AIUC
Readiness and gap assessment support for companies preparing their AI agents for evaluation against the AIUC-1 standard.
Overview
AIUC-1 is a standard for AI agent security, safety, and reliability developed by the Artificial Intelligence Underwriting Company. It organizes requirements into six areas: data and privacy, security, safety, reliability, accountability, and society. Certification requires meeting the applicable requirements, validated by an accredited auditor, along with technical testing of the agent. The standard is updated on a quarterly basis and maps to frameworks such as the NIST AI Risk Management Framework, ISO/IEC 42001, and the EU AI Act.
For companies building or deploying AI agents, enterprise buyers increasingly want evidence that those agents are governed and controlled. Our role is readiness. We help you understand the AIUC-1 requirements that apply to your agent, assess your current policies, controls, and documentation against them, and plan remediation before you engage an accredited auditor. We do not issue AIUC-1 certifications, and our work is designed to prepare you for that independent evaluation.
How We Help You Prepare for AIUC-1
Applicability and Scoping
Identifying which AI agents, use cases, and supporting systems are in scope and which AIUC-1 requirements are likely to apply based on how your agent is built, deployed, and used by customers.
AIUC-1 Gap Assessment
Assessing current controls and documentation across data and privacy, security, safety, reliability, accountability, and society, then ranking gaps by how much work they will take to close.
AI Governance and Policies
Helping draft or refine the policies, roles, and oversight processes that support accountability for AI agents, including acceptable use, incident handling, and change management for models and prompts.
Control Remediation Planning
Turning assessment findings into a practical remediation roadmap with owners and milestones, so engineering, security, and leadership teams know what needs to be in place before an audit.
Framework Crosswalks
Mapping existing SOC 2, ISO 27001, or NIST AI RMF work to AIUC-1 requirements to reuse controls and evidence you already have rather than starting over.
Audit Preparation
Organizing evidence and documentation and helping your team understand what an accredited AIUC-1 auditor will typically review, so the independent evaluation starts from an organized position.
Challenges We Help You Address
- ✓Enterprise customers asking for proof that your AI agents are safe and controlled
- ✓Unclear ownership and accountability for AI agent behavior and incidents
- ✓Security and privacy controls not yet extended to AI-specific risks
- ✓Existing compliance work that has not been mapped to AI requirements
- ✓Limited internal experience preparing for a third-party AI audit
Frequently Asked Questions
What is AIUC-1?
AIUC-1 is a standard for AI agent security, safety, and reliability created by the Artificial Intelligence Underwriting Company. Its requirements are grouped into six areas: data and privacy, security, safety, reliability, accountability, and society. Agents can earn certification by meeting the applicable requirements, as validated by an accredited auditor, and by completing technical testing. The standard is updated quarterly, and certified agents are subject to annual re-certification.
How does AIUC-1 relate to SOC 2 and ISO 27001?
AIUC-1 focuses specifically on AI agents, while SOC 2 and ISO 27001 address information security more broadly. AIUC-1 is designed to map to other frameworks, including the NIST AI Risk Management Framework, ISO/IEC 42001, and the EU AI Act, and crosswalks to SOC 2 are available. Companies with existing security compliance programs can often reuse some controls and evidence, though AI-specific risks typically require additional work.
What is an AIUC-1 readiness assessment?
An AIUC-1 readiness assessment is an advisory review that compares your AI agent’s current controls, policies, and documentation against the AIUC-1 requirements likely to apply to it. It identifies gaps and produces a remediation plan. It is not a certification. Certification decisions rest with an accredited auditor, and the readiness work is intended to help you approach that evaluation prepared.
Does Pease Bell certify companies under AIUC-1?
No. Our AIUC-1 work is advisory and focused on readiness. We help you understand the requirements, assess gaps, and plan remediation. AIUC-1 certification requires validation by an accredited auditor and technical testing of the agent, which are separate from our readiness services. We can help you prepare so that the formal evaluation starts from organized, well-documented controls.
Related services & industries
Contact Us
Tell us about your organization and a member of our team will be in touch.