> ## Documentation Index
> Fetch the complete documentation index at: https://standard.aiuc-1.com/llms.txt
> Use this file to discover all available pages before exploring further.

# October 1, 2025 release

export const InlineClock = ({city, timeZone}) => {
  const [time, setTime] = useState('--:--:--');
  useEffect(() => {
    const update = () => setTime(new Intl.DateTimeFormat('en-US', {
      hour: '2-digit',
      minute: '2-digit',
      second: '2-digit',
      hour12: false,
      timeZone
    }).format(new Date()));
    update();
    const id = setInterval(update, 1000);
    return () => clearInterval(id);
  }, [timeZone]);
  return <div className="aiuc-footer-clock">
      <span className="aiuc-footer-clock-city">{city}</span>
      <span className="aiuc-footer-clock-time">{time}</span>
    </div>;
};

This was the first quarterly update of AIUC-1. The update focused on clarifying and specifying requirements to support a clear auditing process and avoid ambiguity. Feedback from technical contributors, customers, and audit processes also motivated a stronger adversarial testing requirement and further details on how AIUC-1 compares to ISO 42001.

### Overview of key updates

* Clarified 13 requirements based on audit experience, customer feedback, and input from technical contributors.
* Strengthened adversarial testing requirement to mandate independent third-party testing.
* Expanded ISO 42001 crosswalk with gap analysis and descriptive notes to support organizations comparing AIUC-1 and ISO 42001.

### Detailed change log

<div className="aiuc-changelog-table" />

| Date    | AIUC-1 requirement and control                                                     | Category      | Change notes                                                                                                                                                                                                   |
| ------- | ---------------------------------------------------------------------------------- | ------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Q4 2025 | A001: Establish input data policy, A002: Establish output data policy              | Clarification | Clarified separation of A001 vs A002: A001 labeled as input data; A002 labeled as output data.<br />Control activity language adjusted to clarify distinction                                                  |
| Q4 2025 | A003: Limit AI agent data collection                                               | Clarification | Requirement title clarified to emphasize focus on AI agent configuration                                                                                                                                       |
| Q4 2025 | A005: Prevent cross-customer data exposure                                         | Specification | Specified to reflect that cross-customer data safeguards should apply not just for model training purposes                                                                                                     |
| Q4 2025 | B001: Third-party testing of adversarial robustness                                | Specification | Specified to require that adversarial testing of system robustness is conducted by a third-party                                                                                                               |
| Q4 2025 | B003: Manage public release of technical details, B009: Limit output over-exposure | Clarification | Clarified separation of B001 vs B009: B001 labeled as managing public release of technical details; B009 labeled as limiting output over-exposure<br />Requirement text clarified to highlight the distinction |
| Q4 2025 | B006: Limit AI agent system access                                                 | Clarification | Requirement title clarified to emphasize focus on AI agent configuration                                                                                                                                       |
| Q4 2025 | B007: Enforce user access privileges to AI systems                                 | Clarification | Requirement title clarified to emphasize focus on user access privileges                                                                                                                                       |
| Q4 2025 | C005: Prevent customer-defined high risk outputs                                   | Clarification | Requirement title clarified to highlight that additional risk areas are defined by customer                                                                                                                    |
| Q4 2025 | C009: Enable real-time feedback and intervention                                   | Clarification | Requirement title updated to emphasize human intervention capability in requirement                                                                                                                            |
| Q4 2025 | C012: Third-party testing for customer-defined risk                                | Clarification | Requirement title clarified to highlight that additional risk areas are defined by customer                                                                                                                    |
| Q4 2025 | E013: Implement quality management system                                          | Specification | Removed reference to "high-risk" in requirement to specify that quality management system should apply to entire AI system                                                                                     |
| Q4 2025 | ISO 42001 crosswalk                                                                | Expansion     | Expanded AIUC-1 to ISO 42001 mapping with gap analysis and description of gaps to enable easy comparison                                                                                                       |
| Q4 2025 | Technical testing passing criteria                                                 | Specification | Specified that companies must pass AIUC-1 technical tests with no P0 or P1 vulnerabilities identified to qualify for an AIUC-1 certificate<br />Reflected on [Certificate overview](/learn/certificate) page   |

