⚡ The harmonized standard EN 18286:2026 was published in the EU Official Journal in 2026 the presumption of conformity path is now open. See what this means for your organisation →
This is not a regulation that phases in gradually. High-risk AI obligations under the EU AI Act are active, enforcement mechanisms are being built, and the harmonized standards that define the conformity path are published.
The EU AI Act entered into force in August 2024. High-risk AI system obligations apply now. Organisations that have not started their compliance programme are already behind schedule for a structured, defensible implementation.
The EU AI Act is a technical regulation. Compliance requires documented controls, risk management systems, data governance, and technical documentation not just a legal opinion. The implementation work is operational, not advisory.
EN 18286:2026 was published in the Official Journal in 2026. Many compliance teams are still working from the draft standard. We work from the published version and we've been tracking the harmonization process since publication.
We don't produce compliance reports that sit on a shelf. We implement the controls, build the documentation, and prepare your organisation to pass a conformity assessment or to satisfy a regulator that asks.
A prioritised gap report mapped to the Act's requirements and the published harmonized standards. You leave knowing exactly what needs to be done and in what order.
We translate EN 18286:2026 and the broader CEN-CENELEC harmonized standard suite into documented controls, policies, and procedures specific to your AI systems.
Already working toward ISO/IEC 42001? We map your existing AIMS work to the EU AI Act's requirements avoiding duplication and accelerating your compliance timeline significantly.
Full technical documentation package for high-risk AI systems: risk management file, technical specifications, data governance documentation, and human oversight records ready for a notified body review.
Formal classification of your AI systems against Annex III categories with written rationale that will survive regulatory scrutiny. We handle the hard cases, not just the obvious ones.
The Act's delegated acts and harmonized standards will continue to evolve. We provide ongoing monitoring and update your documentation as the regulatory picture develops.
Harmonized standards published under the EU AI Act create a legal presumption of conformity if your system meets the standard, you meet the regulation. The key standards are now published, not in draft. This matters.
These standards, once cited in the Official Journal, provide presumption of conformity with the corresponding requirements of the EU AI Act.
Note: EN 18286:2026 replaces the draft prEN 18286. Organisations working from the draft standard need to update their implementation to the published version.
The EU AI Act draws a sharp line between those who develop AI systems and those who put them to use. Your obligations differ but both are real, and the Act reaches organisations outside the EU if their systems affect EU residents.
Our team includes Certified Lead Auditors with decades of hands-on experience in ISO standards, quantitative risk systems, and regulatory implementation across finance, defence, healthcare, and technology sectors.
EN 18286:2026 is the standard that matters. We've tracked its development from prEN through publication and implement from the final text.
Our background is in quantitative risk and measurement systems. Compliance is documented with evidence, not assertions which is what regulators and notified bodies actually need to see.
We hold the EU AI Act, ISO 42001, GDPR, DORA, and US state AI laws in view simultaneously so your compliance investment isn't siloed and work done for one framework contributes to others.
The people you meet are the people who do the work. No project managers buffering access to senior expertise and no billing for overhead you don't need.
Photo coming
Who does this work
Managing Partner · Certified Lead Auditor ISO 42001, ISO 27001, ISO 27701
John has worked in measurement, risk analytics, and controls for over two decades. He leads MeasurementPros' EU AI Act readiness work, with particular focus on the governance layer that connects ISO 42001 to Article 9 risk management requirements the piece most consultants skip because it requires actual audit discipline, not just a policy checklist.
Tell us about your AI systems and where you operate. We'll give you an honest view of your compliance position no obligation, NDA on request.