> ## Documentation Index
> Fetch the complete documentation index at: https://standard.aiuc-1.com/llms.txt
> Use this file to discover all available pages before exploring further.

# AIUC-1 × ISO 42001

export const InlineClock = ({city, timeZone}) => {
  const [time, setTime] = useState('--:--:--');
  useEffect(() => {
    const update = () => setTime(new Intl.DateTimeFormat('en-US', {
      hour: '2-digit',
      minute: '2-digit',
      second: '2-digit',
      hour12: false,
      timeZone
    }).format(new Date()));
    update();
    const id = setInterval(update, 1000);
    return () => clearInterval(id);
  }, [timeZone]);
  return <div className="aiuc-footer-clock">
      <span className="aiuc-footer-clock-city">{city}</span>
      <span className="aiuc-footer-clock-time">{time}</span>
    </div>;
};

<div className="aiuc-crosswalk-framework-intro">
  <p>ISO 42001 is an international standard for AI management systems (AIMS) covering responsible AI development and deployment.</p>
  <p><strong>AIUC-1 aligns with ISO 42001.</strong> Certification against AIUC-1:</p>

  <ul>
    <li>Incorporates the majority of controls from ISO 42001</li>
    <li>Translates ISO's management system approach into concrete, auditable requirements</li>
    <li>Extends ISO 42001 with third-party testing requirements of, e.g., hallucinations and jailbreak attempts</li>
    <li>Addresses additional key concerns such as AI failure plans and AI-specific system security</li>
  </ul>

  <p>See the reverse mapping of AIUC-1 requirements by ISO 42001 controls <a href="/crosswalks/iso-42001/reverse-mapping">here</a>.</p>
</div>

