Schellman Announces Strategic Partnership with Goldman Sachs Alternatives

Contact Us
Services
Services
Crypto and Digital Trust
Crypto and Digital Trust
Schellman Training
Schellman Training
Sustainability Services
Sustainability Services
AI Services
AI Services
About Us
About Us
Leadership Team
Leadership Team
Corporate Social Responsibility
Corporate Social Responsibility
Careers
Careers
Strategic Partnerships
Strategic Partnerships

How UiPath Is Building Trust in Agentic AI with AIUC-1 Certification

Artificial Intelligence

Published: Mar 10, 2026

As organizations deploy AI agents to automate complex workflows, trust in their responsible use is just as important as their capabilities. Enterprises want to know not only what AI systems can do, but also how they behave in real-world conditions, how they are governed, and whether they can be trusted with sensitive data and critical business processes.

That need for assurance is driving new approaches to governance and certification, tailored for agentic AI.

The Rise of Agentic Automation

UiPath, a trusted global leader in agentic automation, helps organizations harness AI agents to execute and optimize end-to-end workflows across their operations. These agents often interact with enterprise systems, internal data, and even customer-facing processes, making strong governance and oversight essential.

AI governance has always been embedded into UiPath's products from the beginning, starting with ISO 42001 certification, the international standard for AI management systems. As customers began relying on AI agents for increasingly critical workloads, they wanted even deeper visibility into how those agents behave in practice.

UiPath wanted an additional layer of assurance focused specifically on the behavior and risk profile of AI agents themselves.

Strengthening AI Assurance with AIUC-1

To further demonstrate the trustworthiness of its AI agents, UiPath pursued certification through the AIUC-1 framework, developed by the Artificial Intelligence Underwriting Company and designed to build the confidence infrastructure for AI agents.

An AIUC-1 certification acts as a trust signal to enterprises, demonstrating that an AI agent has been rigorously and independently evaluated against relevant risks. The assessment examines how agents interact with systems and data, how they respond to potential threats, and whether the appropriate governance and accountability mechanisms are in place.

In practice, this means testing AI agents against numerous threat scenarios and operational conditions to evaluate their real-world resilience. For UiPath, the certification process provided valuable insights into how their agents perform under pressure and where additional safeguards could strengthen their systems.

The Role of Independent Validation

Third-party validation plays a critical role in building trust around AI systems. Schellman, a leader in cybersecurity and data privacy assessments, served as the independent auditor for UiPath’s AIUC-1 certification.

Schellman was a natural partner for the effort. Following the firm's mission to evolve services based on the real world risks clients are facing, Schellman was already the first ANAB-accredited certification body for ISO 42001, and later became the first authorized assessor for AIUC-1.

Because AIUC-1 aligns with the governance principles of ISO 42001 while also testing how AI agents actually behave in operational scenarios, the two frameworks complement each other well. Together, they help organizations address both governance structure and technical performance.

UiPath selected Schellman as its assessment partner not only because of their long-standing relationship and deep understanding of UiPath’s technical environment across multiple certifications, but also for their extensive expertise across AI, IT, and cybersecurity. That breadth of knowledge brought critical rigor to the AIUC-1 evaluation and helped ensure the standard is applied in a way that is meaningful for enterprise deployments. 

Testing Real-World AI Risk Scenarios

One of the most valuable aspects of the AIUC-1 assessment for UiPath was the opportunity to evaluate their AI guardrails against a wide range of threat vectors.

By simulating thousands of potential risk scenarios, the certification process allowed UiPath to validate existing controls and identify opportunities to strengthen them. The testing helped ensure that their agents respond safely and predictably when interacting with enterprise systems, data, and users.

This type of scenario-based testing moves beyond theoretical governance policies to demonstrate how AI systems actually perform when confronted with real-world challenges.

Strengthening Enterprise Confidence in AI Agents

For UiPath, achieving AIUC-1 certification represents more than a compliance milestone. It provides customers with tangible assurance that their AI agents have been independently evaluated against meaningful operational risks.

With organizations increasingly integrating AI agents into critical business workflows, that level of transparency and validation is becoming essential.

By combining mature internal governance, international standards like ISO 42001, and agent-focused certifications such as AIUC-1, organizations can begin building the trust framework needed to support the next generation of AI-driven automation.

If you’d like to learn more about how ISO 42001 and AIUC-1 certifications complement each other or how to build a robust AI governance program, contact us today.

About Danny Manimbo

Danny Manimbo is a Principal at Schellman based in Denver, Colorado, where he leads the firm’s Artificial Intelligence (AI) and ISO services and serves as one of Schellman’s CPA principals. In this role, he oversees the strategy, delivery, and quality of Schellman’s AI, ISO, and broader attestation services. Since joining the firm in 2013, Danny has built more than 15 years of expertise in information security, data privacy, AI governance, and compliance, helping organizations navigate evolving regulatory landscapes and emerging technologies. He is also a recognized thought leader and frequent speaker at industry conferences, where he shares insights on AI governance, security best practices, and the future of compliance. Danny has achieved the following certifications relevant to the fields of accounting, auditing, and information systems security and privacy: Certified Public Accountant (CPA), Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Internal Auditor (CIA), Certificate of Cloud Security Knowledge (CCSK), and Certified Information Privacy Professional – United States (CIPP/US).