A compliance automation platform allegedly fabricated SOC 2, ISO 27001, and HIPAA reports for hundreds of clients. The scandal reveals a structural flaw: the industry treats compliance as a document to produce, not a state to maintain.
UiPath just became the first platform to achieve AIUC-1 certification — the first security, safety, and reliability standard built specifically for AI agents. Here's what it tests, what it doesn't cover, and why it's about to become table stakes.
SOC 2 hasn't changed, but how auditors apply the Trust Services Criteria to AI features has. Here's what to expect and how to prepare your evidence for AI-specific controls across security, processing integrity, confidentiality, and privacy.