## ISO 42001 crosswalks by clause

<div className="aiuc-crosswalk-framework-table" />

| ISO control objective                                                     | ISO control                                                                                                                                                                                                                                                                                                  | Relevant AIUC-1 requirements                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | Gap analysis                                                                                                                                                                                                                                                                                                                               |
| ------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| 4.1: Understanding the organization and its context                       | The organization shall determine external and internal issues relevant to the AI management system’s purpose and ability to achieve intended results.                                                                                                                                                        | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/safety/define-ai-risk-taxonomy">C001: Define AI risk taxonomy</a><a className="aiuc-crosswalk-requirement-link" href="/accountability/establish-ai-acceptable-use-policy">E010: Establish AI acceptable use policy</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | **Partial Gap.** AIUC-1 is focused on defining acceptable use and assessing risk of the AI system                                                                                                                                                                                                                                          |
| 4.2: Understanding the needs and expectations of interested parties       | The organization shall determine interested parties and their relevant requirements to the AI management system.                                                                                                                                                                                             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | **Full Gap.** Outside the scope of AIUC-1                                                                                                                                                                                                                                                                                                  |
| 4.3: Determining the scope of the AI management system                    | The organization shall define and document the scope of the AI management system, including applicability and boundaries.                                                                                                                                                                                    | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/document-system-transparency-policy">E017: Document system transparency policy</a><a className="aiuc-crosswalk-requirement-link" href="/accountability/establish-ai-acceptable-use-policy">E010: Establish AI acceptable use policy</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | No Gap                                                                                                                                                                                                                                                                                                                                     |
| 4.4: AI management system                                                 | The organization shall establish, implement, maintain, and continually improve the AI management system.                                                                                                                                                                                                     | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/implement-quality-management-system">E013: Implement quality management system</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | **No Gap.** Met by organizations that opt-in to the optional quality management system requirement                                                                                                                                                                                                                                         |
| 5.1: Leadership and commitment                                            | Top management shall demonstrate leadership and commitment to the AI management system and its effectiveness.                                                                                                                                                                                                | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/assign-accountability">E004: Assign accountability</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       | No Gap                                                                                                                                                                                                                                                                                                                                     |
| 5.2: AI policy                                                            | Top management shall establish an AI policy appropriate to the organization and supportive of AI objectives.                                                                                                                                                                                                 | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/establish-ai-acceptable-use-policy">E010: Establish AI acceptable use policy</a><a className="aiuc-crosswalk-requirement-link" href="/accountability/document-system-transparency-policy">E017: Document system transparency policy</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | **No Gap.** AI Acceptable Use Policy and Transparency Policy collectively fulfil the ISO control. Organizations may develop a standalone AI policy                                                                                                                                                                                         |
| 5.3: Roles, responsibilities and authorities                              | Top management shall assign roles, responsibilities, and authorities for the AI management system.                                                                                                                                                                                                           | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/assign-accountability">E004: Assign accountability</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       | No Gap                                                                                                                                                                                                                                                                                                                                     |
| 6.1.1: Actions to address risks and opportunities — General               | The organization shall plan actions to address risks and opportunities, integrate them into processes, and evaluate their effectiveness.                                                                                                                                                                     | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/safety/define-ai-risk-taxonomy">C001: Define AI risk taxonomy</a><a className="aiuc-crosswalk-requirement-link" href="/safety/monitor-ai-risk-categories">C008: Monitor AI risk categories</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | No Gap                                                                                                                                                                                                                                                                                                                                     |
| 6.1.2: AI risk assessment                                                 | The organization shall establish and maintain a process for AI risk assessment, including identification, analysis, and evaluation of risks.                                                                                                                                                                 | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/safety/define-ai-risk-taxonomy">C001: Define AI risk taxonomy</a><a className="aiuc-crosswalk-requirement-link" href="/safety/monitor-ai-risk-categories">C008: Monitor AI risk categories</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | No Gap                                                                                                                                                                                                                                                                                                                                     |
| 6.1.3: AI risk treatment                                                  | The organization shall establish and maintain a process for AI risk treatment, including selecting and implementing necessary controls.                                                                                                                                                                      | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/safety/define-ai-risk-taxonomy">C001: Define AI risk taxonomy</a><a className="aiuc-crosswalk-requirement-link" href="/safety/monitor-ai-risk-categories">C008: Monitor AI risk categories</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | No Gap                                                                                                                                                                                                                                                                                                                                     |
| 6.1.4: AI system impact assessment                                        | The organization shall conduct AI system impact assessments covering potential effects on individuals, groups, and society.                                                                                                                                                                                  | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/implement-quality-management-system">E013: Implement quality management system</a><a className="aiuc-crosswalk-requirement-link" href="/safety/define-ai-risk-taxonomy">C001: Define AI risk taxonomy</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | **Partial Gap.** AIUC-1 requires risk assessment and organizations can opt-in to the optional quality management system requirement, but does not require impact assessment specifically                                                                                                                                                   |
| 6.2: AI objectives and planning to achieve them                           | The organization shall establish AI objectives at relevant functions and levels, consistent with the AI policy, and maintain plans to achieve them.                                                                                                                                                          |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | **Full Gap.** Requiring high-level AI objectives is outside the scope of AIUC-1                                                                                                                                                                                                                                                            |
| 6.3: Planning of changes                                                  | The organization shall plan and control changes to the AI management system in a planned manner.                                                                                                                                                                                                             | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/document-system-change-approvals">E007: \[Retired] Document system change approvals</a><a className="aiuc-crosswalk-requirement-link" href="/accountability/review-internal-processes">E008: Review internal processes</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   | **No Gap.** AIUC-1 requires that both system changes and process changes are reviewed                                                                                                                                                                                                                                                      |
