UiPath secures landmark AIUC-1 certification for AI agents

UiPath has become the first enterprise automation platform to receive AIUC-1 certification, a security and reliability standard for AI agents used in production business environments.

AIUC-1 is run by the Artificial Intelligence Underwriting Company, which positions it as an independent benchmark for how AI agents perform under real operational pressure. The certification was audited by Schellman.

AIUC-1 evaluates AI agents against more than 2,000 enterprise risk scenarios, including data protection requirements, operational boundary controls, resistance to adversarial attacks, and error prevention. The assessments focus on systems running sensitive workflows, rather than broad statements of governance intent.

How it was tested

UiPath's suite of AI products underwent third-party evaluation under the AIUC-1 process. The scope included Intelligent Extraction Processing, Agents, and Autopilot.

The certification also requires quarterly evaluations, designed to track safeguards over time as AI systems evolve and threat patterns shift. This continuous review reflects the operational reality of AI agent deployments, where controls can degrade as models and integrations change.

Rajiv Dattani, Co-founder of the Artificial Intelligence Underwriting Company, said the review covered both technology and governance measures.

"UiPath is the first enterprise automation company to achieve AIUC-1 certification," Dattani said. "To achieve this, they subjected their suite of agentic AI systems to 2000+ technical evaluations, and a comprehensive audit of their AI policies and technical guardrails. This demonstrates UiPath's commitment to responsible AI agent deployment in enterprise environments."

Audit and assurance

Schellman served as the auditor for AIUC-1. The firm has also audited UiPath's ISO 42001 certification, which covers AI management systems.

"UiPath's achievement of AIUC-1 certification reflects a real commitment to the governance, transparency, and security standards that enterprise AI now requires," said Avani Desai, CEO of Schellman. "As the independent auditor for both their ISO 42001 and AIUC-1 certifications, we can attest that this validation was earned through rigorous evaluation. This is where the market is heading. Responsible AI is no longer optional. Organisations that invest in strong governance now will be the ones that lead in the years ahead, and UiPath is setting a meaningful benchmark for the industry."

For buyers of automation and AI products, independent certification has become a common procurement requirement as organisations expand AI in operational workflows. Many enterprises ask vendors to demonstrate controls over how AI systems access data, trigger actions, and handle exceptions, as well as evidence that systems stay within defined operating limits when faced with unexpected prompts or adversarial inputs.

What it means for customers

UiPath framed the certification as a way for customers to validate the security posture of AI agents used in business processes, noting that agent deployments raise trust questions when software can act across multiple systems and touch sensitive records.

"As businesses deploy AI agents throughout the enterprise, trust is fundamental, especially when used for sensitive workflows," said Scott Roberts, Chief Information Security Officer at UiPath. "AIUC-1 certification provides our customers with independent validation that our AI agents are built to protect their data, stay within approved boundaries, and resist sophisticated attacks. This commitment to security and reliability standards gives our customers the confidence and peace of mind they need to adopt agentic automation across their business for real, demonstrable impact."

AI agents are software systems designed to take actions based on goals, context, and access to tools. In corporate environments, they can connect to business applications, document repositories, and workflow systems. That access increases the potential impact of errors, misuse, or compromised credentials, prompting tighter controls around data handling, permissioning, and auditability.

UiPath is also a Founding Technical Contributor to AIUC-1, indicating it helped shape the certification requirements alongside the auditors and the body that maintains the standard.

The AIUC-1 milestone builds on UiPath's ISO/IEC 42001:2023 certification, which the company positions alongside AIUC-1 as a broader assurance package for organisations considering agentic AI in everyday workflows.

AIUC describes its work as "confidence infrastructure" for AI adoption, linking certification and auditing with insurance products for AI agents. AIUC-1 was developed with security, risk, and legal experts, drawing on input from organisations including academic and industry bodies.

Schellman provides attestation and compliance services across a range of established frameworks, including assessments tied to security and governance standards used in regulated sectors and large enterprise procurement programmes.