AIUC-1 Standard

→

A. Data & Privacy

→

A007. Prevent IP violations

A007

Prevent IP violations

Implement safeguards and technical controls to prevent AI outputs from violating copyrights, trademarks, or other third-party intellectual property rights

Keywords

Intellectual Property

Copyright Protection

Application

Mandatory

Frequency

Every 12 months

Type

Preventative

Crosswalks

AML-M0020: Generative AI Guardrails

GOVERN 6.1: Third-party risk policies

MAP 4.1: Legal risk mapping

LLM03:25 - Supply Chain

LLM05:25 - Improper Output Handling

A.7.5: Data provenance

AIS-09: Output Validation

Control activities

Typical evidence

Documenting foundation model provider IP protections which may serve as primary infringement safeguards. For example, indemnification clauses or copyright/trademark guardrails.

A007.1 Documentation: Model provider IP infringement protections

Foundation model provider contract, terms of service, or data processing agreement showing IP protection commitments including copyright/trademark handling policies, indemnification clauses, liability coverage, and any documented limitations or exclusions. May include vendor questionnaire responses or certification documents addressing IP protections.

Category

Vendor Contracts

Text-generationVoice-generationImage-generation

Establishing supplementary content filtering mechanisms where provider protections have gaps or limitations. For example, detecting copyrighted material in outputs, implementing trademark screening.

A007.2 Config: IP infringement filtering

Screenshot of code, API configuration, or filtering system showing detection of copyrighted material, trademark screening, or content validation checks applied to AI outputs - this could be pattern matching logic, third-party API integration (e.g. copyright detection services), or custom filtering rules.

Category

Technical Implementation

Engineering CodeEng: LLM output filtering logic

Text-generationVoice-generationImage-generation

Implementing user guidance and guardrails to reduce IP risk. For example, usage policies that explain prohibited content types, user warnings in product, restricting output generation in known infringement domains.

Implementing restrictions in AI acceptable use policy.

A007.3 Logs: User-facing notices

Screenshot of user-facing IP risk guidance - may include warning messages when attempting high-risk operations, help center articles about IP infringement guidance, or UI elements explaining prohibited use cases.

Category

Technical Implementation

ProductAcceptable Use Policy

Text-generationVoice-generationImage-generation

Organizations can submit alternative evidence demonstrating how they meet the requirement.

AIUC-1 is built with industry leaders

Phil Venables

"We need a SOC 2 for AI agents— a familiar, actionable standard for security and trust."

Phil Venables

Former CISO of Google Cloud

Dr. Christina Liaghati

"Integrating MITRE ATLAS ensures AI security risk management tools are informed by the latest AI threat patterns and leverage state of the art defensive strategies."

Dr. Christina Liaghati

MITRE ATLAS lead

Hyrum Anderson

"Today, enterprises can't reliably assess the security of their AI vendors— we need a standard to address this gap."

Hyrum Anderson

Senior Director, Security & AI

Prof. Sanmi Koyejo

"Built on the latest advances in AI research, AIUC-1 empowers organizations to identify, assess, and mitigate AI risks with confidence."

Prof. Sanmi Koyejo

Lead for Stanford Trustworthy AI Research

John Bautista

"AIUC-1 standardizes how AI is adopted. That's powerful."

John Bautista

Partner at Orrick

Lena Smart

"An AIUC-1 certificate enables me to sign contracts much faster— it's a clear signal I can trust."

Lena Smart

Head of Trust for SecurityPal and former CISO of MongoDB