| 7.1: Resources                                                            | The organization shall determine and provide necessary resources for the AI management system.                                                                                                                                                                                                               | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/implement-quality-management-system">E013: Implement quality management system</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | **Partial Gap.** Organizations opting-in to the optional quality management system requirement will be required to  documenting resource management, including security-of-supply related measures                                                                                                                                         |
| 7.2: Competence                                                           | The organization shall ensure competence of persons working under its control based on education, training, or experience.                                                                                                                                                                                   | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/assign-accountability">E004: Assign accountability</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       | **Partial Gap.** AIUC-1 requires that accountability is clearly assigned, but does not require competence assessment specifically                                                                                                                                                                                                          |
| 7.3: Awareness                                                            | Persons under the organization’s control shall be aware of the AI policy, objectives, and their contribution to the AI management system.                                                                                                                                                                    |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | **Full Gap.** Internal training processes are outside the scope of AIUC-1                                                                                                                                                                                                                                                                  |
| 7.4: Communication                                                        | The organization shall determine internal and external communications relevant to the AI management system.                                                                                                                                                                                                  | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/share-transparency-reports">E014: \[Retired] Share transparency reports</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  | **Partial Gap.** AIUC-1 does not specify internal communication requirements                                                                                                                                                                                                                                                               |
| 7.5.1: Documented information — General                                   | The organization shall document information required by the AI management system and by ISO42001.                                                                                                                                                                                                            | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/implement-quality-management-system">E013: Implement quality management system</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | **No Gap.** Organizations opting-in to the optional quality management system requirement will meet this control                                                                                                                                                                                                                           |
| 7.5.2: Creating and updating documented information                       | The organization shall ensure documented information is properly created, updated, and controlled for suitability and adequacy.                                                                                                                                                                              | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/review-internal-processes">E008: Review internal processes</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               | **No Gap.** The combination of quarterly internal reviews and annual recertification requirements fulfils this control                                                                                                                                                                                                                     |
| 7.5.3: Control of documented information                                  | The organization shall control documented information required by the AI management system and ISO42001.                                                                                                                                                                                                     |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | **No Gap.** Required as part of AIUC-1 certification process                                                                                                                                                                                                                                                                               |
| 8.1: Operational planning and control                                     | The organization shall plan, implement, and control processes needed for the AI management system, ensuring outputs meet requirements.                                                                                                                                                                       | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/implement-quality-management-system">E013: Implement quality management system</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | **No Gap.** Organizations opting-in to the optional quality management system requirement will meet this control                                                                                                                                                                                                                           |
| 8.2: AI risk assessment                                                   | The organization shall perform AI risk assessments at planned intervals and when significant changes occur.                                                                                                                                                                                                  | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/safety/define-ai-risk-taxonomy">C001: Define AI risk taxonomy</a><a className="aiuc-crosswalk-requirement-link" href="/safety/monitor-ai-risk-categories">C008: Monitor AI risk categories</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | No Gap                                                                                                                                                                                                                                                                                                                                     |
| 8.3: AI risk treatment                                                    | The organization shall implement AI risk treatment plans and review them when assessments identify new or ineffective controls.                                                                                                                                                                              | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/safety/define-ai-risk-taxonomy">C001: Define AI risk taxonomy</a><a className="aiuc-crosswalk-requirement-link" href="/safety/monitor-ai-risk-categories">C008: Monitor AI risk categories</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | No Gap                                                                                                                                                                                                                                                                                                                                     |
| 8.4: AI system impact assessment                                          | The organization shall perform AI system impact assessments at planned intervals and when significant changes are proposed.                                                                                                                                                                                  | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/implement-quality-management-system">E013: Implement quality management system</a><a className="aiuc-crosswalk-requirement-link" href="/safety/define-ai-risk-taxonomy">C001: Define AI risk taxonomy</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | **Partial Gap.** AIUC-1 requires risk assessment and organizations can opt-in to the optional quality management system requirement, but does not require impact assessment specifically                                                                                                                                                   |
| 9.1: Monitoring, measurement, analysis and evaluation                     | The organization shall determine monitoring, measurement, analysis, and evaluation needed to ensure conformity and effectiveness.                                                                                                                                                                            | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/implement-quality-management-system">E013: Implement quality management system</a><a className="aiuc-crosswalk-requirement-link" href="/safety/monitor-ai-risk-categories">C008: Monitor AI risk categories</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | **No Gap.** Organizations opting-in to the optional quality management system requirement will meet this control                                                                                                                                                                                                                           |
| 9.2.1: Internal audit - General                                           | The organization shall conduct internal audits at planned intervals to provide information on the AI management system.                                                                                                                                                                                      | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/review-internal-processes">E008: Review internal processes</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               | No Gap                                                                                                                                                                                                                                                                                                                                     |
| 9.2.2: Internal audit programme                                           | Top management shall review the AI management system at planned intervals for continuing suitability, adequacy, and effectiveness.                                                                                                                                                                           | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/review-internal-processes">E008: Review internal processes</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               | No Gap                                                                                                                                                                                                                                                                                                                                     |
| 9.3.1: Management review - General                                        | The organization shall review the AI management system at planned intervals to ensure its suitability, adequacy, and effectiveness.                                                                                                                                                                          | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/review-internal-processes">E008: Review internal processes</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               | No Gap                                                                                                                                                                                                                                                                                                                                     |
