SOC 2

SOC 2 is a compliance framework developed by the American Institute of CPAs that evaluates how service organizations manage customer data and system operations across five trust service criteria: security, availability, processing integrity, confidentiality, and privacy. Organizations pursuing SOC 2 certification must undergo rigorous audits and receive either a Type I report (point-in-time assessment) or Type II report (assessment over a minimum six-month period) demonstrating their controls are effective. For AI governance specifically, SOC 2 compliance helps enterprises verify that their AI vendors and cloud service providers maintain adequate safeguards for data used in model training, inference, and storage, which is essential for managing risk in regulated industries and protecting sensitive information throughout the AI lifecycle.

1 item

Corporate PolicyGlobal2026-09-15

AIUC-1 Sets First SOC 2-Style Certification Standard for Enterprise AI Agents

Startup Artificial Intelligence Underwriting Company (AIUC) has launched a third-party audit and certification standard called AIUC-1 for enterprise AI agents. The standard, modeled on SOC 2, runs agents through roughly 5,000 tests covering jailbreaks, hallucinations, and data leaks. AIUC raised $40 million in a Series A to scale the service, founded by an early Anthropic employee and the former COO of METR.

AIUC AI agent certification third-party audit SOC 2 Anthropic METR vendor due diligence agentic AI