AIUC-1 vs ISO 42001: a management system or tested safeguards

One certifies how a company governs AI across the organization. The other tests what one product’s agent does when it meets real inputs, hostile ones included. AIUC-1 can also pair with a SOC 2: on October 19, 2026 the American Institute of CPAs (AICPA) and AIUC announced one engagement that produces both.⁴ A company can hold all three, and the order depends on who is asking for which.

Side by side

The two differ at the root: one looks at the organization, the other at a product. Everything else follows from that, including who you hire, what they test and how often you are tested again.

The testing row is the one that matters most. AIUC-1 puts the agent itself in front of AIUC’s evaluations, and again at least every 3 months while the certificate is live. ISO 42001 audits the system you run around AI, not the agent’s behavior, and AIUC’s own FAQ draws the line in the same place.²

How AIUC-1 maps to other frameworks

AIUC-1 has 50 active requirements,¹⁰ and AIUC crosswalks each of them to 14 other frameworks and laws, from security catalogs to state AI acts.¹¹ Count the requirements with at least one mapping to each, and you get a rough picture of where AIUC-1 sits.

Each bar counts AIUC-1 requirements with at least one mapping to that framework. It does not measure how much of the other framework those requirements cover. A long bar is not a claim of compliance.

The security and AI risk catalogs sit at the top: the Cloud Security Alliance’s AI Controls Matrix, SOC 2, IBM’s AI Risk Atlas, and the NIST AI Risk Management Framework at 39. The EU AI Act lands in the middle at 29. The three U.S. state and city laws sit at the bottom: the Colorado AI Act at 12, California SB 53 at 8 and NYC Local Law 144 at 4.

That gives you two practical uses. If a buyer asks how your agent lines up with the NIST AI RMF or the EU AI Act, the mapped requirements are your starting index. And if you already hold one of these frameworks, the mapping shows where its evidence can be reused. It does not show where the work is done.

What the ISO 42001 crosswalk shows

AIUC publishes the ISO 42001 crosswalk on its own page.³ As with SOC 2, a mapping means related evidence, not coverage. One example shows the difference in grain.

Take A001, the requirement for an input data policy. AIUC maps it to two Annex A controls in ISO 42001: A.7.2, on the data used to develop and improve an AI system, and A.7.3, on how that data is acquired. The ISO controls ask whether your management system governs data for AI in general. The AIUC-1 requirement is tested for one agent, against the data that agent takes in. Same subject. Different grain.

The other 26 active requirements have no ISO 42001 mapping at all. For a company that already holds a 42001 certificate, those are where the AIUC-1 work starts from zero. By this count a SOC 2 holder starts with more mapped requirements, 45 of 50, and the SOC 2 comparison maps that overlap domain by domain.

Holding both

Nothing stops a company from holding both, because they certify different things. A management system governs how the organization runs AI: who owns it, how its risks are assessed, and how it improves over time.¹ AIUC-1 tests what one agent does with real inputs. Neither answers the other’s question.

The evidence runs in both directions. A 42001 risk assessment and its AI policies can feed the AIUC-1 evidence pack. AIUC-1 eval results are concrete proof of controls a management system says exist. Build each once, and label it for both.

Let the buyer’s ask set the order. An AI governance review that names ISO 42001 wants the organizational certificate. A question about what your agent will do with a customer’s data and credentials is an AIUC-1 question. AIUC also names ISO 42001 accreditation as one signal it weighs when it prioritizes auditor applications,¹² If you would rather work with one firm for both, check the list of accredited auditors first.

You already hold ISO 42001

Start from the 24 mapped requirements and reuse the risk assessment and AI policies behind them. Plan the other 26 as new work, and treat the technical evaluations as new work too: a management system audit never ran them.

A buyer asks about AI governance

Ask which they want. A certificate for how the company manages AI is ISO 42001. Proof of what one agent does under test is AIUC-1. If the request names one, the name settles it.

You hold neither

Start with the one the deal in front of you names. If the first ask is about an agent, AIUC suggests you can begin with one high-risk agent and add others later.⁵

We stopped offering ISO 42001 readiness on August 26, 2026, and cover SOC 2 and ISO 27001. If a buyer asks for 42001, hire for it separately. For the rest of the picture, SOC 2 for AI companies covers what a model provider changes in a SOC 2, and SOC 2 vs ISO 27001 compares the two security frameworks.