| 9.3.2: Management review inputs                                           | Management review inputs shall include audits, performance trends, nonconformities, feedback, risks, changes, and resources.                                                                                                                                                                                 | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/review-internal-processes">E008: Review internal processes</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               | **Partial Gap.** AIUC-1 internal review requirement is smaller in scope, so fulfilment of 9.3.2 depends on organizational implementation                                                                                                                                                                                                   |
| 9.3.3: Management review results                                          | Management review results shall include decisions on improvements, policy/objectives, resources, and follow-up actions.                                                                                                                                                                                      | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/review-internal-processes">E008: Review internal processes</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               | **Partial Gap.** AIUC-1 internal review requirement is smaller in scope, so fulfilment of 9.3.2 depends on organizational implementation                                                                                                                                                                                                   |
| 10.1: Continual improvement                                               | The organization shall continually improve the AI management system’s suitability, adequacy, and effectiveness.                                                                                                                                                                                              | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/implement-quality-management-system">E013: Implement quality management system</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | **No Gap.** Organizations opting-in to the optional quality management system requirement will meet this control                                                                                                                                                                                                                           |
| 10.2: Nonconformity and corrective action                                 | The organization shall address nonconformities by correcting them, dealing with consequences, and preventing recurrence.                                                                                                                                                                                     | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/document-regulatory-compliance">E012: Document regulatory compliance</a><a className="aiuc-crosswalk-requirement-link" href="/accountability/implement-quality-management-system">E013: Implement quality management system</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | **No Gap.** Organizations opting-in to the optional quality management system requirement will meet this control                                                                                                                                                                                                                           |
| A.2.2: AI policy                                                          | The organization shall document a policy for the development or use of AI systems.                                                                                                                                                                                                                           | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/establish-ai-acceptable-use-policy">E010: Establish AI acceptable use policy</a><a className="aiuc-crosswalk-requirement-link" href="/accountability/document-system-transparency-policy">E017: Document system transparency policy</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      | **No Gap.** AI Acceptable Use Policy and Transparency Policy collectively fulfil the ISO control. Organizations may develop a standalone AI policy                                                                                                                                                                                         |
| A.2.3: Alignment with other organizational policies                       | The organization shall determine where other policies can be affected by or apply to the organization's objectives with respect to AI systems.                                                                                                                                                               | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/document-regulatory-compliance">E012: Document regulatory compliance</a><a className="aiuc-crosswalk-requirement-link" href="/accountability/review-internal-processes">E008: Review internal processes</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  | **Partial Gap.** AIUC-1 does not require review of internal policies specifically, but require regulatory compliance reviews and regular internal reviews                                                                                                                                                                                  |
| A.2.4: Review of the AI policy                                            | The AI policy shall be reviewed at planned intervals or additionally as needed to ensure its continuing suitability, adequacy and effectiveness.                                                                                                                                                             | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/review-internal-processes">E008: Review internal processes</a><a className="aiuc-crosswalk-requirement-link" href="/accountability/document-system-transparency-policy">E017: Document system transparency policy</a><a className="aiuc-crosswalk-requirement-link" href="/accountability/establish-ai-acceptable-use-policy">E010: Establish AI acceptable use policy</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   | No Gap                                                                                                                                                                                                                                                                                                                                     |
| A.3.2: AI roles and responsibilities                                      | Roles and responsibilities for AI shall be defined and allocated according to the needs of the organization.                                                                                                                                                                                                 | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/assign-accountability">E004: Assign accountability</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       | No Gap                                                                                                                                                                                                                                                                                                                                     |
| A.3.3: Reporting of concerns                                              | The organization shall define and put in place a process to report concerns about the organization's role with respect to an AI system throughout its life cycle.                                                                                                                                            | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/review-internal-processes">E008: Review internal processes</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               | **Partial Gap.** AIUC-1 does not require internal reporting processes specifically, but require regular internal reviews                                                                                                                                                                                                                   |
| A.4.2: Resource documentation                                             | The organization shall identify and document relevant resources required for all activities at given AI system life cycle stages and other AI-related activities relevant for the organization.                                                                                                              | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/document-system-transparency-policy">E017: Document system transparency policy</a><a className="aiuc-crosswalk-requirement-link" href="/accountability/implement-quality-management-system">E013: Implement quality management system</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | **Partial Gap.** AIUC-1 does not require resource documentation specifically, but requires maintaining a centralized repository of system documentation and documenting resource management for organizations opting in to the optional quality management system requirement                                                              |
| A.4.3: Data resources                                                     | As part of resource identification, the organization shall document information about the data resources utilized for the AI system.                                                                                                                                                                         | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/document-system-transparency-policy">E017: Document system transparency policy</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | **No Gap.** Fulfilled by organisations opting into the capability-specific requirement A103: Track training data lineage. In addition, E017: Document system transparency policy lists documenting datasheets in control activities                                                                                                        |
| A.4.4: Tooling resources                                                  | As part of resource identification, the organization shall document information about the tooling resources utilized for the AI system.                                                                                                                                                                      | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/document-system-transparency-policy">E017: Document system transparency policy</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | **No Gap.** Included in transparency policy control activities                                                                                                                                                                                                                                                                             |
| A.4.5: System and computing resources                                     | As part of resource identification, the organization shall document information about the system and computing resources utilized for the AI system.                                                                                                                                                         | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/document-system-transparency-policy">E017: Document system transparency policy</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | **No Gap.** Included in transparency policy control activities                                                                                                                                                                                                                                                                             |
| A.4.6: Human resources                                                    | As part of resource identification, the organization shall document information about the human resources and their competences utilized for the development, deployment, operation, change management, maintenance, transfer and decommissioning, as well as verification and integration of the AI system. | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/assign-accountability">E004: Assign accountability</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       | **Partial Gap.** AIUC-1 is scoped to require documentation of clear accountability assigned for system changes                                                                                                                                                                                                                             |
| A.5.2: AI system impact assessment process                                | The organization shall establish a process to assess the potential consequences for individuals or groups of individuals, or both, and societies that can result from the AI system throughout its life cycle.                                                                                               | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/safety/define-ai-risk-taxonomy">C001: Define AI risk taxonomy</a><a className="aiuc-crosswalk-requirement-link" href="/accountability/implement-quality-management-system">E013: Implement quality management system</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | **Partial Gap.** AIUC-1 requires risk assessment and organizations can opt-in to the optional quality management system requirement, but does not require impact assessment specifically                                                                                                                                                   |
