We welcome the publication of EN 18286 Artificial Intelligence Quality Management System (QMS) for EU AI Act Regulatory Purposes. This new European standard will help organizations establish, implement, maintain and continually improve QMS for AI systems.
As organizations increasingly develop and deploy AI solutions, regulatory expectations are becoming more demanding. The EU AI Act introduces comprehensive requirements for AI system providers, particularly those classified as high risk. EN 18286 translates these expectations into practical management system requirements, helping organizations build the governance, processes, controls and evidence to demonstrate compliance.
What is EN 18286?
EN 18286 specifies requirements and guidance for organizations that provide AI systems. The standard focuses on establishing a QMS that supports regulatory compliance throughout the AI life cycle, from design and development to deployment, monitoring, maintenance and continual improvement. EN 18286 addresses areas, including:
- Regulatory compliance strategy
- Management responsibility and accountability
- Risk management integration
- Data management and governance
- Verification and validation activities
- Technical documentation
- Supplier and supply chain management
- Post-market monitoring
- Serious incident reporting
- Change management and continual improvement
By uniting these elements into a single framework, EN 18286 helps organizations move beyond fragmented compliance activities and establish a systematic approach to managing AI systems.
What are the key benefits of EN 18286?
Accelerate EU AI Act readiness
EN 18286 provides a practical framework for translating EU AI Act obligations into operational processes. Organizations can better understand, manage and demonstrate compliance through documented procedures, responsibilities and evidence.
Strengthening AI governance
The standard requires clearly defined roles, responsibilities, communication processes and management involvement. This helps organizations establish effective governance structures and accountability across AI development and deployment activities.
Build trust in AI systems
By addressing transparency, human oversight, cybersecurity, accuracy, robustness and post-market monitoring, EN 18286 helps organizations demonstrate that AI systems are developed and managed responsibly. This can increase confidence among customers, regulators, investors and business partners.
Reduce regulatory and business risks
The framework integrates risk management, life cycle controls, incident reporting, supplier oversight and continuous monitoring into a single management system. This supports the early identification and mitigation of risks before they become compliance or business issues.
Improve operational efficiency
Organizations can standardize processes across AI projects, improve documentation practices and create repeatable governance mechanisms that support consistent outcomes and easier scalability.
Prepare for future assessments
The standard requires comprehensive documentation, traceability and monitoring mechanisms that can support future conformity assessment activities and regulatory inspections.
How does EN 18286 compare with ISO/IEC 42001?
Many organizations are already familiar with ISO/IEC 42001, the international standard for Artificial Intelligence Management Systems (AIMS). While the two standards are closely related, they serve different purposes.
ISO/IEC 42001 provides a broad framework for governing AI responsibly across an organization. It can be applied by organizations that develop, provide or use AI, regardless of sector or geography. It focuses on AI governance, policies, controls and continual improvement.
EN 18286 focuses on AI quality management for regulatory purposes. It closely aligns with EU AI Act requirements and emphasizes operational controls, technical documentation, testing, validation, post-market monitoring and regulatory compliance activities associated with AI systems placed on the European market.
Simply put:
- ISO/IEC 42001 helps organizations establish AIMS
- EN 18286 helps organizations demonstrate that AI systems are developed, maintained and monitored consistently with EU regulatory expectations
Rather than competing, the two standards are highly complementary. Organizations that have implemented ISO/IEC 42001 will find that EN 18286 provides a valuable next step toward achieving stronger EU AI Act readiness.
Part of the emerging European AI standards ecosystem
EN 18286 forms part of a wider portfolio of European AI standards supporting the implementation of the EU AI Act.
It works alongside standards covering AI risk management, trustworthiness, cybersecurity, data quality and governance, bias management and conformity assessment. Together, these standards provide organizations with a comprehensive framework for developing trustworthy, safe and compliant AI systems.
Ready to support your journey
We are ready to help you understand and prepare for EN 18286 through:
- EN 18286 awareness and foundation training
- EN 18286 gap assessments and pre-assessments
- AI governance technical advisory
- EU AI Act readiness reviews, including other harmonized standards, such as prEN 18228 (AI Risk Management) and prEN 18282 (Cybersecurity for AI Systems)
- ISO/IEC 42001 and ISO/IEC 5259-3 certification
- AI testing and assurance services
- Preparation for future conformity assessment activities
Our experts can help identify gaps, strengthen governance processes, improve documentation practices and support you in building confidence in your AI systems and compliance programs.
Prepare today with a proven partner
As AI regulation continues to evolve, organizations developing or providing AI systems should begin evaluating how their existing governance, quality management and compliance processes align with EN 18286. Early preparation can help reduce implementation effort, improve regulatory readiness and demonstrate commitment to trustworthy AI.
Contact us to learn more about our EN 18286 services and take the next step toward EU AI Act readiness.
About SGS
SGS is the world’s leading Testing, Inspection and Certification company. We operate a network of over 2,500 laboratories and business facilities across 115 countries, supported by a team of over 100,000 dedicated professionals. With more than 145 years of service excellence, we combine the precision and accuracy that define Swiss companies to help organizations achieve the highest standards of quality, compliance and sustainability.
Our brand promise – when you need to be sure – underscores our commitment to trust, integrity and reliability, enabling businesses to thrive with confidence. We proudly deliver our expert services through the SGS name and a portfolio of trusted specialized brands, including Applied Technical Services, Brightsight, Bluesign and Nutrasource.
SGS is publicly traded on the SIX Swiss Exchange under the ticker symbol SGSN (ISIN CH1256740924, Reuters SGSN.S, Bloomberg SGSN SW).
