Making sense of AI Agent certifications and compliance

The certifications at a glance

These are the certifications that come up most often when you're buying an AI Agent. What each one actually covers ranges from the vendor’s whole organization down to a specific system, service, or even a single AI product. It’s worth checking that a certification covers the AI, not just the vendor’s wider operation.

The 90% – what you already know

Most of this list covers the controls you would apply to any software vendor.

A baseline security credential, SOC 2 or ISO 27001, is the minimum every serious vendor should hold. Without one, a vendor can't show a real security program exists.

Data handling is the next non-negotiable, and it's not a new discipline for AI. You'd put any software vendor that touches your data through the same review. Is it kept separate from other customers' data, deleted on request, and processed in a region that meets your requirements, with access limited to the people who need it? The more PII the Agent handles, the more weight those questions carry.

For an AI Agent, add one more question: is your data used to train or fine-tune a model? That one holds no matter what you're using the Agent for.

Credentials are how a vendor backs those answers up.

• SOC 2 covers the security controls.
• Privacy certifications like ISO 27701 or 27018 matter when employee or customer data is involved.

Not every vendor holds these, so weigh them against how sensitive your use case is.

Auditability is another control you'd expect from any vendor. Can they log and trace what the Agent did after the fact? Their ISO certification often covers it.

The 10% – what's actually new

The new part is smaller in scope, but it’s what regulators and CISOs are watching closely. It comes in two forms. One is the Agent’s own behavior, where risks like hallucination and prompt injection come from. The other is what the Agent can reach once it starts taking action.

Assessing the Agent’s safety

Two certifications have emerged to help you evaluate a vendor.

• ISO 42001 certifies AI governance inside the vendor's own organization: who owns what, and how its models are built and maintained. It assesses the company, not the Agent – the audit never tests the product itself. A vendor can hold ISO 42001 and still ship an Agent that's barely been tested.
• AIUC-1 works at the product level. It tests the Agent itself, and the AI safety controls that guard against prompt injection and jailbreaking. A pen test on a regular, mandatory cadence is built into the certification.

ISO 42001 covers the entity. AIUC-1 covers the thing you're actually buying.

Both are worth looking for, but the strongest evidence here is testing cadence. A vendor running frequent adversarial testing, with a red team of outside specialists attacking the Agent several times a year, tells you more than a one-off audit ever could.

Controlling what the Agent can reach

Once the Agent can update a record or reach into a CRM, two questions matter:

• How it proves its identity to those systems
• Who's responsible for what it pulls back

The first is familiar – the Agent connects with credentials you set up, like any integration.

Security teams address the second with an approach called the “shared responsibility model.” It splits the work in two. The vendor secures its own system and the Agent. Your half is configuring what each action can reach, so the Agent pulls only the data a task needs. If it looks up a customer's order, it shouldn't be able to see their whole account.

If you’re using Fin, that configuration lives in Data Connectors and Procedures. Connectors define which systems your Agent can reach and what data each one exposes. Procedures set the rules, in plain language plus deterministic logic, for when Fin uses them and what it's allowed to do at each step.

Know which laws apply to you

GDPR, the EU's data privacy law, is a legal framework a vendor complies with, or doesn't. There’s no audit to pass and no certificate to collect. The EU AI Act is moving the same way – it's new legislation for AI systems. It’s still phasing in, and set to become another compliance obligation rather than a certification.

HIPAA works the same way in US healthcare. Compliance runs through a signed Business Associate Agreement (BAA), the contract that sets out how a vendor handles protected health data. Without one, you can’t legally route real health data through the system, even in a trial. Not every vendor will sign a BAA, since it commits them to HIPAA’s obligations. If you're in healthcare, start on the BAA early, because it has its own sign-off cycle that can add weeks to your timeline.

Which of these you need depends on your data and your industry. GDPR if you handle EU personal data, HIPAA if you handle US health data. For the ones that apply to you, the proof is what a vendor will put in writing – a GDPR-compliant data agreement, or a BAA they’ll sign.

When you're in a regulated field

If you're in a heavily regulated field like finance, insurance, healthcare, or gambling, you’ll lean on formal certification. These fields are compliance-first, and rely on recognized standards. An ISO certification meets that expectation, because an independent body has audited the vendor against an established standard.

But how far regulation has caught up with AI varies by field. Some regulators have issued AI-specific guidance; others, like the UK's Financial Conduct Authority (FCA), have deliberately chosen not to write new AI rules, applying their existing frameworks instead. Check what your regulator has published before deciding what "secure" means for you.

Where to focus

The skill here is telling the 90% from the 10%.

Insist on the baseline. A vendor that can't show SOC 2 or ISO 27001 and sound data handling hasn't cleared the fundamentals, whatever its AI looks like. For the AI-specific standards, the strongest evidence is often how regularly the vendor tests the Agent for weaknesses.

Do that, and the wall of acronyms becomes a manageable list – the ones you insist on, and the ones you weigh.