Artificial intelligence is moving quickly from experimentation to enterprise adoption. Organizations are embedding AI into products, automating workflows, and deploying AI agents that interact with customers, employees, business systems, and sensitive data.

As that adoption grows, so does the need to demonstrate that these systems can be trusted.

Organizations must consider risks that extend beyond traditional application security, including prompt injection, jailbreaks, data leakage, hallucinations, unsafe AI behavior, and the risks that come with AI agents taking actions on behalf of users.

At the same time, customers, partners, regulators, and enterprise buyers increasingly want evidence that organizations are managing these risks responsibly.

This has led to a growing ecosystem of AI standards, frameworks, and regulations. ISO/IEC 42001 provides a framework for establishing an AI management system. The NIST AI Risk Management Framework provides guidance for managing AI risks. Regulations such as the EU AI Act establish legal requirements for organizations developing or deploying certain AI systems.

AIUC-1 is another piece of this landscape.

Designed specifically for AI agents, AIUC-1 combines governance requirements with technical testing to help organizations evaluate and demonstrate the security, safety, reliability, accountability, data privacy, and societal considerations surrounding their AI systems.

What is AIUC-1?

AIUC-1 is an AI assurance standard designed to evaluate how organizations secure, govern, and validate AI agents.

The framework combines operational and governance controls with technical testing. This distinguishes AIUC-1 from approaches that focus primarily on policies or organizational processes. Organizations pursuing certification need to demonstrate that appropriate controls are established and that their AI systems are being technically evaluated against relevant risks.

The current AIUC-1 standard is organized around six foundational principles:

• Data and privacy: Protecting information used or accessed by AI systems.
• Security: Protecting AI systems, models, integrations, and data from unauthorized access and attacks.
• Safety: Reducing the potential for harmful or unintended AI behavior.
• Reliability: Ensuring AI systems perform consistently and within their intended boundaries.
• Accountability: Establishing clear ownership and oversight for AI systems.
• Society: Addressing broader considerations related to transparency, user impact, and responsible AI use.

Together, these principles provide a structured approach for evaluating AI agents across both technical and organizational controls.

AIUC-1 is not intended to replace every other security, governance, or regulatory framework an organization may need to follow. Instead, it provides AI-specific assurance that can complement a broader security and compliance program.

Why was AIUC-1 created?

AI systems introduce risks that traditional security programs were not designed to address on their own.

A conventional application security assessment may evaluate whether an application prevents unauthorized access or protects sensitive data. An AI system requires organizations to consider additional questions:

• Can an attacker manipulate the system through prompt injection?
• Can the AI be persuaded to bypass its intended safeguards?
• Could sensitive information be exposed through an interaction?
• Can an AI agent take an unsafe action through an integrated tool?
• How does the organization respond when an AI system behaves unexpectedly?
• Who is responsible for monitoring and managing AI-related risks?

These challenges become more significant as organizations move from basic generative AI tools toward AI agents that can access information, use external tools, make decisions, and take actions.

Enterprise buyers are increasingly asking for greater transparency into how these systems are secured and governed. Traditional security questionnaires and compliance reports may not fully answer AI-specific questions.

AIUC-1 provides a structured way to address those concerns by combining governance practices with technical validation.

Rather than simply documenting how an organization intends to manage AI, the framework helps evaluate whether appropriate controls are actually implemented and whether AI systems perform as expected under testing.

What does AIUC-1 cover?

The AIUC-1 standard currently contains 50 requirements across its six foundational principles. The specific requirements that apply to an organization depend on the AI agents included within its certification scope.

This means AIUC-1 is not a one-size-fits-all checklist. Organizations first determine which systems are in scope and which requirements apply to those systems.

Areas evaluated can include:

Data and privacy

Organizations need controls for protecting information accessed, processed, or generated by AI systems.

Depending on the system, this may involve data access, privacy, retention, sensitive information, data leakage, and appropriate use of information.

Security

AI agents can introduce new attack surfaces through models, prompts, integrations, APIs, tools, and connected systems.

Security controls help organizations protect these components against unauthorized access, manipulation, and misuse.

Safety

AI systems need safeguards to reduce the risk of harmful or unintended behavior.

Testing and controls may evaluate how an AI system responds to unsafe requests, adversarial inputs, or situations outside its intended use.

Reliability

Organizations need confidence that AI systems behave consistently and within defined boundaries.

This can include evaluating hallucinations, inconsistent outputs, incorrect tool use, failure handling, and other behaviors that could affect the system's intended purpose.

Accountability

AI governance requires clear ownership.

Organizations should be able to establish who is responsible for AI systems, how decisions are documented, how risks are escalated, and how systems are monitored throughout their lifecycle.

Society

AI systems can affect people beyond the organization operating them. AIUC-1 therefore also addresses broader considerations around responsible deployment, transparency, and potential societal impact.

Who should pursue AIUC-1 certification?

AIUC-1 is particularly relevant to organizations developing or deploying AI agents, especially when those systems interact with users, access sensitive information, connect to business applications, or perform actions on behalf of people.

Organizations may want to consider AIUC-1 if they:

• Build AI-powered products or platforms
• Deploy AI agents for customers or employees
• Sell AI solutions to enterprise customers
• Allow AI systems to access sensitive or confidential information
• Connect AI agents to business applications or external tools
• Use AI in business-critical workflows
• Need to demonstrate AI-specific security and governance practices during enterprise procurement

Certification can be especially valuable for organizations selling AI products into larger enterprises. An independent certification can provide customers with additional assurance that the AI system has been evaluated against a defined set of AI-specific requirements.