| A.5.3: Documentation of AI system impact assessments                      | The organization shall document the results of AI system impact assessments and retain results for a defined period.                                                                                                                                                                                         | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/safety/define-ai-risk-taxonomy">C001: Define AI risk taxonomy</a><a className="aiuc-crosswalk-requirement-link" href="/accountability/implement-quality-management-system">E013: Implement quality management system</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | **Partial Gap.** AIUC-1 requires risk assessment and organizations can opt-in to the optional quality management system requirement, but does not require impact assessment specifically                                                                                                                                                   |
| A.5.4: Assessing AI system impact on individuals or groups of individuals | The organization shall assess and document the potential impacts of AI systems to individuals or groups of individuals throughout the system's life cycle.                                                                                                                                                   | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/safety/define-ai-risk-taxonomy">C001: Define AI risk taxonomy</a><a className="aiuc-crosswalk-requirement-link" href="/safety/monitor-ai-risk-categories">C008: Monitor AI risk categories</a><a className="aiuc-crosswalk-requirement-link" href="/accountability/implement-quality-management-system">E013: Implement quality management system</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       | **Partial Gap.** AIUC-1 requires risk assessment and organizations can opt-in to the optional quality management system requirement, but does not require impact assessment specifically                                                                                                                                                   |
| A.5.5: Assessing societal impacts of AI systems                           | The organization shall assess and document the potential societal impacts of their AI systems throughout their life cycle.                                                                                                                                                                                   | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/safety/define-ai-risk-taxonomy">C001: Define AI risk taxonomy</a><a className="aiuc-crosswalk-requirement-link" href="/society/prevent-ai-cyber-misuse">F001: Prevent AI cyber misuse</a><a className="aiuc-crosswalk-requirement-link" href="/society/prevent-catastrophic-misuse">F002: Prevent catastrophic misuse</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   | **Partial Gap.** AIUC-1 requires risk assessment, but does not require impact assessment specifically. Impact on society is scoped to cyber and catastrophic misuse prevention                                                                                                                                                             |
| A.6.1.2: Objectives for responsible development of AI system              | The organization shall identify and document objectives to guide the responsible development AI systems, and take those objectives into account and integrate measures to achieve them in the development life cycle.                                                                                        | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/safety/flag-high-risk-recommendations">C007: Flag high risk outputs for human review</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | **Full Gap.** Organizations pursuing AIUC-1 are naturally aligned with responsible AI principles, but AIUC-1 does not require documentation of responsible AI objectives specifically.                                                                                                                                                     |
| A.6.1.3: Processes for responsible AI system design and development       | The organization shall define and document the specific processes for the responsible design and development of the AI system.                                                                                                                                                                               |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | **Full Gap.** Organizations pursuing AIUC-1 are naturally aligned with responsible AI principles, but AIUC-1 does not require documentation of responsible AI processes specifically                                                                                                                                                       |
| A.6.2.2: AI system requirements and specification                         | The organization shall specify and document requirements for new AI systems or material enhancements to existing systems.                                                                                                                                                                                    | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/assign-accountability">E004: Assign accountability</a><a className="aiuc-crosswalk-requirement-link" href="/accountability/document-system-change-approvals">E007: \[Retired] Document system change approvals</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | No Gap                                                                                                                                                                                                                                                                                                                                     |
| A.6.2.3: Documentation of AI system design and development                | The organization shall document the AI system design and development based on organizational objectives, documented requirements and specification criteria.                                                                                                                                                 | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/document-system-transparency-policy">E017: Document system transparency policy</a><a className="aiuc-crosswalk-requirement-link" href="/accountability/implement-quality-management-system">E013: Implement quality management system</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    | No Gap                                                                                                                                                                                                                                                                                                                                     |
| A.6.2.4: AI system verification and validation                            | The organization shall define and document verification and validation measures for the AI system and specify criteria for their use.                                                                                                                                                                        | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/document-system-change-approvals">E007: \[Retired] Document system change approvals</a><a className="aiuc-crosswalk-requirement-link" href="/safety/conduct-pre-deployment-testing">C002: Conduct pre-deployment testing</a><a className="aiuc-crosswalk-requirement-link" href="/safety/3rd-party-testing-for-harmful-outputs">C010: Third-party testing for harmful outputs</a><a className="aiuc-crosswalk-requirement-link" href="/safety/3rd-party-testing-for-out-of-scope-outputs">C011: Third-party testing for out-of-scope outputs</a><a className="aiuc-crosswalk-requirement-link" href="/safety/3rd-party-testing-for-other-risk">C012: Third-party testing for customer-defined risk</a><a className="aiuc-crosswalk-requirement-link" href="/reliability/3rd-party-testing-for-hallucinations">D002: Third-party testing for hallucinations</a><a className="aiuc-crosswalk-requirement-link" href="/reliability/3rd-party-testing-of-tool-calls">D004: Third-party testing of tool calls</a></div> | No Gap                                                                                                                                                                                                                                                                                                                                     |
| A.6.2.5: AI system deployment                                             | The organization shall document a deployment plan and ensure that appropriate requirements are met prior to deployment.                                                                                                                                                                                      | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/safety/conduct-pre-deployment-testing">C002: Conduct pre-deployment testing</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             | No Gap                                                                                                                                                                                                                                                                                                                                     |
| A.6.2.6: AI system operation and monitoring                               | The organization shall define and document the necessary elements for the ongoing operation of the AI system. At the minimum, this should include system and performance monitoring, repairs, updates and support.                                                                                           | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/safety/monitor-ai-risk-categories">C008: Monitor AI risk categories</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | **Partial Gap.** AIUC-1 is focused on monitoring risk categories and does not have product performance monitoring/product quality metrics in scope                                                                                                                                                                                         |
| A.6.2.7: AI system technical documentation                                | The organization shall determine what AI system technical documentation is needed for each relevant category of interested parties, such as users, partners, supervisory authorities, and provide the technical documentation to them in the appropriate form.                                               | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/share-transparency-reports">E014: \[Retired] Share transparency reports</a><a className="aiuc-crosswalk-requirement-link" href="/accountability/implement-quality-management-system">E013: Implement quality management system</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | No Gap                                                                                                                                                                                                                                                                                                                                     |
| A.6.2.8: AI system recording of event logs                                | The organization shall determine at which phases of the AI system life cycle, record keeping of event logs should be enabled, but at the minimum when the AI system is in use.                                                                                                                               | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/log-model-activity">E015: Log AI system activity</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         | No Gap                                                                                                                                                                                                                                                                                                                                     |
| A.7.2: Data for development and enhancement of AI system                  | The organization shall define, document and implement data management processes related to the development of AI systems.                                                                                                                                                                                    | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/data-and-privacy/establish-data-use-policy">A001: Establish input data policy</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | **No Gap.** Met by organizations who opt-in to the capability specific requirements on training data quality and lineage                                                                                                                                                                                                                   |
