StandardGuidancev1.0.0

EN 18286:2026: quality management system for EU AI Act regulatory purposes

The first completed European standard under the AI Act standardisation request: the quality management system that Article 17 requires from providers of high-risk AI systems.

The official source remains authoritative. This is general information about obligations and not legal advice. See this object on the map

Address and citation

This object has an address of its own that is never renamed or reused. Store the identifier in your own file, not the title or the link.

Identifier: praxikon:eu:ai-act:standard:standard-en-18286-quality-management-system
Payload hash (sha256): ee0b79f8c9aae4f696785a3ea1ca801363acd98f156c62c5a3d8ef85e20ac5b6

Citation line

Praxikon, "EN 18286:2026: quality management system for EU AI Act regulatory purposes", praxikon:eu:ai-act:standard:standard-en-18286-quality-management-system@1.0.0, dataset praxikon:sys:registry:dataset:ai-act-implementation-graph 2.1.0 (schema 1.4.0), effective_at 2026-08-08T00:00:00.000Z, known_at 2026-08-14T00:00:00.000Z, sha256 ee0b79f8c9aae4f696785a3ea1ca801363acd98f156c62c5a3d8ef85e20ac5b6

Version: 1.0.0
Legal time (effective_at): 8 August 2026
Knowledge time (known_at): 8 August 2026
Closed on: Not closed
Topics: standards

Review status: Placed against the official source (8 August 2026). Next check due by 4 February 2027. The check date is the knowledge date of this version; no later recheck has been recorded.

What this object links to

Every relation appears below as a path: from the source with its locator, through the conditions and exceptions of the object carrying the relation, to the consequence. A locator belongs to a statement in the data and not to a relation, so the source is the source anchor of the carrying object.

The obligation this hangs off

1 of 1 shown

The object belongs to this obligation. The source line it hangs off sits there.

Source
Official fact on this object, with its locator.
- CEN-CENELEC JTC 21: European standards under standardisation request M/613
  Locator: EN 18286:2026, CEN/CLC/JTC 21 under standardisation request M/613
  praxikon:eu:ai-act:source:cen-cenelec-jtc21
  Open official source
- EU Artificial Intelligence Act 2024/1689
  Locator: Article 17; Article 40
  praxikon:eu:ai-act:source:reg-eu-2024-1689
  Open official source
Via
- Condition | allRelevant to providers of high-risk AI systems, who must have a quality management system in place by 2 December 2027 (Annex III standalone) or 2 August 2028 (Annex I embedded in regulated products).
- ExceptionAccording to that same coverage statement the standard does not cover Article 17(2) to (4) or Article 72; those obligations must be substantiated independently.
As long as this exception is not ruled out, the outcome stays conditional and you have to establish it yourself.
Consequence
- ObligationArticle 17: quality management system
  praxikon:eu:ai-act:obligation:article-17-quality-management

What this object is about

1 of 1 shown

The object is about this role. Undifferentiated: it does not follow that the duty rests on this role.

Source
Official fact on this object, with its locator.
- CEN-CENELEC JTC 21: European standards under standardisation request M/613
  Locator: EN 18286:2026, CEN/CLC/JTC 21 under standardisation request M/613
  praxikon:eu:ai-act:source:cen-cenelec-jtc21
  Open official source
- EU Artificial Intelligence Act 2024/1689
  Locator: Article 17; Article 40
  praxikon:eu:ai-act:source:reg-eu-2024-1689
  Open official source
Via
- Condition | allRelevant to providers of high-risk AI systems, who must have a quality management system in place by 2 December 2027 (Annex III standalone) or 2 August 2028 (Annex I embedded in regulated products).
- ExceptionAccording to that same coverage statement the standard does not cover Article 17(2) to (4) or Article 72; those obligations must be substantiated independently.
As long as this exception is not ruled out, the outcome stays conditional and you have to establish it yourself.
Consequence
- ActorProvider of an AI system
  praxikon:eu:ai-act:actor:provider

What this object states

Official fact

Attributable to a named primary source, with a locator. Where they differ, the official source prevails.

EN 18286:2026 (Artificial intelligence: Quality management system for EU AI Act regulatory purposes) was drafted by CEN/CLC/JTC 21 under standardisation request M/613 and approved by CEN-CENELEC on 12 July 2026. It is the first JTC 21 deliverable to reach publication. According to a published coverage statement accompanying the standard, not yet confirmed by a second independent source, it addresses Article 17(1) points (a) to (m) and Article 11(1) first sentence, and expressly not Article 17(2) to (4) or Article 72. The standard is NOT currently cited in the Official Journal. The Article 40 presumption of conformity only attaches after that citation.
- Locator: EN 18286:2026, CEN/CLC/JTC 21 under standardisation request M/613praxikon:eu:ai-act:source:cen-cenelec-jtc21Open official source
- Locator: Article 17; Article 40praxikon:eu:ai-act:source:reg-eu-2024-1689Open official source

Our interpretation

Our own reading. It can change without the law changing, and it is not the position of a supervisory authority.

