Have one agent assessed.
An assessment reads one named AI agent against the seven dimensions and ends in a tier and a report that insurers, boards and buyers can read. This page says who should ask, what to gather, and what happens between the first message and the report.
Who should request
The standard is written for European enterprises and scale ups running one or more autonomous AI agents in production, or moving one from pilot to production within the next twelve months.
- Enterprises with an agent acting inside a regulated workflow.
- Scale ups whose counterparties have started asking for AI assurance evidence.
- Operators preparing for the EU AI Act high risk obligations, which apply to Annex III systems from 2 December 2027.
- Vendors whose customers ask for an AI readiness artefact.
- Insurers looking for a consistent reading of the agents in their book.
What to prepare
None of this is needed to send the request. All of it is needed before the evidence file opens, and gathering it early shortens the cycle.
- A short description of the agent: its owners, its tools and where it is deployed.
- The current governance or AI risk policy, if one exists.
- An architecture diagram showing the agent inside the wider system.
- Any incident, drill and red team history.
- The autonomy policy, even in draft: what the agent may do without a person confirming.
- Contact details for the accountable senior owner.
Four steps, four to six weeks.
- 01Intake and scopeOne named agent, its version, its task and the people accountable for it. We reply within five working days with a scoping note and an evidence file template.
- 02Evidence across the sevenDocuments and interviews over two to three weeks. Gaps are named once, with time to fill them.
- 03Scoring and tierEach dimension is scored against the published rubric. You see the draft and can correct matters of fact before it is final.
- 04The report and the sealFindings, the tier, an underwriting summary, and a seal drawn from the agent's own shape. Published only if you choose.
If a board or insurer deadline is driving the request, write at least eight weeks before it.
Before you write, or while you wait.
The rubric is public, so an operator can see the questions before the assessor asks them.
- The methodologySeven dimensions, the evidence each asks for, the rubric and the tiers.
- A worked exampleOne constructed deployment scored line by line, and why 58 stops at Certified.
- The assessment process, step by stepWhat happens between intake and the issued report, in sequence.
- Preparing for an assessmentThe documentation to assemble first, the common gaps and how to close them.