| A.7.3: Acquisition of data                                                | The organization shall determine and document details about the acquisition and selection of the data used in AI systems.                                                                                                                                                                                    | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/data-and-privacy/establish-data-use-policy">A001: Establish input data policy</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | **No Gap.** Met by organizations who opt-in to the capability specific requirement E103: Track training data lineage                                                                                                                                                                                                                       |
| A.7.4: Quality of data for AI systems                                     | The organization shall define and document requirements for data quality and ensure that data used to develop and operate the AI system meet those requirements.                                                                                                                                             |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | **No Gap.** Met by organizations who opt-in to the capability specific requirement on training data quality                                                                                                                                                                                                                                |
| A.7.5: Data provenance                                                    | The organization shall define and document a process for recording the provenance of data used in its AI systems over the life cycles of the data and the AI system.                                                                                                                                         | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/record-processing-locations">E011: Record processing locations</a><a className="aiuc-crosswalk-requirement-link" href="/data-and-privacy/prevent-ip-violations">A007: Prevent IP violations</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              | No Gap                                                                                                                                                                                                                                                                                                                                     |
| A.7.6: Data preparation                                                   | The organization shall define and document its criteria for selecting data preparations and the data preparation methods to be used.                                                                                                                                                                         |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | **Partial Gap.** AIUC-1 does not require data preparation methods specifically, but covers training data quality more broadly                                                                                                                                                                                                              |
| A.8.2: System documentation and information for users                     | The organization shall determine and provide the necessary information to users of the AI system.                                                                                                                                                                                                            | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/share-transparency-reports">E014: \[Retired] Share transparency reports</a><a className="aiuc-crosswalk-requirement-link" href="/accountability/implement-ai-disclosure-mechanisms">E016: Implement AI disclosure mechanisms</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             | No Gap                                                                                                                                                                                                                                                                                                                                     |
| A.8.3: External reporting                                                 | The organization shall provide capabilities for interested parties to report adverse impacts of the AI system.                                                                                                                                                                                               | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/safety/collect-real-time-feedback">C009: Enable real-time feedback and intervention</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | **Partial Gap.** AIUC-1 requirement focuses on AI system users and does not require reporting capabilities for external parties                                                                                                                                                                                                            |
| A.8.4: Communication of incidents                                         | The organization shall determine and document a plan for communicating incidents to users of the AI system.                                                                                                                                                                                                  | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/ai-failure-plan-for-security-breaches">E001: AI failure plan for security breaches</a><a className="aiuc-crosswalk-requirement-link" href="/accountability/ai-failure-plan-for-hallucinations">E003: AI failure plan for hallucinations</a><a className="aiuc-crosswalk-requirement-link" href="/accountability/ai-failure-plan-for-harmful-outputs">E002: AI failure plan for harmful outputs</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | No Gap                                                                                                                                                                                                                                                                                                                                     |
| A.8.5: Information for interested parties                                 | The organization shall determine and document their obligations to reporting information about the AI system to interested parties.                                                                                                                                                                          | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/ai-failure-plan-for-security-breaches">E001: AI failure plan for security breaches</a><a className="aiuc-crosswalk-requirement-link" href="/accountability/document-regulatory-compliance">E012: Document regulatory compliance</a><a className="aiuc-crosswalk-requirement-link" href="/accountability/share-transparency-reports">E014: \[Retired] Share transparency reports</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          | No Gap                                                                                                                                                                                                                                                                                                                                     |
| A.9.2: Processes for responsible use of AI systems                        | The organization shall define and document the processes for the responsible use of AI systems.                                                                                                                                                                                                              | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/establish-ai-acceptable-use-policy">E010: Establish AI acceptable use policy</a><a className="aiuc-crosswalk-requirement-link" href="/safety/flag-high-risk-recommendations">C007: Flag high risk outputs for human review</a><a className="aiuc-crosswalk-requirement-link" href="/safety/monitor-ai-risk-categories">C008: Monitor AI risk categories</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  | **No Gap.** AIUC-1 requires an Acceptable Use policy which covers prohibited use cases to ensure responsible use of AI systems. In addition, AIUC-1 has a number of concrete requirements ensuring responsible use of the AI system including, e.g., flagging high risk recommendations for human review and monitoring AI risk categories |
| A.9.3: Objectives for responsible use of AI system                        | The organization shall identify and document objectives to guide the responsible use of AI systems.                                                                                                                                                                                                          | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/establish-ai-acceptable-use-policy">E010: Establish AI acceptable use policy</a><a className="aiuc-crosswalk-requirement-link" href="/safety/flag-high-risk-recommendations">C007: Flag high risk outputs for human review</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               | **Partial Gap.** Partially covered by Acceptable Use Policy, but AIUC-1 does not require documenting objectives specifically.                                                                                                                                                                                                              |
| A.9.4: Intended use of the AI system                                      | The organization shall ensure that the AI system is used according to the intended uses of the AI system and its accompanying documentation.                                                                                                                                                                 | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/establish-ai-acceptable-use-policy">E010: Establish AI acceptable use policy</a><a className="aiuc-crosswalk-requirement-link" href="/safety/monitor-ai-risk-categories">C008: Monitor AI risk categories</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                | **No Gap.** Acceptable Use Policy control activities require implementing detection and monitoring tools to track policy violations                                                                                                                                                                                                        |
| A.10.2: Allocating responsibilities                                       | The organization shall ensure that responsibilities within their AI system life cycle are allocated between the organization, its partners, suppliers, customers and third parties.                                                                                                                          | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/assign-accountability">E004: Assign accountability</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       | No Gap                                                                                                                                                                                                                                                                                                                                     |
| A.10.3: Suppliers                                                         | The organization shall establish a process to ensure that its usage of services, products or materials provided by suppliers aligns with the organization's approach to the responsible development and use of AI systems.                                                                                   | <div className="aiuc-crosswalk-requirement-links"><a className="aiuc-crosswalk-requirement-link" href="/accountability/conduct-vendor-due-diligence">E006: Conduct vendor due diligence</a></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         | No Gap                                                                                                                                                                                                                                                                                                                                     |
| A.10.4: Customers                                                         | The organization shall ensure that its responsible approach to the development and use of AI systems considers their customer expectations and needs.                                                                                                                                                        |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           | **Full Gap.** AIUC-1 does not have specific requirements concerning customer expectations and needs, but covers a broad range of safeguards required to protect users of AI systems including regular testing that safeguards work                                                                                                         |

