AIUC Raises $40 Million to Audit Enterprise AI Agents

AIUC has raised a $40 million Series A for its effort to audit and certify AI agents used by enterprises. Its bet is that companies need a clearer record of an agent’s failure modes before they give it meaningful work or access to data.

Ribbit Capital led the round, with First Harmonic participating. AIUC previously raised a $15 million seed round, bringing its disclosed funding to $55 million. The company was founded by Rune Kvist, an early Anthropic employee, and Rajiv Dattani, METR’s former chief operating officer and a current board member.

A safety check for buying agents

AIUC has developed AIUC-1, a safety standard and testing service for enterprise agents. The company took inspiration from SOC 2, a widely used cybersecurity compliance standard for software vendors. AIUC’s goal is an independent assessment that tells a buyer where an agent performs safely and reliably, and where concerns remain.

What AIUC says it examines

• Roughly 5,000 test scenarios involving jailbreaks, hallucinations and data leaks.
• A roughly 100-page report that identifies safer, more reliable behavior as well as concerns.
• Questions shaped by a consortium of about 250 security and risk leaders, according to AIUC.

Automation, with a human final check

AIUC uses AI agents to run its tests and analyze the results, while humans verify the final audit. The arrangement lets the company automate large test suites without presenting the final assessment as entirely machine-reviewed.

That distinction is important to the product’s pitch. A certificate is not a promise that an agent cannot fail; AIUC describes its reports as a way to show buyers where an agent can be trusted and where they should weigh remaining concerns before deciding to buy.

An early market test

AIUC names Cursor, Lovable, Harvey and ElevenLabs among its customers. The new funding gives it more capital to pursue a simple but demanding aim: make outside safety testing useful enough that enterprise buyers treat it as part of choosing an AI agent, rather than an optional extra after deployment.