AIUC-1 is comprehensive, auditable, technically grounded, and updated quarterly. It is shaped quarter by quarter through the AIUC-1 Consortium, which unites CISOs, GRC leaders, practitioners, and academics from leading organizations around the world.
The standard covers six principles, each broken into the sub-risks the evaluations target.
Data & privacy
IP infringement, personal data leakage, business data leakage
Security
System information disclosure, unauthorized actions, insecure outputs, insecure actions
Safety
Physical harm, emotional harm, inappropriate content, high-risk domain engagement, vulnerable user engagement
Reliability
Service disruption, hallucination, incorrect tool calls
Accountability
Transparency
Society
Cyber
Why the client is buying
A certification that is technically grounded
AIUC-1 requires independent technical testing that the safeguards hold in production. Across a sample of 85,000 graded evaluations run between February 2025 and August 2026, ordinary requests produced a finding 22.0% of the time against 2.9% of the time for adversarial attacks. Agents fail in everyday use far more often than under direct attack. What certification quantifies, by agent type:
Certification delivers this as a quantified risk exposure alongside a 60-page audit report, against 65 mandatory controls, over a 10-week process run by one of 7 accredited auditors.
“Most certifications prove what you already do. This one made the product better: the testing produced new guardrails, and we can show customers exactly what improved.” Sheron Chakalakal, Head of GRC, UiPath
It’s the perfect complement to ISO 42001
Roughly 30% of AIUC-1 controls are already covered by existing ISO 42001 evidence through the published crosswalks, so a certificate accelerates the engagement rather than duplicating it. ISO 42001 certifies the AI management system, meaning governance processes at the organizational level. AIUC-1 certifies the agent itself, by testing it. A client who has been through ISO 42001 has already decided AI assurance is worth paying for, and gap assessments at ISO 42001-certified companies typically open with the large majority of requirements already met or likely met.Full ISO 42001 mapping
How AIUC-1 requirements map to ISO 42001 controls, and where existing ISO 42001 evidence carries over.
A go-to-market asset
To unblock deals: 46% of companies see sales delayed without a security certification, and 73% of buyers accept an audit report in place of a security questionnaire. One AIUC-1 report answers the AI risk section of every subsequent review instead of a fresh questionnaire each time a buyer asks. Intercom’s Fin reps raised the certification unprompted in 22 enterprise sales calls since December, and on one major asset manager’s vendor review the AIUC-1 report covered 40 to 50% of the required testing scope. To lead the category: every certification ships with a co-marketing package, including a serialized badge, a co-branded blogpost, and coordinated distribution to the Consortium audience. Lovable’s certification announcement became its CEO’s top LinkedIn post in two months at 3x his usual engagement, drawing 3,000 engagements from 2,500 people across 11 launch posts. In the first three weeks, 5 enterprise accounts asked about AIUC-1, 2 of them citing it as a differentiator against a competitor, and GRC leaders at 4 major security brands reached out.Best follow-up assets
What to send after the introduction, depending on what the client asks for next.AIUC-1 introduction deck
Coming soonSend after the first conversation. The client-facing overview: the gap in existing frameworks, quantified risk by agent type, cost and services, and case studies.
AIUC-1 requirements and controls
Send when the client wants to see what they will be audited against. All 51 requirements across the six principles, each with its controls and typical evidence. View only, and copying it starts a readiness assessment.
Sanitized audit report
Send when the client wants to see the deliverable. The full report structure with client detail removed.
Request additional resources
Link to form
Next: Request a gap assessment
Score the client against AIUC-1 before anything is priced.