This is the first time the AI Act quality requirements exist as an auditable normative text, which is worth more than its legal status suggests. The common trap runs the other way: people read "first harmonised standard" and assume compliance now carries evidentiary weight. As long as the reference is not in the Official Journal, EN 18286 is simply a well-structured document with no legal presumption. You still carry the burden of showing your system meets Article 17. Conversely, anyone building on this structure now will not have to rebuild after citation.
- Locator: EN 18286:2026, CEN/CLC/JTC 21 under standardisation request M/613praxikon:eu:ai-act:source:cen-cenelec-jtc21Open official source
- Locator: Article 17; Article 40praxikon:eu:ai-act:source:reg-eu-2024-1689Open official source

Recommended step

A practical step we consider appropriate. Not an obligation following from the Regulation.

Use the clause structure of EN 18286 as the table of contents for your quality dossier: separate the organisational clauses (governance, leadership, planning, support, management review) from the per-system clauses (lifecycle, operations, post-market monitoring, incident handling). Record which internal document evidences each clause. Note explicitly that Article 17(2) to (4) and Article 72 fall outside the standard and must be substantiated separately.
- Locator: EN 18286:2026, CEN/CLC/JTC 21 under standardisation request M/613praxikon:eu:ai-act:source:cen-cenelec-jtc21Open official source
- Locator: Article 17; Article 40praxikon:eu:ai-act:source:reg-eu-2024-1689Open official source

When this applies

1Relevant to providers of high-risk AI systems, who must have a quality management system in place by 2 December 2027 (Annex III standalone) or 2 August 2028 (Annex I embedded in regulated products).

When this does not apply

According to that same coverage statement the standard does not cover Article 17(2) to (4) or Article 72; those obligations must be substantiated independently.

Referring to this object

Citation block

Copy this reference into your advice, article or file. The identifier, the version and the hash keep the statement findable later, even once the dataset has moved on.

Reference

Praxikon, "EN 18286:2026: quality management system for EU AI Act regulatory purposes",
praxikon:eu:ai-act:standard:standard-en-18286-quality-management-system@1.0.0,
dataset praxikon:sys:registry:dataset:ai-act-implementation-graph 2.1.0 (schema 1.4.0),
effective_at 2026-08-08T00:00:00.000Z, known_at 2026-08-08T00:00:00.000Z,
sha256 ee0b79f8c9aae4f696785a3ea1ca801363acd98f156c62c5a3d8ef85e20ac5b6,
https://www.praxikon.com/en/verkenner/standard/standard-en-18286-quality-management-system
(https://www.praxikon.com/api/v1/entities?id=praxikon%3Aeu%3Aai-act%3Astandard%3Astandard-en-18286-quality-management-system&effective_at=2026-08-08&known_at=2026-08-08&lang=en, accessed 2026-08-25)

Short form

praxikon:eu:ai-act:standard:standard-en-18286-quality-management-system@1.0.0 (sha256 ee0b79f8)

BibTeX

@misc{praxikon-eu-ai-act-standard-standard-en-18286-quality-management-system-1-0-0,
  author       = {{Praxikon}},
  title        = {EN 18286:2026: quality management system for EU AI Act regulatory purposes},
  year         = {2026},
  version      = {1.0.0},
  number       = {praxikon:eu:ai-act:standard:standard-en-18286-quality-management-system},
  howpublished = {AI Act Change \& Evidence Graph, dataset 2.1.0, schema 1.4.0},
  note         = {effective_at 2026-08-08T00:00:00.000Z; known_at 2026-08-08T00:00:00.000Z; sha256 ee0b79f8c9aae4f696785a3ea1ca801363acd98f156c62c5a3d8ef85e20ac5b6},
  url          = {https://www.praxikon.com/en/verkenner/standard/standard-en-18286-quality-management-system},
  urldate      = {2026-08-25},
  language     = {en}
}

CSL JSON

[
  {
    "id": "praxikon:eu:ai-act:standard:standard-en-18286-quality-management-system@1.0.0",
    "type": "dataset",
    "title": "EN 18286:2026: quality management system for EU AI Act regulatory purposes",
    "container-title": "AI Act Change & Evidence Graph",
    "publisher": "Praxikon",
    "version": "1.0.0",
    "number": "praxikon:eu:ai-act:standard:standard-en-18286-quality-management-system",
    "URL": "https://www.praxikon.com/en/verkenner/standard/standard-en-18286-quality-management-system",
    "language": "en",
    "issued": {
      "date-parts": [
        [
          2026,
          8,
          8
        ]
      ]
    },
    "accessed": {
      "date-parts": [
        [
          2026,
          8,
          25
        ]
      ]
    },
    "note": "dataset praxikon:sys:registry:dataset:ai-act-implementation-graph 2.1.0; schema 1.4.0; effective_at 2026-08-08T00:00:00.000Z; known_at 2026-08-08T00:00:00.000Z; sha256 ee0b79f8c9aae4f696785a3ea1ca801363acd98f156c62c5a3d8ef85e20ac5b6; retrieved_from https://www.praxikon.com/api/v1/entities?id=praxikon%3Aeu%3Aai-act%3Astandard%3Astandard-en-18286-quality-management-system&effective_at=2026-08-08&known_at=2026-08-08&lang=en; licence https://www.praxikon.com/nl/legal/terms"
  }
]

How to verify a reference later is set out in the methodology. Terms

For agents and integrations

This page and the machine output come from the same object and the same two time axes.

Open as JSON Open as JSON-LD Read the methodology