Requirements & evidence
AIUC-1
A quarterly updated standard and certification program for AI agents covering data and privacy, security, safety, reliability, accountability, and societal risk. Only AIUC can issue its certificate; registry inclusion makes no certification claim.
- Edition on record
- Q3 2026 (2026-07-15 release)
- Issuing authority
- AIUC-1 (opens in a new tab)
- Edition published
- Source last checked
Understand the scope
What the framework covers.
The library records this framework for AI, technology, SaaS, across global. The issuing authority determines applicability; your assessment scope should identify the organization, systems, services, and edition being assessed.
Areas of requirement
- Data and privacy
- Security
- Safety
- Reliability
- Accountability
- Society
50 source entries on record
Requirements described by AIUC's Q3 2026 audit-scoping guidance. Each requirement has separate core and supplemental controls; 50 is not a count of those underlying controls.
Source access and licensing
The current standard is publicly viewable. Confirm AIUC's software-integration and redistribution terms before ingesting requirement or control text; official certification requires AIUC's scoped audit process.
Prepare with context
The evidence behind
the requirements.
Evidence needs to demonstrate how a requirement is met within the assessment scope. Keep the source requirement, collection context, responsible owner, review decision, and period of applicability together.
A framework-specific collection workflow has not been activated. The reference material on this page can inform scoping and preparation; it does not establish evidence collection or assessment readiness.
ControlFrame availability
Framework reference available
Authority and version facts, with a parsed public catalog when available; no tenant blueprint or executable evidence method is activated.
How availability is determined
AIUC-1 is tracked in the registry — authority, version ledger, verification — and nothing else is modelled for it yet. Import its catalog to begin.
Catalog status: Planned. Tracked metadata: we record the regime and its issuing authority for review. Registry presence does not mean automated monitoring is active. No control or requirement model is implemented.
Metadata only; requirements, technical tests, evidence rules, and certification workflows are not ingested or implemented.
Follow the source
Editions and transitions.
These are the editions recorded in the library, checked August 30, 2026. Confirm the applicable edition with the authority before beginning an assessment.
Announced transition
AIUC states that it updates the standard quarterly; the next scheduled release is 2026-10-15.
Authority’s stated timing: 2026-10-15
Read the authority’s announcement (opens in a new tab)- Q3 2026 (2026-07-15 release)Current edition on record · Replaces Q2 2026 (2026-04-15 release)
- Q2 2026 (2026-04-15 release)Superseded edition
Recorded change history
· AIUC-1: AIUC states that it updates the standard quarterly; the next scheduled release is 2026-10-15.
· AIUC-1 Q3 2026 (2026-07-15 release) supersedes Q2 2026 (2026-04-15 release) and is the current edition.
Check the basis
Sources you can follow.
Verified against the issuing authority’s own publication. Source verification was recorded on August 30, 2026.
- AIUC-1 (opens in a new tab)
Issuing authority and framework publication.
Catalog provenance and record details
Framework record: aiuc-1.
Source artifact: acquisition required.
Parsed catalog: Not ingested.
Control families as published: Data and privacy · Security · Safety · Reliability · Accountability · Society.
Record last updated: August 30, 2026.
Common questions
A closer look.
What is AIUC-1?
A quarterly updated standard and certification program for AI agents covering data and privacy, security, safety, reliability, accountability, and societal risk. Only AIUC can issue its certificate; registry inclusion makes no certification claim.
Who does AIUC-1 apply to?
AIUC-1 applies to AI, technology, SaaS, global, per AIUC-1.
What is the current version of AIUC-1?
The current edition is Q3 2026 (2026-07-15 release), issued by AIUC-1 and published 2026-07-15. Source: https://www.aiuc-1.com/changelog.
What does an assessment under AIUC-1 require?
50 control units are on record (Requirements described by AIUC's Q3 2026 audit-scoping guidance. Each requirement has separate core and supplemental controls; 50 is not a count of those underlying controls.), organized into 6 control families: Data and privacy, Security, Safety, Reliability, Accountability, Society.
At a glance
AIUC-1
Q3 2026 (2026-07-15 release)
- Framework reference
- Authority and edition tracked
- Evidence preparation
- Framework reference available
- Source confidence
- Primary authority
A framework reference describes requirements. Evidence decisions belong to a scoped assessment and a named reviewer.
Make the requirements
part of the work.
Explore how ControlFrame can organize AIUC-1 requirements, evidence preparation, and review for your assessment scope.