Copyright © 2026 Authors retain the copyright of this article. This article is an open access article distributed under the Creative Commons Attribution License which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.

@article{182565,
        author = {Prashant Magerde},
        title = {Auditing AI – Extending SOC 2 Trust Criteria to Cover AI-Specific Risks},
        journal = {International Journal of Innovative Research in Technology},
        year = {2025},
        volume = {12},
        number = {2},
        pages = {2817-2822},
        issn = {2349-6002},
        url = {https://ijirt.org/article?manuscript=182565},
        abstract = {Artificial Intelligence (AI) is transforming the way businesses operate, enabling automation, predictive analytics, personalization, and decision-making at scale. However, the integration of AI into core business services introduces unique risks that are not fully addressed by traditional assurance frameworks such as SOC 2. This white paper explores how the existing SOC 2 Trust Services Criteria (TSC) can be extended to assess and mitigate AI-specific risks. It provides a structured methodology for embedding AI governance into the SOC 2 audit lifecycle and presents practical guidance for auditors, compliance professionals, and organizations adopting AI technologies.},
        keywords = {},
        month = {July},
        }