European Harmonized AI Standards
New EU AI Standards: EN 18286 & prEN 18228 Explained
PUBLISHED
AI Quality Management System Standard
UNDER DEVELOPMENT
AI Risk Management Standard Guidance
Regulatory Foundation
European standards address two complementary pillars of AI regulatory compliance: quality management and risk management. Together, they operationalize statutory requirements under the EU AI Act across the system lifecycle.
EU AI Act Article 17
EU AI Act Article 9
Mandates a comprehensive Quality Management System for providers of high-risk AI systems, enforcing systematic governance, design controls, and technical verification processes.
Establishes a continuous Risk Management System designed to identify, estimate, evaluate, and mitigate risks to health, safety, and fundamental rights throughout the AI lifecycle.
Quality Management Standard
EN 18286:2026 – AI Quality Management System
EN 18286 specifies requirements for establishing, implementing, maintaining, and continually improving an AI Quality Management System tailored specifically for organizations developing or deploying artificial intelligence.
EN Standard
Status: European Standard
May 2026
Published Release Date
Article 17
EU AI Act Alignment
QMS
Focus: Quality Management
Full Scope
Lifecycle Application
Requirements
Standard Type
Risk Management Standard
prEN 18228:2026 – AI Risk Management
prEN 18228 establishes a structured guidance framework for identifying, assessing, evaluating, and treating risks throughout the entire AI system lifecycle, ensuring safety and compliance.
prEN Standard
Status: Draft Standard
Article 9
EU AI Act Alignment
Risk Control
Focus: AI Risk Management
Continuous
Lifecycle Application
Guidance
Standard Type
Safety
Fundamental Rights Scope
Standards Matrix
A side-by-side technical comparison detailing how both European AI standards align with key obligations under the EU AI Act.
Focus: Quality Management System (QMS) requirements.
Focus: Risk management system framework.
EU AI Act Article: Direct alignment with Article 17 obligations.
EU AI Act Article: Direct alignment with Article 9 requirements.
Status: Approved European Standard (EN).
Status: Draft European Standard (prEN).
Type: Normative Requirements standard.
Type: Implementation Guidance document.
Primary Purpose: Process control, governance, and quality assurance.
Primary Purpose: Continuous risk identification, assessment, and mitigation.
Lifecycle Application: Organizational and system-wide process oversight.
Lifecycle Application: Technical risk evaluation across all development stages.
Integrated Architecture
How They Work Together
The standards operate as complementary tools. Robust regulatory compliance requires both controlled quality processes under EN 18286 and systematic risk management under prEN 18228.
AI Governance
Quality Management
Risk Management
Establishes overarching policy control, team roles, organizational accountability, and system scope.
Implements EN 18286 controls for process verification, documentation rigor, and lifecycle management.
Applies prEN 18228 protocols to identify, evaluate, and mitigate risks across technical workflows.
Monitoring & Improvement
AI Lifecycle Compliance
Executes post-market surveillance, continuous testing, and quality updates throughout operational life.
Achieves end-to-end conformity assessment ready for EU AI Act verification and deployment audit.
Summary
Key Takeaways
EN 18286 QMS Focus
prEN 18228 Risk Guidance
Mandatory Alignment
Unified AI Framework
Focuses on Quality Management System requirements under Article 17, delivering systematic organizational controls.
Provides structured guidance for AI risk management procedures required by Article 9 across development stages.
Both standards directly support mandatory compliance for high-risk AI systems under European regulatory mandates.
Combining quality and risk standards creates an end-to-end framework for AI governance and verification.
Receive critical updates, technical standards tracking, and compliance insights directly to your inbox.