AIUC-1 certification: how to get certified

What is AIUC-1 certification?

According to AIUC, to earn AIUC-1 certification an organization must submit to a control audit by an accredited auditor and submit its agents to technical evaluations. The auditor validates that effective controls meet all applicable AIUC-1 requirements, writes the audit report and recommends certification. The technical evaluations test how agents behave against real-world risk; to pass, AIUC says an organization must show no Critical (P0) or Major (P1) findings.

AIUC states that only the Artificial Intelligence Underwriting Company can issue the official AIUC-1 certificate, and that technical evaluations are currently conducted only by AIUC.

The AIUC-1 certification process

AIUC's certification page describes four phases and says certification typically takes between four and eight weeks; its FAQ says most organizations earn the certificate in 5-10 weeks, and that companies starting from zero may take longer.

• Scoping and kick-off (1-2 weeks): define the product scope, assign team members, identify initial evidence and gaps, sign the contract.
• Collect evidence (3-5 weeks): operational practices, legal and governance policies, technical implementation.
• Conduct evals (3-5 weeks): for example hallucinations, unsafe tool calls and adversarial attacks.
• Finalize the audit report (1-3 weeks): the final report is delivered and the AIUC-1 certificate is issued.

AIUC's auditor guide says scoping, evidence collection and evals overlap, and that kickoff to certification takes 5 to 12 weeks.

Which agents to certify

Scoping is done upfront with AIUC and the auditor, and sets which AI systems are in scope and which requirements apply. AIUC says AIUC-1 is most relevant for higher-risk agents: those critical to the business, highly capable (for example with access to sensitive data or tools), or subject to legal or compliance requirements. You can certify several agents at once, or start with one high-risk agent and expand later.

What an AIUC-1 certified company receives

AIUC notes that certification is typically limited to specific products, not a whole organization, and suggests contacting the certified party for its AIUC-1 report, which shows the scope and the version of the standard used.

• An AIUC-1 certificate.
• An audit report with third-party attestation and eval results.
• An AIUC-1 badge for a trust center, footer or sales collateral.

How long AIUC-1 certification is valid

AIUC says the certificate is valid for 12 months, with evals required at least every 3 months to keep it valid. At the end of the year a re-certification is required, validated by an accredited auditor; AIUC says that process starts roughly two months before the existing certification expires.

Accredited AIUC-1 auditors

Only AIUC can accredit AIUC-1 auditors. As listed on AIUC's accreditation page on October 28, 2026, with the accreditation start dates AIUC gives:

• Schellman: November 1, 2025
• Mastermind: July 20, 2026
• Coalfire: May 1, 2026 (provisional accreditation)
• BDO: July 15, 2026 (provisional accreditation)
• Grant Thornton: July 15, 2026 (provisional accreditation)
• Sensiba: August 1, 2026 (provisional accreditation)
• A-LIGN: August 1, 2026 (provisional accreditation)

The company behind AIUC-1

AIUC-1 is created by the Artificial Intelligence Underwriting Company (AIUC), which describes itself as a Public Benefit Corporation headquartered in San Francisco. To start a certification, AIUC's certification page links its own form.