The news
The EU has published EN 18286:2026, a European standard for quality management systems for artificial intelligence, in its Official Journal through Commission Implementing Decision (EU) 2026/2274. CEN and CENELEC, the standards bodies that developed it, announced the publication on 15 October 2026, and the European Commission followed on 19 October. It is the first harmonised standard supporting the AI Act.
The standard is meant for providers of high-risk AI systems, the companies that develop such systems and bring them to the EU market. It turns the quality management requirements in Article 17 of the AI Act into practical, auditable steps. The Commission says providers that apply it benefit from a presumption of conformity with the Article 17 requirements it covers.
High-risk areas include AI used in hiring, education, biometrics and critical infrastructure. Under the dates set by this year's AI Omnibus, the rules for these systems apply from 2 December 2027, and from 2 August 2028 for AI built into regulated products such as lifts or toys.
EN 18286 follows the life of an AI system rather than the structure of a company, and it is designed to sit on top of quality systems a business may already run, such as ISO 9001 or ISO/IEC 42001. The Commission says further harmonised standards are expected.
What it means for you
- If you build AI that screens job applicants, grades students or scores customers' credit in the EU, you may be the provider of a high-risk system and will need a quality management system by December 2027.
- Using EN 18286 is voluntary, but it gives you a presumption of conformity that a home-made process does not.
- If you buy an AI tool rather than build it, the quality system is the vendor's job as provider, so ask how it plans to meet it.
- A business that already works to ISO 9001 or ISO/IEC 42001 can extend its current system instead of starting over.
What to do now
- List the AI features you build or sell and check whether any is used for hiring, education, credit scoring or biometric identification.
- Get a copy of EN 18286 from your national standards body and compare it with how you build and test AI today.
- Ask your AI vendors whether they will follow EN 18286 before December 2027.
How Didset can help
We can build your AI features with the testing records and documentation that a quality management system needs.
Talk to us about it
