Framework · AIUC

AIUC-1, independent AI agent certification.

The new certification for production AI agents. We're early partners and can help you ship AIUC-1 attestation.

What is AIUC-1

The plain-English version.

AIUC-1 is an independent certification standard for production AI agents, covering safety, controllability, traceability, and risk management. It's the AI equivalent of SOC 2.

  • Pre-certification readiness
  • Agent risk register
  • AIUC-licensed assessors
How we help

Three lanes, readiness, implementation, audit support.

01

Readiness

Gap assessment against AIUC-1. Concrete plan with owners, dates, and effort.

02

Implementation

Policies, controls, evidence pipelines built into Vanta. AI drafts, experts review.

03

Audit support

We sit beside you in audit interviews and respond to evidence requests.

Timeline

From kickoff to certification.

DAY 0

Kickoff

Slack channel live. Scope, stakeholders, baseline.

DAY 30

Readiness

Gaps closed, policies signed, evidence flowing.

DAY 60

Audit prep

Mock audit, control narratives, auditor selection.

DAY 90

Audit

External audit closed. Letter or report in hand.

AIUC-1 customer
“The Trust Architects ran our AIUC-1 program end to end. We touched it for sign-off and stakeholder review. Everything else was on rails.”
RS
Renata Soares
CTO · Fintech BR
Fintech BR
90 days
AIUC-1 certification
FAQ

AIUC-1 questions we hear weekly.

How long does AIUC-1 take?

Most customers complete a first audit in 60-90 days from kickoff. Larger programs run 4-6 months.

What does it cost?

Our retainer plus the external auditor's fee. We size it to your stage on the first call.

Do we need new tooling?

Vanta is our default. We can also work on Drata or Secureframe. No tooling change required if you're already on a platform.

Who runs the audit?

An independent AIUC-qualified auditor. We have preferred firms in Brazil, the US, and Europe.

Will this stand up to enterprise scrutiny?

Yes. We design programs that pass not only the audit but also the buyer's security team review afterward.

05 · Timeline

From kickoff to audit, in four moves.

Day 0

Use-case scoping

Kickoff, scope, baseline read.

Day 30

Evidence collection

First artifacts shipped, evidence pipeline running.

Day 60

External attestation

Internal audit, remediation closed, audit prep complete.

Day 90

Renewal & monitoring

Audit run, defended, and certified. Operate phase begins.