AICPA's New AI Assurance (SOC 2 + AIUC-1): What It Means for CPA Firms (October 2026)
Prices and facts checked October 21, 2026. We don't accept payment for rankings.
On this page
What happened: on October 19, 2026, the AICPA and the Artificial Intelligence Underwriting Company (AIUC) announced a joint assurance offering for AI systems and agents. One CPA-led engagement produces a single report combining a SOC 2 report with an AIUC-1 certification (AICPA). It's in a pilot phase now, with a full launch expected in early 2027.
Why it matters: it's the profession's first formal answer to a question every firm and client now asks: can we trust this AI agent with our data and our work? For firms with an attest practice, it's a potential new recurring service line. For every firm, it's a new checklist item when choosing AI vendors.
What the offering is
| What it combines | A SOC 2 examination (security controls, performed by licensed CPAs under AICPA attestation standards) plus AIUC-1 certification (AI agent safety, security and reliability) |
| Output | One report from one CPA-led engagement |
| Who performs it | CPA firms. Several are already delivering it to clients; PwC says it's a founding member of the AICPA working group |
| Status | Pilot now; full launch expected early 2027 |
| How often | Annual renewal for both; AIUC-1 also requires quarterly technical retesting |
| Pricing | Not published |
Sources: AICPA; Journal of Accountancy; Accounting Today.
What AIUC-1 actually tests
AIUC-1 is a certification standard for AI agents, developed with a consortium of hundreds of enterprise security leaders and updated quarterly (AIUC-1). Its controls cover six areas:
| Domain | Examples |
|---|---|
| Data & privacy | Data leaks, personal information protection, IP |
| Security | Prompt injection, jailbreaks, unauthorized actions |
| Safety | Harmful outputs, red-teaming, human oversight |
| Reliability | Hallucinations, tool calls, agent reliability |
| Accountability | Incident response, logging, governance |
| Society | Cyber misuse, catastrophic risk |
The standard maps to MITRE ATLAS, ISO 42001, the EU AI Act and NIST's AI Risk Management Framework (AIUC-1). Its distinctive feature is live testing of agent behavior: thousands of test conversations covering hallucinations, data leakage, manipulative requests and prompt injection, not just a review of written policies (Journal of Accountancy). As AIUC's cofounder put it: "AI agents do real work, faster than anyone can check it."
Companies AIUC lists as certified include Harvey (legal AI), ElevenLabs, Cursor, UiPath and KPMG (AIUC-1).
What it means for your firm
1. If you do SOC 2 work: a possible new service line
Firms that already perform SOC 2 examinations are the natural providers. The engagement is recurring, with annual renewal plus quarterly retesting, and demand comes from two sides (Journal of Accountancy):
- AI developers that need to prove their agents behave as promised to win enterprise customers
- Companies deploying AI agents that need assurance the agents and connected systems are secure
The AICPA and AIUC are collecting pilot feedback before the full launch, so details for new providers may change. Watch the AICPA's announcements if you plan to offer it.
2. If you don't do attest work: use it when buying AI
This is the more immediate use for most small and mid-size firms. When you evaluate an AI tool that will touch client data, such as an AI bookkeeping agent, a tax research assistant or a notetaker, add these questions:
- Do you have a current SOC 2 Type II report? Ask for it.
- Are your AI agents AIUC-1 certified, or planning to be? AIUC itself suggests buyers ask vendors this (AIUC-1).
- What does the report cover: which product, which agents, and which period?
- How often is it retested? AI products change quickly. AIUC-1's quarterly retesting is a useful benchmark.
A certification doesn't replace your own duties. Tax preparers still need client consent before disclosing return information, and an FTC Safeguards Rule-compliant written security plan (our client data guide).
3. Why clients will start asking
AI is now the profession's top ethical worry. In ACCA's 2026 ethics survey of 1,178 finance professionals in 135 countries, 61% ranked AI use as the leading ethical challenge, up from 32% in 2024. Their top concerns were over-reliance, verification, confidentiality and unclear accountability (CPA Practice Advisor). Independent assurance is the profession's natural answer to those worries, and clients will increasingly expect firms to have a view on it.
How it fits with other AI guidance
- For audits of clients that use AI: see the AICPA's audit guidance in our AICPA AI audit guidance explainer.
- For firms selling or sharing data with AI companies: the confidentiality rules are strict (selling firm data and §7216).
- For choosing tools: see best AI bookkeeping software and AI tax research tools.
FAQ
What is AIUC-1?
A certification standard for AI agents covering data and privacy, security, safety, reliability, accountability and societal risk. It includes live testing of agent behavior, requires quarterly retesting, and is updated quarterly.
What is the AICPA and AIUC AI assurance offering?
A single CPA-led engagement that combines a SOC 2 report with AIUC-1 certification, announced October 19, 2026. It's in a pilot phase with a full launch expected in early 2027.
Can any CPA firm offer AIUC-1 assurance?
SOC 2 examinations are performed by licensed CPAs under AICPA attestation standards, so firms with an attest practice are the natural providers. Several firms are already piloting it, and details for new providers may change before the 2027 launch.
Should my firm require AI vendors to be AIUC-1 certified?
It's new, so few vendors have it yet. For now, ask for a current SOC 2 Type II report and whether AIUC-1 certification is planned, and treat certification as a plus, not a requirement.
Sources
Pages we used for this article, checked on or before the update date above.
- AICPA · aicpa-cima.com
- Journal of Accountancy · journalofaccountancy.com
- Accounting Today · accountingtoday.com
- AIUC-1 · aiuc-1.com
- CPA Practice Advisor · cpapracticeadvisor.com
Changelog: Oct 21, 2026: first published.