Auditors Meet Urgent Demand for AI Assurance with New Offering from AICPA and AIUC

What happened

The American Institute of CPAs and Artificial Intelligence Underwriting Company announced a new assurance offering that combines a SOC 2 report with the AIUC‑1 certification for AI agent safety, security and reliability. The joint certification provides a single CPA‑led audit that evaluates both organizational controls and live AI agent behavior across thousands of risk scenarios. AIUC‑1 aligns with standards such as MITRE ATLAS, ISO 42001 and the EU AI Act. Certifications must be renewed annually, with AIUC‑1 technical retesting every quarter. The service is expected to be widely available to enterprises and CPA firms in early 2027.

Why it matters

Enterprises deploying AI agents will face a new benchmark for proving security and reliability, prompting them to plan for combined SOC 2 and AIUC‑1 audits and ongoing quarterly testing.

Business impact

Adopting the joint certification will add audit and testing costs but can reduce stakeholder risk concerns and accelerate AI adoption.

Checklist

• Schedule a joint SOC 2 and AIUC‑1 auditHigh priority

  Engage a licensed CPA firm offering the combined certification before the early‑2027 rollout.

• Implement quarterly AIUC‑1 technical retestingMedium priority

  Set up processes to test AI agents against the AIUC‑1 scenario library each quarter.

• Plan for annual renewal of SOC 2 and AIUC‑1 certificationsMedium priority

  Allocate resources for yearly recertification to maintain compliance.

Who reported it

Discussion