I’m excited to share that Sierra is now AIUC-1 certified, following an independent audit by Schellman and extensive testing by the Artificial Intelligence Underwriting Company (AIUC).
AIUC-1 is a new standard designed specifically for AI agents, that tests how agents actually behave — including what happens when someone tries to manipulate them, access protected information, or push beyond what they’re authorized to do.
This matters because agents built on Sierra do more than answer questions: they coordinate patient care, troubleshoot technical issues, resolve insurance claims, and even refinance mortgages.
Some of the most highly regulated companies — over 40% of the Fortune 50, one in three of the leading banks, and five out of 10 of the largest healthcare companies in the world — work with Sierra because we deliver measurable results. And they can trust our platform to act safely and reliably under pressure.
Putting Sierra’s safeguards to the test #
As part of the certification, AIUC tested Sierra chat and voice agents across everyday interactions and adversarial scenarios. The testing included attempts to manipulate agents or expose protected information, plus a range of real-world voice conditions.
Separately, Schellman reviewed Sierra’s technical, legal, operational, and governance controls and found that Sierra met all applicable AIUC-1 requirements.
These technical evaluations recur at least quarterly, with a full audit every year so the certification continues to reflect changes in both Sierra’s platform and the broader AI risk landscape.
Trust throughout the agent lifecycle #
At Sierra, security, safety and reliability is built into how agents are created, tested, released, and improved. Trust extends across the full agent lifecycle.
Sierra applies a defense-in-depth approach, combining multiple safeguards rather than relying on any one control. Grounded content and customer-defined policies guide the agent’s behavior. Once the agent is live, Supervisors evaluate conversations in real time and can correct, block, or escalate responses. Deterministic guards enforce the absolutes that cannot be left to model judgment, such as authentication and access requirements. Together, these layers help enterprises build and deploy agents they can trust.
Building for what’s next #
Businesses still decide how their agents behave: what they know, which systems they can access, what actions they can take, and how they represent their brand.
AIUC-1 provides independent validation of the platform underneath those agents. For security, risk, compliance, and AI governance teams, it means Sierra’s controls have been tested against situations AI agents encounter in the real world.
This certification complements Sierra’s existing SOC 2 Type II attestation, and ISO 27001 and ISO 42001 certifications. Those standards validate our security and AI management systems, while AIUC-1 adds recurring technical testing designed specifically for AI agents.
As agents move from answering questions to taking meaningful actions on behalf of customers, this kind of independent testing is becoming more important. We’ll continue investing in independent evaluation, alongside our own testing, monitoring, and product development.
Learn more about AIUC-1 certification and visit the Sierra Trust Center.