What Is AIUC-1? The First Security and Reliability Standard for AI Agents

AIUC, the Artificial Intelligence Underwriting Company, launched from stealth in July 2025 with a 15 million dollar seed round led by Nat Friedman at NFDG, with participation from Emergence, Terrain, and angels including Anthropic co-founder Ben Mann and former chief information security officers at Google Cloud and MongoDB. Its three co-founders are Rune Kvist (CEO), an early product and go-to-market hire at Anthropic; Brandon Wang, a Thiel Fellow who previously built a consumer underwriting business; and Rajiv Dattani, a former McKinsey partner and former COO of METR.

The company's model is unusual: it pairs the AIUC-1 audit and certification with actual insurance for AI agents, so the cost and availability of coverage are tied directly to audit results. Safer, better-audited systems earn better insurance terms. The certification is the evidence layer; the insurance is the financial backstop for enterprises deploying agents.

The AIUC-1 standard itself was developed with input from the Cloud Security Alliance, MITRE, and the law firm Orrick, and it draws on the founding team's background in frontier AI safety and insurance underwriting. It is maintained as a living standard, with periodic refreshes that add controls for emerging risks such as agent identity and Model Context Protocol (MCP) security.

Schellman, an established security and compliance assessor, became the first accredited auditor for AIUC-1 in February 2026. AIUC runs the technical evaluation and issues the certificate; Schellman provides independent audit evidence collection, detailed reporting, and certification guidance. The assessment runs an agent through thousands of adversarial scenarios derived from real incidents, and certified agents are re-tested quarterly rather than certified once at a point in time. That continuous cadence is the feature buyers in regulated procurement care about most.

Adoption is still early. Intercom announced AIUC-1 certification for its Fin agent in December 2025, one of the first companies to hold the standard. UiPath certified in March 2026, the first enterprise automation platform to do so, after subjecting its agentic systems to more than 2,000 technical evaluations; UiPath is also a founding technical contributor to the standard.

In this directory, Intercom Fin is currently the only listed vendor to hold AIUC-1, which is why we track it as an emerging criterion alongside ISO 42001 rather than a baseline requirement. See how every vendor scores against our seven criteria in the vendor matrix, and read how the certifications feed into our bar on the vetting criteria page.