IT Sales as a Service

← All news

· European Commission

EU publishes the first AI Act standard: EN 18286 for high-risk AI quality management

The European Commission published the reference to the first harmonised standard under the AI Act in the Official Journal on 19 October 2026. EN 18286:2026 covers the quality management system that providers of high-risk AI systems must run, and following it gives a presumption of conformity with Article 17.

What the Commission announced

EN 18286 was developed by the European standards bodies CEN and CENELEC. It turns the quality management requirements of Article 17 of the AI Act into a working management system. A provider that implements it is presumed to meet the Article 17 requirements the standard covers, under Commission Implementing Decision (EU) 2026/2274.

The standard is built around the life cycle of an AI system rather than around the organisation. It is designed to sit on top of existing standards such as ISO/IEC 42001, ISO 9001 or a sector system like ISO 13485, not to replace them. Companies without ISO/IEC 42001 that plan to sell high-risk AI systems in the EU can use it to extend an existing quality system or to build a first one.

The Commission calls it the only AI quality management standard with a presumption of conformity, and says more harmonised standards will follow before the high-risk rules apply in December 2027 or August 2028.

What it means for B2B sales teams

If you sell an AI product into Europe, procurement questions will get more specific. Large buyers, especially in regulated sectors, will start asking whether a vendor's AI falls into the high-risk category and, if it does, how the provider meets Article 17. A clear answer, with a named standard behind it, shortens security and legal review. The limit: most sales and marketing tools are not high-risk systems, so many vendors will simply need to explain why the standard does not apply to them.

What to do now

  • Ask your product and legal team whether any of your AI features could count as high-risk under the AI Act, and write down the answer.
  • Prepare a one-page AI Act note for buyers: risk category, quality management approach and the standards you follow.
  • Train sellers to route detailed compliance questions to that note instead of improvising answers.
  • Build compliance questions into your discovery calls; our sales strategy work covers objection handling for regulated buyers.

Sources

By Emre A. · Published

Want this to turn into pipeline?

We run outbound and the full sales cycle for IT and SaaS companies in Europe, with the tools in these stories.

Talk to us