AI Agent Certification vs Insurance: What to Demand From an Agency
A certification is evidence, an insurance policy is money, and a contractual warranty is a promise you can enforce. The certificate is the weakest of the three on its own. Before you sign with an AI agency, ask which standard the agent was certified against, who ran the tests, what configuration was in scope and when the next test is due.
The procurement problem: a vendor's testing page is not attestation
Buyers are not stalling on capability. “Banks, hospitals, governments and militaries no longer decline to deploy AI because a model isn’t smart enough,” Rune Kvist, co-founder and CEO of AIUC, told TechCrunch in September 2026. “They decline because they’ve made commitments to their own customers about what a system will and won’t do, and nobody can currently guarantee that.”
His company’s release locates the failure a step earlier: most enterprises have agents that cleared pilots and then stalled at the security review. A vendor’s own testing page shows only what the vendor chose to measure. An attestation is different in kind: a standard, an outside tester, a report. AIUC-1, launched 17 July 2025, is the most organised attempt so far, funded by a Series A led by Ribbit Capital. AIUC says itself that its standard does not duplicate SOC 2, ISO 27001 or GDPR obligations. The standard matters the moment procurement teams write “AIUC-1 certified” into contracts, and not before.
What to demand from an agency before you sign
Five things, in writing, on the first call. An agency that can only produce a logo has not been vetted for security by anyone.
Vendor-question checklist (lift this block)
- Which standard was the agent certified against, and who wrote it? AIUC says AIUC-1 was shaped by more than 250 security and risk leaders at Fortune 1000 companies.
- Who ran the tests — an accredited outside auditor, or the vendor’s own team? AIUC named Schellman its first authorised auditor.
- What was in scope — which product, which configuration, and how close is it to mine?
- When was it last run, and when is it next due? Get the expiry date, not the issue date.
- Will you hand over the report — certificate, summary and technical results?
- What did the agent fail, and what was remediated before the certificate was issued?
- Who owns the re-test date in year three, and who pays for it?
- What does the certification oblige you to do if the agent fails inside my environment?
Certification, insurance and a warranty are not substitutes
Each transfers something different. A certification transfers evidence: it is issued to the vendor, and its value is that a third party tested behaviour you cannot inspect yourself.
An insurance policy transfers money. AIUC’s flagship example is ElevenLabs, which used its February 2026 certification to take out what AIUC calls first-of-its-kind insurance for AI agents. The certificate helped the vendor buy cover; it did not hand the buyer a claim.
A contractual warranty transfers a promise — the only one of the three you can enforce directly, and the only one that outlives a lapsed certificate. A certification does not transfer risk the way a policy does, because it states what was tested at a point in time rather than undertaking to pay. This is not legal or insurance advice — take the wording to counsel and to a broker.
Why recertification decides a multi-year engagement
Under AIUC-1 the certificate term is 12 months, operational controls are reviewed annually, and technical testing and retesting happen at least quarterly, while the standard is revised quarterly — on 1 January, 1 April, 1 July and 1 October. The funding release compresses that into “recertified every quarter”, which is shorthand: the annual renewal is what keeps the mark valid, and AIUC’s own terms say an unrenewed certificate is stale and must be removed.
On a three-year engagement the certificate you saw at procurement describes a configuration from a year ago, tested against a standard that has since moved. Settle three things in the statement of work: when the current certificate expires, who receives the re-test report, and who carries the cost when a revision forces retesting mid-project.
How to read the audit output — and what a test suite cannot prove
TechCrunch reports that AIUC’s testing produces a roughly 100-page report on where an agent performs safely and reliably, and where it does not. Read it as a sample rather than a proof: the scenario set covers jailbreaks, hallucinations and data leaks, and reported scopes run from 900-plus tests (KPMG’s aIQ Capture platform) to the “1,000 to 5,000” scenarios the standard’s own site describes.
Three limits. Size is not coverage: a few thousand cases is a sample drawn from an open universe of attacks, so a clean result means the sample passed. Scope is bounded by a configuration: Cursor’s certification ran against its key product surfaces on a representative enterprise configuration, not yours. And a material finding does not produce a clean mark — AIUC’s terms call for a qualified or adverse report and re-testing, so ask what was found, not only whether it passed.
The checklist above is also the cheapest screen while you are choosing between firms.
Frequently asked questions
Is AI agent certification the same as AI agent insurance?
No. A certification is evidence that an independent tester examined the agent's behaviour against a defined scenario set at a point in time. Insurance responds after a loss with money, and neither replaces a contractual warranty.
What should I ask an AI agency that claims its agent is certified?
Which standard, who ran the tests, what was in scope, when it was last run and when it is next due. Then ask for the report, not the badge.
How often does a certified agent need to be recertified?
Under AIUC-1 the certificate term is 12 months, controls are reviewed annually and technical testing happens at least quarterly. A certificate from last year describes last year's setup.
If my agency's agent is certified, am I covered?
Not covered, checked. Certification evidences tested behaviour on a defined scenario set, not a guarantee it will never fail, and not coverage of your own configuration.
Sources
- AIUC — Series A release, AIUC-1 launch post, certificate overview, framework comparison, KPMG, Cursor, Schellman, ElevenLabs.
- TechCrunch — the 15 September 2026 report (Kvist quote; the roughly 100-page figure is single-sourced to it). AI Midday for the procurement framing.
Accuracy note: AIUC-1 is the company’s own standard — endorsed by no regulator, required by no law. Test counts and the customer list are vendor claims.