AICPA and AIUC launch SOC 2 plus AIUC-1 certification for AI agents

What happened

• The American Institute of CPAs and Artificial Intelligence Underwriting Company announced a new assurance offering that combines a SOC 2 report with the AIUC‑1 certification for AI agent safety, security and reliability.
• The joint certification provides a single CPA‑led audit that evaluates both organizational controls and live AI agent behavior across thousands of risk scenarios.
• AIUC‑1 aligns with standards such as MITRE ATLAS, ISO 42001 and the EU AI Act.
• Certifications must be renewed annually, with AIUC‑1 technical retesting every quarter.
• The service is expected to be widely available to enterprises and CPA firms in early 2027.

Why it matters

Enterprises deploying AI agents will face a new benchmark for proving security and reliability, prompting them to plan for combined SOC 2 and AIUC‑1 audits and ongoing quarterly testing.

Business impact

Adopting the joint certification will add audit and testing costs but can reduce stakeholder risk concerns and accelerate AI adoption.

What to check

1. 1

   Schedule a joint SOC 2 and AIUC‑1 auditHigh priority

   Engage a licensed CPA firm offering the combined certification before the early‑2027 rollout.

2. 2

   Implement quarterly AIUC‑1 technical retestingMedium priority

   Set up processes to test AI agents against the AIUC‑1 scenario library each quarter.

3. 3

   Plan for annual renewal of SOC 2 and AIUC‑1 certificationsMedium priority

   Allocate resources for yearly recertification to maintain compliance.