Article 17: quality management system
The documented quality system through which a high-risk AI provider structurally assures compliance.
The official source remains authoritative. This general interpretation is not legal advice.
- Status
- Upcoming
- Application date
- 2 December 2027
- Version
- 1.0.0
- Last reviewed
- 8 August 2026
Who this is relevant to
When this applies
Provider of an AI system
A party that develops or has an AI system developed and places it on the market under its own name.
- 1The provider places high-risk AI systems on the market or puts them into service.
What the official source establishes
Article 17 requires a documented quality management system covering a compliance strategy, design and development procedures, data management, risk management, post-market monitoring, incident reporting and an accountability structure.
For the Annex III route this requirement applies from 2 December 2027; for high-risk AI in regulated products (Annex I) from 2 August 2028.
Our interpretation
The QMS is the umbrella over all other provider duties: those with the separate files but no system connecting them fail exactly this article in an audit.
What you can do now
Build the QMS not as a separate document but as an index on top of the existing files (risk, data, documentation, monitoring) with owners per procedure.
- 01
Set up an AI quality management system
Describe strategies, procedures and responsibilities for compliance, from design and data to post-market monitoring.
What to retain
QMS documentation
The documented quality system with procedures, role assignment and references to the underlying files.
Control and reassessment
Internal audit cycle
Periodically audit whether practice follows the described system and record deviations and improvements.
Public tools
Full text of Article 17
The full legal text in the public AI Act Explorer.
Conditions and exceptions
- Providers already under sectoral quality regimes may integrate the AI elements into that existing system; SMEs may implement elements in simplified form.
Official sources and locators
EU Artificial Intelligence Act 2024/1689
European Parliament and Council | original-oj-2024-07-12
Source locator: Article 17(1)-(3)
Digital Omnibus on AI 2026/1744
European Parliament and Council | official-journal-2026-07-24
Source locator: Amended Article 113 application dates
Version history
v1.0.0
27 July 2026
Article 17: quality management system
The documented quality system through which a high-risk AI provider structurally assures compliance.
Execution
From obligation to arranged and demonstrable
Knowing where you stand is step one. Embed AI translates this obligation into a concrete approach for your organisation: scope, ownership, register and evidence.
See the Embed AI approachFor AI agents and integrations
This page and the machine output derive from the same versioned object. Use the API for deterministic filters by role, topic and time.