Digital Lexicon Hub

The European standard specifying the quality management system that providers of high-risk AI systems need under Article 17 of the EU AI Act; the first harmonized standard cited under the Act.

Providers that place high-risk AI systems on the EU market can follow EN 18286 to gain a presumption of conformity with the AI Act's quality management requirements, and can extend an existing ISO/IEC 42001 or ISO 9001 system instead of building a separate one.

A provider of an AI tool that ranks job applicants, an Annex III use case, maps its ISO/IEC 42001 management system to EN 18286, adds the missing life cycle procedures, documentation controls and post-market monitoring, and lists the standard in its EU declaration of conformity.

The presumption covers only the Article 17 quality management duties the standard addresses, not the whole AI Act or any system's technical performance. Harmonized standards for other requirements, such as risk management, data and cybersecurity, were still in draft when it was cited, and a citation can be amended or withdrawn.

EN 18286:2026 was developed by CEN-CENELEC JTC 21 under the Commission's standardization request for the AI Act and approved in July 2026. Commission Implementing Decision (EU) 2026/2274 published its reference in the Official Journal on 14 October 2026, so providers that apply it are presumed to conform with the Article 17 requirements it covers; its Annex ZA maps clauses to the AI Act provisions they support. The standard is built around the AI system life cycle rather than the whole organization and is designed to sit on top of an existing management system such as ISO/IEC 42001, ISO 9001 or ISO 13485. It is the first Harmonized Standard under the EU AI Act, and its use remains voluntary.