New Certification by AICPA and AIUC Addresses Businesses' AI Assurance Needs

AICPA and AIUC Launch Comprehensive AI Assurance Certification

In a significant response to the increasing demand for accountability in artificial intelligence, the American Institute of CPAs (AICPA) has teamed up with the Artificial Intelligence Underwriting Company (AIUC) to unveil a pioneering assurance certification. This new offering aims to provide an independent evaluation of business risks related to AI systems and agents, which have become integral components of many organizations.

The relevance of AI is undeniable; it is revolutionizing various sectors. However, the rapid adoption of AI technologies has sparked concerns regarding their potential failures, especially given the critical nature of their operations. With AI agents now capable of executing essential functions, any malfunction could lead to serious security breaches, making this certification particularly timely and crucial.

The joint certification combines the rigorous CPA assurance framework with the advanced technical testing protocols developed by AIUC. Last year alone, more than 40,000 organizations successfully obtained SOC 2® attestations or AIUC-1 certifications, highlighting the growing need for reliable AI governance.

Mark Koziel, President and CEO of AICPA, emphasized the importance of this certification, stating, "Companies are investing heavily in AI, and stakeholders deserve clarity on the safety, reliability, and governance of the technologies they employ. This joint offering not only provides that, but it also leverages the professionalism and integrity of CPAs to build trust within capital markets."

Organizations employing AI agents now face the challenge of ensuring the security of both these agents and the systems they interact with. AI developers must demonstrate that their technologies perform as advertised while complying with essential security standards. Unfortunately, traditional methods of verifying trust through lengthy security questionnaires often prove cumbersome and ineffective, stalling progress in AI adoption.

To combat this issue, the AICPA and AIUC certification process offers a streamlined, single report generated under the guidance of a CPA engagement. This innovative approach consolidates a System and Organization Controls (SOC 2®) report—which is well-recognized for validating an organization’s effective data protection measures and stakeholder trust—with the AIUC-1 certification, a world-first standard focusing on AI agent safety, security, and reliability.

The SOC 2® report involves an independent examination performed by licensed CPAs under AICPA Attestation Standards, evaluating controls related to system security, availability, processing integrity, confidentiality, or privacy. In contrast, AIUC-1 stems from collaborative efforts of over 250 CISOs and security leaders, continuously updated to align with the dynamic landscape of AI risks.

This includes six core principles: data and privacy, security, safety, reliability, accountability, and societal impact, all of which are mapped to reputable frameworks like MITRE ATLAS, ISO 42001, and the EU AI Act.

Rajiv Dattani, co-founder of AIUC, noted, "AI agents perform tasks at speeds that exceed human verification capabilities. Therefore, this independent certification addresses the critical questions all organizations ask: What is our security posture? Are our AI agents operating as intended?" He further explained that the AIUC-1 standard goes beyond policy reviews. Instead, it incorporates real-time testing of AI agent behaviors across a multitude of risk scenarios, enabling thorough assessments against potential vulnerabilities.

In a rapidly evolving risk environment, both SOC 2 reports and AIUC-1 certifications will require annual renewals along with quarterly technical retesting from AIUC-1. This ensures that organizations continuously meet burgeoning standards for trust, security, and reliability.

Several CPA firms are already rolling out the joint SOC 2® and AIUC-1 services, with a broader launch of this certification anticipated in early 2027. The strategic partnership between AICPA and AIUC marks an important step forward in fostering a secure and trustworthy environment for AI integration in business practices.

About the Partners

The AICPA, founded in 1887, is the largest global association representing CPAs and is committed to serving the public interest. They are involved in various aspects of the industry from governance to education and standards setting. AIUC, established by former leaders at firms like McKinsey and Anthropic, focuses on certifying and insuring AI agents, offering the first comprehensive safety and reliability standard in the sector. With their combined expertise, AICPA and AIUC are set to redefine AI assurance standards across industries.