Ultimately, whether AIUC-1 is appropriate depends on an organization's AI systems, risk profile, customer expectations, and broader regulatory and compliance obligations.

What are the AIUC-1 certification requirements?

AIUC-1 certification starts with defining the systems that will be evaluated.

Organizations identify the AI agents included within their certification scope and determine which requirements apply based on factors such as the agent's capabilities, architecture, integrations, and deployment environment.

This results in a Statement of Applicability that identifies the requirements and controls included in the certification assessment.

From there, organizations need to demonstrate that applicable controls are implemented and supported by appropriate evidence.

Governance and documentation

Organizations may need policies, procedures, risk assessments, ownership structures, and other documentation demonstrating how AI is governed throughout its lifecycle.

Technical controls

AI systems must be evaluated against relevant technical risks. Depending on the system, testing may address areas such as prompt injection, jailbreaks, data leakage, AI agent behavior, tool use, and other AI-specific vulnerabilities.

Operational practices

Organizations also need to demonstrate that AI security and governance practices are operating in practice, not simply documented on paper.

This can include monitoring, testing, incident management, access controls, risk management, and other ongoing activities.

The combination of governance, technical implementation, and operational evidence is central to the AIUC-1 certification process.

How does AIUC-1 certification work?

While the exact process can vary depending on an organization's scope and readiness, certification generally follows a structured path.

1. Define scope

Identify the AI agents and systems that will be included in certification and determine the applicable requirements.

2. Assess readiness

Review existing governance, security controls, documentation, and technical practices to identify gaps before formal assessment.

3. Develop and implement controls

Address identified gaps by establishing policies, processes, technical safeguards, and supporting documentation.

4. Perform technical testing

Evaluate AI systems against applicable technical risks and remediate findings.

5. Prepare for assessment

Organize evidence and documentation and prepare stakeholders for the certification assessment.

6. Complete certification

An authorized certification body conducts the assessment and, when requirements are met, issues the AIUC-1 certification.

7. Maintain certification

Certification is not a one-time exercise. AIUC-1 requires ongoing technical testing and annual recertification to help organizations maintain assurance as their systems and risks evolve.

How long does AIUC-1 certification take?

The timeline depends on the organization's existing security and AI governance maturity, the complexity of the systems being certified, and the gaps identified during readiness.

Organizations with established security programs and mature governance processes may be able to move through certification more quickly than organizations building their AI controls from the ground up.

A readiness assessment can help establish a more predictable timeline by identifying gaps before formal certification activities begin.

The goal should not simply be to move through certification as quickly as possible. Preparing the underlying controls and processes creates a stronger foundation for maintaining AI assurance after certification.

Does AIUC-1 certification need to be renewed?

Yes, AIUC-1 certification is maintained through ongoing technical testing and annual recertification.

This ongoing approach reflects the pace at which AI systems evolve. Models change, applications gain new capabilities, integrations are added, and new attack techniques emerge.

AIUC-1 also evolves with the technology. The standard is updated periodically to reflect changes in AI risks, technology, and the broader regulatory environment.

For organizations, maintaining certification therefore requires an ongoing program rather than a once-a-year compliance exercise.

How does AIUC-1 compare to other AI frameworks?

AIUC-1 is part of a broader AI governance, security, and regulatory landscape. Understanding how these frameworks differ is important because certification against one framework does not automatically satisfy every AI-related requirement.

AIUC-1 vs. ISO/IEC 42001

ISO/IEC 42001 is an international standard for establishing, implementing, maintaining, and continually improving an AI management system.

Its focus is organizational AI governance.

AIUC-1 takes a more AI-specific assurance approach, combining governance requirements with technical evaluation of AI agents.

The frameworks can therefore complement each other. An organization could use ISO/IEC 42001 to establish its broader AI management system while using AIUC-1 to provide additional assurance around specific AI agents and their technical security and reliability.

AIUC-1 vs. NIST AI RMF

The NIST AI Risk Management Framework provides voluntary guidance for organizations managing AI risks.

AIUC-1 differs by providing a defined, certifiable standard with specific requirements and an independent assessment process.

Organizations can use the NIST AI RMF as part of their broader AI risk management strategy while pursuing AIUC-1 for additional AI-specific assurance.

AIUC-1 vs. the EU AI Act

The EU AI Act is a regulation, not a voluntary certification framework.

Organizations subject to the regulation must meet applicable legal requirements based on the AI systems they develop, deploy, or use.

AIUC-1 does not replace those legal obligations. Instead, it can complement an organization's broader regulatory and risk management efforts by providing structured controls and independent assurance around AI systems.

AIUC-1 certification does not automatically mean an organization is compliant with the EU AI Act.

How Rhymetec can help with AIUC-1 certification

AIUC-1 brings together areas that often sit across different teams, including AI governance, cybersecurity, technical testing, documentation, and audit readiness.

Rhymetec helps organizations prepare for AIUC-1 certification while strengthening the broader security and governance practices that support responsible AI adoption.

Our services can include:

• AIUC-1 readiness assessments to identify gaps and establish a certification roadmap
• AI governance support to develop policies, processes, ownership, and risk management practices
• LLM penetration testing to identify AI-specific security vulnerabilities
• Technical control implementation to address identified security and assurance gaps
• Documentation and evidence preparation to support certification activities
• Audit readiness support to prepare for assessment
• Ongoing support for technical testing, control maintenance, and annual recertification

Because AIUC-1 is one component of a broader AI assurance strategy, Rhymetec can also help organizations understand how it fits alongside ISO/IEC 42001, ISO 27001, SOC 2, the NIST AI Risk Management Framework, and applicable AI regulations.

Contact us today to get started.