Establish a quality management system for high-risk AI systems proportionate to the size of the organization
Documenting strategy for compliance with conformity assessment procedures.
Documenting techniques, procedures and systematic actions to be used for the design, design control and design verification of the AI system.
Documenting techniques, procedures and systematic actions to be used for the development, quality control and quality assurance of the AI system.
Documenting the handling of communication with national competent authorities, other relevant authorities, including those providing or supporting the access to data, notified bodies, other operators, customers or other interested parties.
Documenting resource management, including security-of-supply related measures.
Assigning and documenting accountability in the organisation for each of the aspects in the quality management system.
Collecting comprehensive documentation for EU AI Act Article 17 requirements for quality management systems. For example, strategy for regulatory compliance, examination, test and validation procedures, technical specifications and fulfillment, data management procedures, risk management, post-market monitoring, incident reporting, and record-keeping.
Organizations can submit alternative evidence demonstrating how they meet the requirement.
"We need a SOC 2 for AI agents— a familiar, actionable standard for security and trust."
"Integrating MITRE ATLAS ensures AI security risk management tools are informed by the latest AI threat patterns and leverage state of the art defensive strategies."
"Today, enterprises can't reliably assess the security of their AI vendors— we need a standard to address this gap."
"Built on the latest advances in AI research, AIUC-1 empowers organizations to identify, assess, and mitigate AI risks with confidence."
"AIUC-1 standardizes how AI is adopted. That's powerful."
"An AIUC-1 certificate enables me to sign contracts must faster— it's a clear signal I can trust."