What Is SOC 2 + AIUC-1? One Examination, One Report for AI Agents

For years, SOC 2 has been the standard enterprises rely on to build trust in their technology. It validates the infrastructure, access controls, and operational rigor behind a system. But AI raises new questions—not just about whether your systems are secure, but whether your AI behaves in a way you say it does, and whether it can be trusted to act within the boundaries you've set, even under pressure.

That's why the AICPA and AIUC are coming together to bring SOC 2 and the AIUC-1 into a single examination. One examination, one opinion, two criteria sets.

SOC 2 covers your infrastructure, including access controls and operational rigor. AIUC-1 covers your AI agents, with adversarial testing built to evaluate how an agent responds to prompt injection, unauthorized tool calls, and other unexpected conditions. Both criteria sets are reported under one opinion.

Why SOC 2 + AIUC-1 Matters

This convergence of SOC 2 + AIUC-1 matters because AI risk doesn't move at the pace of a traditional annual audit. That's why AIUC-1 controls are retested quarterly, keeping certification aligned to current models, capabilities, and attack techniques, not a point in time snapshot. The certified boundary is stated in the report itself, so there’s no guessing about what was tested.

The Process

The SOC 2 + AIUC-1 process starts with a thirty minute consultation. From there, we scope the agents and products in the testing boundary, check audit readiness across evidence and your test environment, run adversarial testing, and retest anything that needs it. We review the evidence and we get you your report from start to finish. This typically runs in as little as two months alongside your SOC 2 engagement.

The result is one attestation report covering both criteria sets, signed by a licensed CPA firm. A separate AIUC-1 certificate is issued by AIUC, but you walk away with one report instead of two separate conversations with every enterprise buyer.

Why Schellman?

Schellman has spent over two decades auditing the infrastructure of the world's most scrutinized companies, and now the AI systems built on top of it. We were the first ANAB-accredited ISO 42001 certification body and are now the first authorized assessor of AIUC-1.

Only an independent CPA firm can issue a SOC 2 + AIUC-1 report. So when your customers, boards, and regulators read it, they know it reflects what you've actually built.

Contact Us

If you’re deploying AI agents in production, contact us to see where you stand.