN 18286:2026, 'Artificial intelligence: Quality management system for EU AI Act regulatory purposes', is the first European standard published in support of the EU AI Act. CEN and CENELEC published it in July 2026. That followed a public enquiry from 30 October 2025 to 22 January 2026 and a formal vote. It supports Article 17 of the AI Act, which requires providers of high-risk AI systems to run a quality management system. It covers governance, life cycle control, documentation, and consistency. The standard was developed under a standardisation request from the European Commission. Once it is cited in the Official Journal of the EU, conformity with it will give a presumption of conformity with the AI Act requirements it covers. Until then it is a voluntary reference, which deployers can also use to check procured systems.
Key Requirements
- •Establishes quality management system (QMS) requirements specifically tailored to AI systems within the EU AI Act's scope
- •Conformity with the published standard will create a presumption of conformity with the AI Act provisions the standard is mapped to
- •Applicable to AI providers as defined under the AI Act; relevant to deployers conducting due diligence on procured systems
- •Published in July 2026 after a public enquiry that closed on 22 January 2026; Official Journal citation is still pending
- •Once cited in the Official Journal, use of the standard becomes a primary conformity pathway for affected high-risk AI systems
- •No penalties attach to the standard itself; non-use means loss of the presumption of conformity, requiring alternative conformity demonstration under the AI Act
What Your Organization Must Do
- →Obtain EN 18286:2026 through your national standards body and map it to current quality management processes.
- →Run a gap assessment against EN 18286 if you hold ISO 9001, which does not cover AI specifics.
- →Track Official Journal citation, because the presumption of conformity only starts once the standard is cited.
- →Decide whether to use the standard or document an alternative route to showing conformity under the AI Act.
- →Add EN 18286 references to vendor contracts and procurement checks for high-risk AI systems you buy.
- →Follow future revisions through your national standards body, as the comment window closed on 22 January 2026.
Playbook Guidance
Step-by-step implementation guidance for compliance teams.
Frequently Asked Questions
- Does conformity with EN 18286 automatically satisfy EU AI Act quality management requirements for high-risk AI systems?
- Not yet: once EN 18286 is cited in the Official Journal of the EU, conformity will give a presumption of conformity with the AI Act requirements it covers. It has not yet been cited.
- What happens if an organisation chooses not to use EN 18286 as its conformity pathway?
- Not using a harmonised standard is not a violation, but the organisation loses the presumption of conformity it would give. Other ways to show conformity are allowed, though they usually need more documentation and justification.
- Can AI deployers rely on EN 18286 for due diligence on third-party procured systems, or is it only relevant to providers?
- It is aimed at providers running quality management systems. Deployers can still use it in procurement due diligence, for example to set vendor contract requirements for high-risk systems.
- What is the current status of EN 18286?
- CEN and CENELEC published EN 18286:2026 in July 2026, after a public enquiry that closed on 22 January 2026. Citation in the Official Journal, which triggers the presumption of conformity, is still pending.
- How does EN 18286 relate to ISO 9001, and can existing ISO 9001 certification substitute for it?
- EN 18286 is tailored to AI quality management under the EU AI Act, which generic ISO 9001 certification does not cover. ISO 9001 processes are a useful base, but a gap assessment against EN 18286 is recommended.
- Can organisations still comment on EN 18286?
- No, the comment window closed on 22 January 2026 and the final text has been published. Organisations can follow future revisions through their national standards body.