# AIUC-1

> AIUC-1 is the world's first AI agent standard

- [Overview](https://standard.aiuc-1.com/introduction/overview.md)
- [Methodology](https://standard.aiuc-1.com/introduction/methodology.md)
- [Consortium](https://standard.aiuc-1.com/introduction/consortium.md)
- [About AIUC-1](https://standard.aiuc-1.com/learn/about.md)
- [AIUC-1 operationalizes emerging AI frameworks](https://standard.aiuc-1.com/crosswalks/index.md): AIUC-1 mappings to external AI frameworks, standards, and regulations.
- [AIUC-1 × EU AI Act](https://standard.aiuc-1.com/crosswalks/eu-ai-act.md)
- [AIUC-1 × ISO 42001](https://standard.aiuc-1.com/crosswalks/iso-42001.md)
- [AIUC-1 × MITRE ATLAS](https://standard.aiuc-1.com/crosswalks/mitre-atlas.md)
- [AIUC-1 × NIST AI RMF](https://standard.aiuc-1.com/crosswalks/nist-ai-rmf.md)
- [AIUC-1 × OWASP Top 10 for LLM Applications](https://standard.aiuc-1.com/crosswalks/owasp-top-10.md)
- [AIUC-1 × OWASP AIVSS](https://standard.aiuc-1.com/crosswalks/owasp-aivss.md)
- [AIUC-1 × OWASP Top 10 for Agentic Applications](https://standard.aiuc-1.com/crosswalks/owasp-agentic-top-10.md)
- [AIUC-1 × IBM AI Risk Atlas](https://standard.aiuc-1.com/crosswalks/ibm-ai-risk-atlas.md)
- [AIUC-1 × Cisco AI Security & Safety Framework](https://standard.aiuc-1.com/crosswalks/cisco-ai-security-safety-framework.md)
- [AIUC-1 × CSA AICM](https://standard.aiuc-1.com/crosswalks/csa-aicm.md)
- [AIUC-1 changelog](https://standard.aiuc-1.com/changelog/index.md)
- [Provide input on AIUC-1](https://standard.aiuc-1.com/learn/contribute.md)
- [A. Data & Privacy](https://standard.aiuc-1.com/data-and-privacy.md)
- [A001: Establish input data policy](https://standard.aiuc-1.com/data-and-privacy/establish-data-use-policy.md)
- [A002: Establish output data policy](https://standard.aiuc-1.com/data-and-privacy/define-output-rights.md)
- [A003: Limit AI agent data access](https://standard.aiuc-1.com/data-and-privacy/implement-contextual-data-safeguards.md)
- [A004: Protect IP & trade secrets](https://standard.aiuc-1.com/data-and-privacy/protect-ip-trade-secrets.md)
- [A005: Prevent cross-customer data exposure](https://standard.aiuc-1.com/data-and-privacy/prevent-cross-customer-data-exposure.md)
- [A006: Prevent PII leakage](https://standard.aiuc-1.com/data-and-privacy/prevent-pii-leakage.md)
- [A007: Prevent IP violations](https://standard.aiuc-1.com/data-and-privacy/prevent-ip-violations.md)
- [A008: Prevent leakage of credentials and secrets](https://standard.aiuc-1.com/data-and-privacy/prevent-secrets-leakage.md)
- [B. Security](https://standard.aiuc-1.com/security.md)
- [B001: Third-party testing of adversarial robustness](https://standard.aiuc-1.com/security/test-adversarial-robustness.md)
- [B002: Detect adversarial input](https://standard.aiuc-1.com/security/detect-adversarial-input.md)
- [B003: Manage public release of technical details](https://standard.aiuc-1.com/security/limit-technical-over-disclosure.md)
- [B004: Prevent AI endpoint scraping](https://standard.aiuc-1.com/security/prevent-ai-endpoint-scraping.md)
- [B005: Implement real-time input filtering](https://standard.aiuc-1.com/security/implement-real-time-input-filtering.md)
- [B006: Prevent unauthorized AI agent actions](https://standard.aiuc-1.com/security/enforce-contextual-access-controls.md)
- [B007: Enforce user access privileges to AI systems](https://standard.aiuc-1.com/security/enforce-ai-access-privileges.md)
- [B008: Protect AI system deployment environment](https://standard.aiuc-1.com/security/protect-model-deployment-environment.md)
- [B009: Limit output over-exposure](https://standard.aiuc-1.com/security/limit-output-over-exposure.md)
- [B010: Promote secure patterns in generated code](https://standard.aiuc-1.com/security/promote-secure-code-patterns.md)
- [C. Safety](https://standard.aiuc-1.com/safety.md)
- [C001: Define AI risk taxonomy](https://standard.aiuc-1.com/safety/define-ai-risk-taxonomy.md)
- [C002: Conduct pre-deployment testing](https://standard.aiuc-1.com/safety/conduct-pre-deployment-testing.md)
- [C003: Prevent harmful outputs](https://standard.aiuc-1.com/safety/prevent-harmful-outputs.md)
- [C004: Prevent out-of-scope outputs](https://standard.aiuc-1.com/safety/prevent-out-of-scope-outputs.md)
- [C005: Prevent agent-specific high risk outputs](https://standard.aiuc-1.com/safety/prevent-other-high-risk-outputs.md)
- [C006: Prevent output vulnerabilities](https://standard.aiuc-1.com/safety/prevent-output-vulnerabilities.md)
- [C007: Flag high risk outputs for human review](https://standard.aiuc-1.com/safety/flag-high-risk-recommendations.md)
- [C008: Monitor AI risk categories](https://standard.aiuc-1.com/safety/monitor-ai-risk-categories.md)
- [C009: Enable real-time feedback and intervention](https://standard.aiuc-1.com/safety/collect-real-time-feedback.md)
- [C010: Third-party testing for harmful outputs](https://standard.aiuc-1.com/safety/3rd-party-testing-for-harmful-outputs.md)
