Candidate handbook
AUDAI candidate handbook
Responsible AI Auditor
Everything that applies to the AUDAI certification exam: what it covers, how the exam works, how it is scored and where to study.
Blueprint version 1, published on November 2, 2026.
What the certification attests
For auditors and compliance consultants: audit fundamentals, ISO/IEC 42001 and 27701 audits, AI system evidence, regulatory conformity and supply chain.
You are an internal auditor
Your audit plan now includes AI and personal data, and you need criteria and evidence standards for systems the usual IT audit programs do not cover.
You are an external auditor or assurance professional
You work on ISO/IEC 27701 or information security engagements and want to extend your practice to ISO/IEC 42001 and AI systems.
You do compliance consulting
You run gap assessments and readiness reviews for clients and want an auditor's discipline on evidence, sampling and reporting.
Prerequisite
You need the RAIP or DPAI credential to buy and take this certification exam.
Certification exam format
- Questions
- 50
- Duration
- 150 min
- Pass mark
- 72%
- Languages
- English, Portuguese, Spanish
The pass mark is fixed: you pass with 72% correct answers, with no curve and no comparison with other candidates.
Domains and weights
Questions are drawn for every certification exam, always in this proportion. The weights are the same the exam engine uses.
| Domain | Questions | Weight | Where to study |
|---|---|---|---|
1. Audit fundamentals for AI and data Applying audit standards to AI and data work: preserving independence, planning the engagement, deciding what counts as sufficient evidence and choosing a sampling approach you can defend. | 8 | 16% | AUDAI Syllabus, domain 1, Audit fundamentals for AI and data |
2. Auditing against ISO/IEC 42001 and 27701 Testing ISO/IEC 42001 and ISO/IEC 27701 controls, grading nonconformities as major or minor on objective evidence, and writing findings that management can act on. | 12 | 24% | AUDAI Syllabus, domain 2, Auditing against ISO/IEC 42001 and 27701 |
3. Auditing AI systems Examining model documentation, data lineage, bias and performance evidence and monitoring logs, and judging whether they show the system works as claimed or only describe intentions. | 10 | 20% | AUDAI Syllabus, domain 3, Auditing AI systems |
4. Regulatory conformity Checking EU AI Act conformity assessment evidence and running GDPR and LGPD compliance audits, separating what the law requires from what the organization chose to do. | 7 | 14% | AUDAI Syllabus, domain 4, Regulatory conformity |
5. Third-party and supply chain assurance Obtaining assurance over AI vendors, model providers and processors: which reports to rely on, what to test directly and how responsibility is split along the chain. | 5 | 10% | AUDAI Syllabus, domain 5, Third-party and supply chain assurance |
6. Audit casework Scenario questions that follow an audit from planning to report: picking the right evidence, classifying findings and deciding what to escalate. | 8 | 16% | AUDAI Syllabus, domain 6, Audit casework |
Certification exam rules
- Format
- Online certification exam, in your browser, with no scheduling and no exam centre. You can take the exam in English, Portuguese or Spanish. Questions describe work situations and ask for a decision. Every question has four options and exactly one correct answer.
- Time
- The clock runs on the server and starts when you open the certification exam. It does not pause: reloading the page, switching devices or closing the browser does not give time back. When time runs out, the exam is submitted with what you have answered.
- Navigation
- You can go back, change answers and flag questions for review. Before you finish, a screen shows what is answered, flagged and blank.
- Scoring
- Your score is compared with the pass mark, with no curve. A blank question counts as wrong, and there is no partial credit.
- Result
- Immediate, with your score for each domain. It is kept in your account and does not appear on the certificate or the public profile.
- Voucher
- Each voucher is worth one attempt and is used when the certification exam is opened. A voucher bought on the site never expires. Whoever types the code takes the exam, so treat the code like a ticket.
- New attempt
- There is no waiting period and no limit. Each attempt uses a voucher, and questions are drawn again, giving priority to ones you have not seen yet. If you do not pass, you get a 50% coupon for the same certification, valid for 90 days.
- Refund
- Within 14 days of purchase, if the voucher has not been used, through the same payment method.
- Technical problem
- Come back through the same address: the certification exam resumes with the same questions and the answers already saved. If a platform failure compromises your exam, a new attempt is released at no cost.
- Credential
- Issued when you pass, with a public verification code. It never expires: it is valid until revoked. There is no renewal, no continuing education (CPD) requirement and no annual fee.
- Revocation
- A credential can be revoked for fraud, disclosure of questions, false identity, misleading use or administrative error. The code remains searchable and shows the revocation.
- Integrity
- The certification exam is individual and closed book, including artificial intelligence assistants. There is no camera, microphone or screen recording. During the exam, copying, cutting and selecting the text of the questions are disabled, and leaving the exam window is not allowed. Each exit is recorded and flagged on screen; exits shorter than 3 seconds do not count. From the 9th exit, the credential, if you pass, may be reviewed and is issued within 3 business days, not immediately. On the 10th, the exam is ended and scored with the answers given so far. None of this appears on the certificate.
- Accessibility
- The certification exam screen works with keyboard and screen reader. Anyone with a disability or health condition that affects their reading or response time requests 25% extended time in the account, in Certification exams, before using the voucher, with a self-declaration. For another adjustment, write to [email protected].
Where to study
Study by domain, using the weights above and the frameworks listed on the certification page.
Short on time? Study by weight: the domains below are in the order of how much they count in the certification exam.
- Auditing against ISO/IEC 42001 and 27701 (24%)
- Auditing AI systems (20%)
- Audit fundamentals for AI and data (16%)
- Audit casework (16%)
- Regulatory conformity (14%)
- Third-party and supply chain assurance (10%)