### Side-by-side version comparison

<div className="aiuc-changelog-comparison-table" />

| AIUC-1 requirement | 2025-07-01                                                                                                                                   | 2025-10-01                                                                                                                                                        |
| ------------------ | -------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| A001               | A001: Establish data use policy                                                                                                              | A001: Establish input data policy                                                                                                                                 |
| A002               | A002: Define output rights                                                                                                                   | A002: Establish output data policy                                                                                                                                |
| A003               | A003: Implement contextual data safeguards                                                                                                   | A003: Limit AI agent data collection                                                                                                                              |
| A005               | Implement safeguards to prevent cross-customer data exposure when combining customer data from multiple sources for AI model training        | Implement safeguards to prevent cross-customer data exposure when combining customer data from multiple sources for AI model training                             |
| B003               | B003: Limit technical over-disclosure                                                                                                        | B003: Manage public release of technical details                                                                                                                  |
| B001               | B001: Test adversarial robustness                                                                                                            | B001: Third-party testing of adversarial robustness                                                                                                               |
| B006               | B006: Enforce contextual access controls                                                                                                     | B006: Limit AI agent system access                                                                                                                                |
| B007               | B007: Enforce AI access privileges<br /><br />Establish and maintain access controls and admin privileges for AI systems in line with policy | B007: Enforce user access privileges to AI systems<br /><br />Establish and maintain user access controls and admin privileges for AI systems in line with policy |
| B009               | Implement output limitations and obfuscation techniques to reduce information leakage                                                        | Implement output limitations and obfuscation techniques to safeguard against information leakage                                                                  |
| C005               | C005: Prevent other high risk outputs                                                                                                        | C005: Prevent customer-defined high risk outputs                                                                                                                  |
| C009               | C009: Collect real-time feedback                                                                                                             | C009: Enable real-time feedback and intervention                                                                                                                  |
| C012               | C012: Third-party testing for other risk                                                                                                     | C012: Third-party testing for customer-defined risk                                                                                                               |
| E013               | Establish a quality management system for high-risk AI systems proportionate to the size of the organization                                 | Establish a quality management system for AI systems proportionate to the size of the organization                                                                |

<div className="aiuc-footer">
  <span className="aiuc-footer-corner aiuc-footer-corner-tl">
    <svg fill="none" stroke="currentColor" strokeWidth="1" viewBox="0 0 12 12" width="12" height="12">
      <line x1="0" x2="12" y1="6" y2="6" />

      <line x1="6" x2="6" y1="0" y2="12" />
    </svg>
  </span>

  <span className="aiuc-footer-corner aiuc-footer-corner-tr">
    <svg fill="none" stroke="currentColor" strokeWidth="1" viewBox="0 0 12 12" width="12" height="12">
      <line x1="0" x2="12" y1="6" y2="6" />

      <line x1="6" x2="6" y1="0" y2="12" />
    </svg>
  </span>

  <div className="aiuc-footer-strip">
    <span className="aiuc-footer-mono">37.782274° N -122.392147° W</span>
    <span className="aiuc-footer-strip-center">FIG. A (SITE INDEX)</span>

    <span />
  </div>

  <div className="aiuc-footer-row-main">
    <div className="aiuc-footer-wireframe-cell">
      <svg className="aiuc-footer-wireframe" fill="none" stroke="currentColor" strokeWidth="0.4" viewBox="0 0 200 150">
        <rect height="130" width="180" x="10" y="10" />

        <rect height="40" width="60" x="20" y="20" />

        <rect height="40" width="40" x="90" y="20" />

        <rect height="40" width="40" x="140" y="20" />

        <rect height="60" width="60" x="20" y="70" />

        <rect height="60" width="90" x="90" y="70" />

        <line strokeDasharray="2,2" x1="20" x2="180" y1="65" y2="65" />

        <line strokeDasharray="2,2" x1="85" x2="85" y1="20" y2="60" />

        <circle cx="50" cy="40" r="6" />

        <circle cx="110" cy="40" r="6" />

        <circle cx="160" cy="40" r="6" />
      </svg>
    </div>

    <div className="aiuc-footer-wordmark-cell">
      <div className="aiuc-footer-wordmark">Artificial Intelligence Underwriting Company</div>
    </div>

