Skip to main content
Framework library
Framework module · aiuc-1

AIUC-1

A quarterly updated standard and certification program for AI agents covering data and privacy, security, safety, reliability, accountability, and societal risk. Only AIUC can issue its certificate; registry inclusion makes no certification claim.

Q3 2026 (2026-07-15 release) · AIUC-1 · published 2026-07-15

Standing today
Directory entry

00Answer

from the registry record
What is AIUC-1?
A quarterly updated standard and certification program for AI agents covering data and privacy, security, safety, reliability, accountability, and societal risk. Only AIUC can issue its certificate; registry inclusion makes no certification claim.
Who does AIUC-1 apply to?
AIUC-1 applies to AI, technology, SaaS, global, per AIUC-1.
What is the current version of AIUC-1?
The current edition is Q3 2026 (2026-07-15 release), issued by AIUC-1 and published 2026-07-15. Source: https://www.aiuc-1.com/changelog.
What does an assessment under AIUC-1 require?
50 control units are on record (Requirements described by AIUC's Q3 2026 audit-scoping guidance. Each requirement has separate core and supplemental controls; 50 is not a count of those underlying controls.), organized into 6 control families: Data and privacy, Security, Safety, Reliability, Accountability, Society.

01Standing

Directory entry

Authority and version facts, with a parsed public catalog when available; no tenant blueprint or executable evidence method is activated.

AIUC-1 is tracked in the registry — authority, version ledger, verification — and nothing else is modelled for it yet. Import its catalog to begin.

The current standard is publicly viewable. Confirm AIUC's software-integration and redistribution terms before ingesting requirement or control text; official certification requires AIUC's scoped audit process.

02Registry record

checked 2026-08-30
Registry status
Planned · namedTracked metadata: we name the regime and monitor its issuing authority. No control or requirement model is implemented.
Control units
50Requirements described by AIUC's Q3 2026 audit-scoping guidance. Each requirement has separate core and supplemental controls; 50 is not a count of those underlying controls.
Control families
Data and privacy · Security · Safety · Reliability · Accountability · Society
Applies to
AI · technology · SaaS · global
Verification
Primary — the issuing body's own page was read and states this version. checked 2026-08-30
Pending change
AIUC states that it updates the standard quarterly; the next scheduled release is 2026-10-15.Expected: 2026-10-15

03Version ledger

2 editions
Q2 2026 (2026-04-15 release)Superseded2026-04-15
Q3 2026 (2026-07-15 release)Current edition · supersedes Q2 2026 (2026-04-15 release)2026-07-15

05Change history

06Related frameworks

scored from registry facts
  1. Also applies to AI · The Cloud Security Alliance's vendor-neutral control framework for cloud-based AI systems, with implementation and auditing guidance plus the companion AI-CAIQ. It is a control catalog, not by itself a certification or STAR for AI designation.

  2. Also applies to AI · OWASP's peer-reviewed risk framework for autonomous and agentic AI applications, including systems that plan, use tools, hold memory, or coordinate multi-step workflows. It is guidance, not a certification.

  3. Also applies to AI · OWASP's current community-driven guide to the most critical security risks for applications powered by large language models. It is security guidance, not a compliance certification or organizational assurance report.

  4. CSA STARSTAR Level 1 and Level 2

    Also applies to SaaS · The Cloud Security Alliance's cloud-assurance program and public registry. Level 1 is a CCM/CAIQ self-assessment; Level 2 is a third-party certification or attestation path. Tracking STAR does not place ControlFrame or any customer on the registry.

AIUC-1 | ControlFrame