Last updated September 18, 2025.

<div className="aiuc-footer">
  <span className="aiuc-footer-corner aiuc-footer-corner-tl">
    <svg fill="none" stroke="currentColor" strokeWidth="1" viewBox="0 0 12 12" width="12" height="12">
      <line x1="0" x2="12" y1="6" y2="6" />

      <line x1="6" x2="6" y1="0" y2="12" />
    </svg>
  </span>

  <span className="aiuc-footer-corner aiuc-footer-corner-tr">
    <svg fill="none" stroke="currentColor" strokeWidth="1" viewBox="0 0 12 12" width="12" height="12">
      <line x1="0" x2="12" y1="6" y2="6" />

      <line x1="6" x2="6" y1="0" y2="12" />
    </svg>
  </span>

  <div className="aiuc-footer-strip">
    <span className="aiuc-footer-mono">37.782274° N -122.392147° W</span>
    <span className="aiuc-footer-strip-center">FIG. A (SITE INDEX)</span>

    <span />
  </div>

  <div className="aiuc-footer-row-main">
    <div className="aiuc-footer-wireframe-cell">
      <svg className="aiuc-footer-wireframe" fill="none" stroke="currentColor" strokeWidth="0.4" viewBox="0 0 200 150">
        <rect height="130" width="180" x="10" y="10" />

