AICPA Launches New AI Assurance Certification
The AICPA and Artificial Intelligence Underwriting Company are introducing a joint standard to verify AI agent security.
Updated on Oct. 19, 2026 in Artificial Intelligence
Live Poll
Should companies be required to pass independent security testing before they deploy AI tools?
The AICPA and the Artificial Intelligence Underwriting Company have unveiled the SOC 2 plus AIUC-1 certification. This new standard combines traditional CPA assurance with rigorous technical testing to ensure the reliability of AI agents.
Why it matters
Automated AI agents require verified security, yet current manual questionnaires often delay corporate adoption. This certification aims to streamline the verification process while maintaining high security standards for automated tasks.
The AIUC-1 standard was developed by more than 250 chief information security officers and features 6 specific principles for controls. The process involves live testing of AI behavior across hundreds of unique attack scenarios.
The players
AICPA
The American Institute of Certified Public Accountants is the national professional organization for Certified Public Accountants in the United States.
Artificial Intelligence Underwriting Company
This entity focuses on technical frameworks and standards for assessing the security and reliability of artificial intelligence systems.
The details
The certification process requires evaluations based on thousands of iterative conversational scenarios to test AI agent behavior. Multiple CPA firms are currently delivering this joint offering to clients to verify the reliability of their automated systems.
Timeline
Over 40,000 organizations obtained certifications throughout 2025.
The AICPA announced the joint offering on October 19, 2026.
A full launch of the joint certification is expected in early 2027.
The Tech Race
This certification updates the SOC 2 attestation framework to accommodate the rapid rise of autonomous AI agents. By formalizing these standards, the industry is moving toward a more structured verification process to compete with the growing demand for secure AI software.
Businesses and organizations that rely on AI agents for automated tasks will soon have a clearer path to validating their system security. This update will help companies replace slow, outdated security questionnaires with standardized technical audits.
The takeaway
Reliability and security remain the primary hurdles for companies looking to integrate AI into their core operations. Managers should monitor how these new standards evolve to ensure their vendor selection process remains compliant with emerging audit requirements.
Further reading
For broader context on how businesses are managing new software risks, visit the Artificial Intelligence section.
Source note: This article includes information reported by CPA Practice Advisor.
Live Poll
Should companies be required to pass independent security testing before they deploy AI tools?
