AICPA and AIUC Launch Joint AI Assurance Certification
The new standard combines SOC 2 reporting with AIUC-1 testing to verify that AI agents are secure and behave as intended.
Updated on Oct. 23, 2026 in Artificial Intelligence
Live Poll
Do you trust that businesses using AI agents have adequate security measures in place?
The American Institute of CPAs and Artificial Intelligence Underwriting Company have released a joint assurance certification to verify AI agent security. This certification integrates standard SOC 2 reporting with the AIUC-1 framework to provide independent validation of AI performance.
Why it matters
Organizations require independent verification to ensure their AI agents remain secure and behave as intended in production environments. This joint offering provides a unified method for businesses to demonstrate compliance and safety to stakeholders.
The AIUC-1 standard covers six principles including privacy, security, and reliability while mapping to frameworks like ISO 42001. Testing for the certification evaluates agents through iterative conversations across thousands of scenarios to detect hallucinations and prompt injection.
The players
American Institute of CPAs
This professional organization represents the certified public accounting profession in the United States and sets ethical and technical standards for the industry.
Artificial Intelligence Underwriting Company
This entity specializes in developing standards and risk assessment protocols for artificial intelligence agents and automated systems.
The details
The certification is delivered via a single CPA-led engagement and requires annual renewal with quarterly technical retesting. The AIUC-1 framework specifically tests for data leakage, manipulative requests, and adversarial prompt injection.
Timeline
Over 40,000 organizations obtained a SOC 2 or AIUC-1 certification in 2025.
The joint assurance certification was officially announced on October 23, 2026.
A full rollout of the joint certification is expected in early 2027.
The Tech Race
This certification shifts the industry toward standardized automated auditing as companies move away from ad-hoc security reviews. It positions the collaboration against informal internal testing methods, establishing a benchmark for AI accountability similar to legacy financial reporting.
Businesses can now streamline their compliance workflows by combining SOC 2 and AI-specific audits into a single engagement. This provides customers with greater assurance that the AI agents handling their data are verified against security threats.
The takeaway
Organizations should prepare for more rigorous auditing requirements as AI security standards become increasingly standardized. Prioritizing certified AI agents can help companies mitigate risks related to hallucinations and data leakage.
What happens next
A full launch of the joint certification program is scheduled for early 2027.
Further reading
Learn more about evolving governance standards in the Artificial Intelligence section.
Source note: This article includes information reported by Nine O' Clock - first exclusively daily publication to appear in English language in Romania.
Live Poll
Do you trust that businesses using AI agents have adequate security measures in place?