        <rect height="40" width="60" x="20" y="20" />

        <rect height="40" width="40" x="90" y="20" />

        <rect height="40" width="40" x="140" y="20" />

        <rect height="60" width="60" x="20" y="70" />

        <rect height="60" width="90" x="90" y="70" />

        <line strokeDasharray="2,2" x1="20" x2="180" y1="65" y2="65" />

        <line strokeDasharray="2,2" x1="85" x2="85" y1="20" y2="60" />

        <circle cx="50" cy="40" r="6" />

        <circle cx="110" cy="40" r="6" />

        <circle cx="160" cy="40" r="6" />
      </svg>
    </div>

    <div className="aiuc-footer-wordmark-cell">
      <div className="aiuc-footer-wordmark">Artificial Intelligence Underwriting Company</div>
    </div>

    <div className="aiuc-footer-clocks">
      <InlineClock city="SFO" timeZone="America/Los_Angeles" />

      <InlineClock city="NYC" timeZone="America/New_York" />

      <InlineClock city="LON" timeZone="Europe/London" />
    </div>
  </div>

  <div className="aiuc-footer-row-sub">
    <div className="aiuc-footer-codeblock-cell">
      <div className="aiuc-footer-codeblock">
        <span className="aiuc-footer-codeblock-header">Code</span>
        <span className="aiuc-footer-codeblock-header">Structural unit</span>
        <span className="aiuc-footer-codeblock-code">a.</span>
        <span className="aiuc-footer-codeblock-text">AIUC-1 requirements for agent data, privacy, security, safety, reliability, accountability, and societal risk.</span>
        <span className="aiuc-footer-codeblock-code">b.</span>
        <span className="aiuc-footer-codeblock-text">Evidence templates for technical implementation, legal policy, operational practice, and third-party evaluation.</span>
        <span className="aiuc-footer-codeblock-code">c.</span>
        <span className="aiuc-footer-codeblock-text">Crosswalks to AI regulations, standards, and security frameworks.</span>
        <span className="aiuc-footer-codeblock-code">d.</span>
        <span className="aiuc-footer-codeblock-text">Quarterly updates shaped by enterprise adoption, risk, regulation, and community input.</span>
      </div>
    </div>

    <div className="aiuc-footer-columns-cell">
      <div className="aiuc-footer-columns">
        <div>
          <div className="aiuc-footer-column-header">I. Standard</div>

          <ul className="aiuc-footer-column-list">
            <li><a className="aiuc-footer-column-link" href="/">Overview</a></li>
            <li><a className="aiuc-footer-column-link" href="/crosswalks">Crosswalks</a></li>
            <li><a className="aiuc-footer-column-link" href="/evidence">Evidence</a></li>
            <li><a className="aiuc-footer-column-link" href="/changelog">Changelog</a></li>
          </ul>
        </div>

        <div>
          <div className="aiuc-footer-column-header">II. Learn</div>

          <ul className="aiuc-footer-column-list">
            <li><a className="aiuc-footer-column-link" href="/learn/about">About AIUC-1</a></li>
            <li><a className="aiuc-footer-column-link" href="/learn/contribute">Contribute</a></li>
            <li><a className="aiuc-footer-column-link" href="/scoping">Scoping</a></li>
            <li><a className="aiuc-footer-column-link" href="/faq">FAQ</a></li>
          </ul>
        </div>

        <div>
          <div className="aiuc-footer-column-header">III. Office</div>

          <ul className="aiuc-footer-column-list">
            <li><a className="aiuc-footer-column-link" href="/consortium">Consortium</a></li>
            <li><a className="aiuc-footer-column-link" href="/contact">Contact</a></li>
            <li><a className="aiuc-footer-column-link" href="/legal/privacy">Privacy policy</a></li>
            <li><a className="aiuc-footer-column-link" href="/legal/terms">Terms of use</a></li>
          </ul>
        </div>
      </div>
    </div>
  </div>

  <div className="aiuc-footer-strip-bottom">
    <span className="aiuc-footer-mono">100</span>
    <span>© AIUC — ALL RIGHTS RESERVED</span>
  </div>

  <span className="aiuc-footer-corner aiuc-footer-corner-bl">
    <svg fill="none" stroke="currentColor" strokeWidth="1" viewBox="0 0 12 12" width="12" height="12">
      <line x1="0" x2="12" y1="6" y2="6" />

      <line x1="6" x2="6" y1="0" y2="12" />
    </svg>
  </span>

  <span className="aiuc-footer-corner aiuc-footer-corner-br">
    <svg fill="none" stroke="currentColor" strokeWidth="1" viewBox="0 0 12 12" width="12" height="12">
      <line x1="0" x2="12" y1="6" y2="6" />

      <line x1="6" x2="6" y1="0" y2="12" />
    </svg>
  </span>
</div>