    <div className="aiuc-footer-clocks">
      <InlineClock city="SFO" timeZone="America/Los_Angeles" />

      <InlineClock city="NYC" timeZone="America/New_York" />

      <InlineClock city="LON" timeZone="Europe/London" />
    </div>
  </div>

  <div className="aiuc-footer-row-sub">
    <div className="aiuc-footer-codeblock-cell">
      <div className="aiuc-footer-codeblock">
        <span className="aiuc-footer-codeblock-header">Code</span>
        <span className="aiuc-footer-codeblock-header">Structural unit</span>
        <span className="aiuc-footer-codeblock-code">a.</span>
        <span className="aiuc-footer-codeblock-text">AIUC-1 requirements for agent data, privacy, security, safety, reliability, accountability, and societal risk.</span>
        <span className="aiuc-footer-codeblock-code">b.</span>
        <span className="aiuc-footer-codeblock-text">Evidence templates for technical implementation, legal policy, operational practice, and third-party evaluation.</span>
        <span className="aiuc-footer-codeblock-code">c.</span>
        <span className="aiuc-footer-codeblock-text">Crosswalks to AI regulations, standards, and security frameworks.</span>
        <span className="aiuc-footer-codeblock-code">d.</span>
        <span className="aiuc-footer-codeblock-text">Quarterly updates shaped by enterprise adoption, risk, regulation, and community input.</span>
      </div>
    </div>

    <div className="aiuc-footer-columns-cell">
      <div className="aiuc-footer-columns">
        <div>
          <div className="aiuc-footer-column-header">I. Standard</div>

          <ul className="aiuc-footer-column-list">
            <li><a className="aiuc-footer-column-link" href="/">Overview</a></li>
            <li><a className="aiuc-footer-column-link" href="/crosswalks">Crosswalks</a></li>
            <li><a className="aiuc-footer-column-link" href="/evidence">Evidence</a></li>
            <li><a className="aiuc-footer-column-link" href="/changelog">Changelog</a></li>
          </ul>
        </div>

        <div>
          <div className="aiuc-footer-column-header">II. Learn</div>

          <ul className="aiuc-footer-column-list">
            <li><a className="aiuc-footer-column-link" href="/learn/about">About AIUC-1</a></li>
            <li><a className="aiuc-footer-column-link" href="/learn/contribute">Contribute</a></li>
            <li><a className="aiuc-footer-column-link" href="/scoping">Scoping</a></li>
            <li><a className="aiuc-footer-column-link" href="/faq">FAQ</a></li>
          </ul>
        </div>

        <div>
          <div className="aiuc-footer-column-header">III. Office</div>

          <ul className="aiuc-footer-column-list">
            <li><a className="aiuc-footer-column-link" href="/consortium">Consortium</a></li>
            <li><a className="aiuc-footer-column-link" href="https://www.aiuc-1.com/contact">Contact</a></li>
            <li><a className="aiuc-footer-column-link" href="/legal/privacy">Privacy policy</a></li>
            <li><a className="aiuc-footer-column-link" href="/legal/terms">Terms of use</a></li>
          </ul>
        </div>
      </div>
    </div>
  </div>

  <div className="aiuc-footer-strip-bottom">
    <span className="aiuc-footer-mono">100</span>
    <span>© AIUC — ALL RIGHTS RESERVED</span>
  </div>

  <span className="aiuc-footer-corner aiuc-footer-corner-bl">
    <svg fill="none" stroke="currentColor" strokeWidth="1" viewBox="0 0 12 12" width="12" height="12">
      <line x1="0" x2="12" y1="6" y2="6" />

      <line x1="6" x2="6" y1="0" y2="12" />
    </svg>
  </span>

  <span className="aiuc-footer-corner aiuc-footer-corner-br">
    <svg fill="none" stroke="currentColor" strokeWidth="1" viewBox="0 0 12 12" width="12" height="12">
      <line x1="0" x2="12" y1="6" y2="6" />

      <line x1="6" x2="6" y1="0" y2="12" />
    </svg>
  </span>
</div>