- [C011: Third-party testing for out-of-scope outputs](https://standard.aiuc-1.com/safety/3rd-party-testing-for-out-of-scope-outputs.md)
- [C012: Third-party testing for customer-defined risk](https://standard.aiuc-1.com/safety/3rd-party-testing-for-other-risk.md)
- [D. Reliability](https://standard.aiuc-1.com/reliability.md)
- [D001: Prevent hallucinated outputs](https://standard.aiuc-1.com/reliability/prevent-hallucinated-outputs.md)
- [D002: Third-party testing for hallucinations](https://standard.aiuc-1.com/reliability/3rd-party-testing-for-hallucinations.md)
- [D003: Restrict unsafe tool calls](https://standard.aiuc-1.com/reliability/restrict-unsafe-tool-calls.md)
- [D004: Third-party testing of tool calls](https://standard.aiuc-1.com/reliability/3rd-party-testing-of-tool-calls.md)
- [E. Accountability](https://standard.aiuc-1.com/accountability.md)
- [E001: AI failure plan for security breaches](https://standard.aiuc-1.com/accountability/ai-failure-plan-for-security-breaches.md)
- [E002: AI failure plan for harmful outputs](https://standard.aiuc-1.com/accountability/ai-failure-plan-for-harmful-outputs.md)
- [E003: AI failure plan for hallucinations](https://standard.aiuc-1.com/accountability/ai-failure-plan-for-hallucinations.md)
- [E004: Assign accountability](https://standard.aiuc-1.com/accountability/assign-accountability.md)
- [E005: Document data storage security](https://standard.aiuc-1.com/accountability/assess-cloud-vs-on-prem-processing.md)
- [E006: Conduct vendor due diligence](https://standard.aiuc-1.com/accountability/conduct-vendor-due-diligence.md)
- [E007: [Retired] Document system change approvals](https://standard.aiuc-1.com/accountability/document-system-change-approvals.md)
- [E008: Review internal processes](https://standard.aiuc-1.com/accountability/review-internal-processes.md)
- [E009: Monitor third-party access](https://standard.aiuc-1.com/accountability/monitor-3rd-party-access.md)
- [E010: Establish AI acceptable use policy](https://standard.aiuc-1.com/accountability/establish-ai-acceptable-use-policy.md)
- [E011: Record processing locations](https://standard.aiuc-1.com/accountability/record-processing-locations.md)
- [E012: Document regulatory compliance](https://standard.aiuc-1.com/accountability/document-regulatory-compliance.md)
- [E013: Implement quality management system](https://standard.aiuc-1.com/accountability/implement-quality-management-system.md)
- [E014: [Retired] Share transparency reports](https://standard.aiuc-1.com/accountability/share-transparency-reports.md)
- [E015: Log AI system activity](https://standard.aiuc-1.com/accountability/log-model-activity.md)
- [E016: Implement AI disclosure mechanisms](https://standard.aiuc-1.com/accountability/implement-ai-disclosure-mechanisms.md)
- [E017: Document system transparency policy](https://standard.aiuc-1.com/accountability/document-system-transparency-policy.md)
- [F. Society](https://standard.aiuc-1.com/society.md)
- [F001: Prevent AI cyber misuse](https://standard.aiuc-1.com/society/prevent-ai-cyber-misuse.md)
- [F002: Prevent catastrophic misuse](https://standard.aiuc-1.com/society/prevent-catastrophic-misuse.md)
- [AIUC-1 Certification](https://standard.aiuc-1.com/aiuc-1-certification.md)
- [Scoping the AIUC-1 audit](https://standard.aiuc-1.com/scoping.md)
- [Accredited AIUC-1 auditors](https://standard.aiuc-1.com/accredited-auditors.md)
- [Re-certification: Maintaining AIUC-1](https://standard.aiuc-1.com/re-certification-maintaining-aiuc-1.md)
- [Frequently asked questions](https://standard.aiuc-1.com/faq.md)
- [Full evidence list](https://standard.aiuc-1.com/evidence/index.md): Evidence templates for AIUC-1 requirements.
- [Legal evidence](https://standard.aiuc-1.com/evidence/legal-policies.md): Evidence templates in the legal policies category.
- [Operational evidence](https://standard.aiuc-1.com/evidence/operational-practices.md): Evidence templates in the operational practices category.
- [Technical evidence](https://standard.aiuc-1.com/evidence/technical-implementation.md): Evidence templates in the technical implementation category.
- [Third-party evals](https://standard.aiuc-1.com/evidence/third-party-evals.md): Evidence templates in the third-party evals category.
- [AIUC-1 Auditor Portal](https://standard.aiuc-1.com/auditors/overview.md): How accredited auditors introduce, scope, deliver, and certify AIUC-1.
- [Introduce and scope AIUC-1](https://standard.aiuc-1.com/auditors/introduce-and-scope.md): Identifying the right client, introducing AIUC-1, assessing readiness, and scoping and pricing the engagement.
- [Deliver and certify](https://standard.aiuc-1.com/auditors/deliver-and-certify.md): Kickoff to certificate takes about ten weeks.
- [Client kit](https://standard.aiuc-1.com/auditors/client-kit.md): The four assets you share with the client.
- [Privacy Notice](https://standard.aiuc-1.com/legal/privacy.md)
- [Terms of Use](https://standard.aiuc-1.com/legal/terms.md)