By Implementing Decision (EU) 2026/2274 of 12 October 2026, published in the Official Journal of the European Union on 14 October 2026 and which entered into force on the same day, the Commission published the reference to standard EN 18286:2026, 'Artificial intelligence — Quality management system for the purposes of the regulatory requirements of the EU AI Regulation'. The annex to the decision contains, for now, only one standard: it is therefore not the publication of the full set of technical standards expected for high-risk systems.

The standard covers the supplier quality management system under Article 17 of the AI Act. In operational terms, this system must be documented through policies, procedures and instructions covering, among other things, compliance strategy, system design and modifications, audits and testing, data and risk management, post-market monitoring, incident reporting and the attribution of internal responsibilities. EN 18286:2026 provides suppliers with a common technical reference to organise and make these processes verifiable.

For companies, the first check is to determine whether they take on the role of supplier under the AI Act for one or more systems  . If so, it is appropriate to compare the management system already in place with EN 18286:2026, identify missing procedures and records, and document how controls, changes and monitoring are managed.

Those who already have a system based on ISO 9001 or ISO/IEC 42001 can use it as a working basis: the European standard contains correlation tables, but the existence of those certifications is not equivalent, on its own, to demonstrating compliance with the AI Act. The adoption of the standard remains voluntary and does not exhaust the other obligations applicable to high-risk systems. 

A legal point to follow: CEN-CENELEC presents the citation in the Journal as the source of a presumption of conformity for the Article 17 quality system. The text of Article 40(1) of the AI Act, however, expressly refers to the requirements of Section 2 of the Chapter on high-risk systems, while Article 17 is placed in Section 3. It is therefore prudent to verify the precise scope of the presumption before describing EN 18286:2026 as an automatic proof of compliance with the whole of Article 17. Its officially published technical reference value remains unchanged.