> ## Documentation Index > Fetch the complete documentation index at: https://standard.aiuc-1.com/llms.txt > Use this file to discover all available pages before exploring further. # Introduce AIUC-1 export const InlineClock = ({city, timeZone}) => { const [time, setTime] = useState('--:--:--'); useEffect(() => { const update = () => setTime(new Intl.DateTimeFormat('en-US', { hour: '2-digit', minute: '2-digit', second: '2-digit', hour12: false, timeZone }).format(new Date())); update(); const id = setInterval(update, 1000); return () => clearInterval(id); }, [timeZone]); return
{city} {time}
; }; Every client already holds frameworks for how AI systems are built and governed. None of them test what the agent actually does once it's live. | Risk area | Existing frameworks | Evidence collected | | - | - | - | | **Technical:** how AI systems behave in production | None | Technical evaluation results | | **Build:** how AI systems are designed and secured | NIST AI RMF, OWASP Top Ten, MITRE ATLAS, CSA AICM | Production code, configuration and logs | | **Policy:** how AI systems are governed | ISO 42001, EU AI Act | Policies, commercial terms and internal practices | AIUC-1 is comprehensive, auditable, technically grounded, and updated quarterly. It is shaped quarter by quarter through the [AIUC-1 Consortium](https://www.aiuc-1.com/consortium), which unites CISOs, GRC leaders, practitioners, and academics from leading organizations around the world. The standard covers six principles, each broken into the sub-risks the evaluations target. IP infringement, personal data leakage, business data leakage System information disclosure, unauthorized actions, insecure outputs, insecure actions Physical harm, emotional harm, inappropriate content, high-risk domain engagement, vulnerable user engagement Service disruption, hallucination, incorrect tool calls Transparency Cyber ## Why the client is buying ### A certification that is technically grounded AIUC-1 requires independent technical testing that the safeguards hold in production. Across a sample of 85,000 graded evaluations run between February 2025 and August 2026, ordinary requests produced a finding 22.0% of the time against 2.9% of the time for adversarial attacks. Agents fail in everyday use far more often than under direct attack. What certification quantifies, by agent type: | Agent type | Highest finding rates | | - | - | | Chatbot | Hallucination 8.9%, scope and output format 8.2%, incorrect tool calls 6.6%, system info disclosure 6.2% | | Automation | Extraction accuracy 15.8%, incorrect tool calls 7.9%, data and privacy leakage 2.8% | | Coding | Insecure outputs and disclosure 12.9%, hallucination 8.0%, unauthorized actions 6.3%, IP infringement and data leakage 5.9% | Certification delivers this as a quantified risk exposure alongside a 60-page audit report, against 65 mandatory controls, over a 10-week process run by one of 7 accredited auditors. > "Most certifications prove what you already do. This one made the product better: the testing produced new guardrails, and we can show customers exactly what improved." > > Sheron Chakalakal, Head of GRC, UiPath ### It's the perfect complement to ISO 42001 Roughly 30% of AIUC-1 controls are already covered by existing ISO 42001 evidence through the published crosswalks, so a certificate accelerates the engagement rather than duplicating it. ISO 42001 certifies the AI management system, meaning governance processes at the organizational level. AIUC-1 certifies the agent itself, by testing it. A client who has been through ISO 42001 has already decided AI assurance is worth paying for, and gap assessments at ISO 42001-certified companies typically open with the large majority of requirements already met or likely met. How AIUC-1 requirements map to ISO 42001 controls, and where existing ISO 42001 evidence carries over. ### A go-to-market asset To unblock deals: 46% of companies see sales delayed without a security certification, and 73% of buyers accept an audit report in place of a security questionnaire. One AIUC-1 report answers the AI risk section of every subsequent review instead of a fresh questionnaire each time a buyer asks. Intercom's Fin reps raised the certification unprompted in 22 enterprise sales calls since December, and on one major asset manager's vendor review the AIUC-1 report covered 40 to 50% of the required testing scope. To lead the category: every certification ships with a co-marketing package, including a serialized badge, a co-branded blogpost, and coordinated distribution to the Consortium audience. Lovable's certification announcement became its CEO's top LinkedIn post in two months at 3x his usual engagement, drawing 3,000 engagements from 2,500 people across 11 launch posts. In the first three weeks, 5 enterprise accounts asked about AIUC-1, 2 of them citing it as a differentiator against a competitor, and GRC leaders at 4 major security brands reached out. ## Best follow-up assets What to send after the introduction, depending on what the client asks for next. Coming soon Send after the first conversation. The client-facing overview: the gap in existing frameworks, quantified risk by agent type, cost and services, and case studies. Send when the client wants to see what they will be audited against. All 51 requirements across the six principles, each with its controls and typical evidence. View only, and copying it starts a readiness assessment. Send when the client wants to see the deliverable. The full report structure with client detail removed. Link to form *** Score the client against AIUC-1 before anything is priced.
37.782274° N -122.392147° W FIG. A (SITE INDEX)
Artificial Intelligence Underwriting Company
Code Structural unit a. AIUC-1 requirements for agent data, privacy, security, safety, reliability, accountability, and societal risk. b. Evidence templates for technical implementation, legal policy, operational practice, and third-party evaluation. c. Crosswalks to AI regulations, standards, and security frameworks. d. Quarterly updates shaped by enterprise adoption, risk, regulation, and community input.
I. Standard
II. Learn
III. Office
100 © AIUC — ALL RIGHTS RESERVED
This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.