Reference implementation Data compiled from public sources as of 2026-10-26. Not an assessment, certification or recommendation. Confirm current status with the vendor and the issuing body.
AgentDossier · AI Agent Registry Find agents you can actually trust - public or inside your enterprise.
Healthcare & Life Sciences Top 100 / #1ARD = Agentic Resource Discovery · A2A = Agent2Agent · MCP = Model Context Protocol
Enterprise agentic automation · commercial · UiPath Platform; cloud/on-prem

UiPath Agentic Automation

Large enterprise automation vendor adding agentic orchestration and governed automation. Publisher: UiPath. Also ranked in Finance & Banking (#2), Insurance (#2), Regulatory, Risk & Compliance (#4).

Vendor page ↗+ CompareExport JSON
Trust profileas of 2026-10-26
Publisherconfirmed · Vendor-domain page, marketplace listing or metadata at publisher domain — product page served from the vendor's own domainconfirmed
Complianceno evidence about this agent · 14 vendor-level records (inherited)T5
SecurityNo CVE linked to this agent in the CVE registry — none linked in the products checked, not a findingnone
ProtocolsModel Context Protocol (MCP) probed, not foundAgent2Agent (A2A) probed, not foundAgentic Resource Discovery (ARD) probed, not found0 / 3
TracesNone found — nobody has published what this agent does under attacknone
Issues found0 regulator actions · 0 incidents · 0 withdrawn certificates · CVEs: see Securitylinks only

Evidence available — not a safety certification. Suitability depends on your task, deployment and permissions. Rows marked vendor-level describe UiPath, not this agent specifically.

Traces — under attack, in defence, in incidents

none public · what a trace is

No public trace found. Nobody has published what UiPath Agentic Automation does when its inputs carry instructions it should not follow, when a tool asks for credentials, or when a task invites a destructive command. Defenders can't learn from what they can't see: run it in a sandbox before the pilot and keep the transcript, or ask the vendor to publish one.

● third-party or vendor report · ◎ this registry's own probe transcript · ⚠ data left the environment. A trace describes one version on one date; it is evidence of behaviour, never a certification. Rows marked unreviewed have not yet been checked against their source by the maintainer.

CVEs — on the official record

none linked · the registry

No CVE in the registry names this agent or its listed product. That reads "none linked in the products checked", never as a finding: a product that is not on the registry's list, or a record that names it differently, is not seen. The vendor's own advisories remain the source of truth.

Compliance evidence

Jurisdiction: US + UK + EU · 14 frameworks shown

About the vendor — inherited, not agent-specific

14 records matched at organisation level
✔
CSA STAR · AIUC-1
T1 Registry-matched · vendor-level
found in CSA STAR Registry on 2026-10-26
Scope: entity · CSA STAR Registry · 2026-10-26
re-check 2026-11-02
✔
FedRAMP · FedRAMP Moderate
T1 Registry-matched · vendor-level
FedRAMP Authorized
Scope: entity · covers this resource: inherited · FedRAMP Marketplace · 2026-10-26
re-check 2026-11-02
○
Cyber Essentials · Cyber Essentials
T4 Vendor-claimed · vendor-level
Vendor-claimed
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
○
Cyber Essentials · Cyber Essentials Plus
T4 Vendor-claimed · vendor-level
Vendor-claimed
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
○
EU AI Act · Art. 50 statement
T4 Vendor-claimed · vendor-level
Art. 50 statement
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
○
FedRAMP
T4 Vendor-claimed · vendor-level
Vendor-claimed
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
○
HIPAA
T4 Vendor-claimed · vendor-level
BAA available
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
○
HITRUST
T4 Vendor-claimed · vendor-level
Vendor-claimed
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
○
IRAP
T4 Vendor-claimed · vendor-level
Vendor-claimed
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
○
ISO 27001 · ISO 27001
T4 Vendor-claimed · vendor-level
Vendor-claimed
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
○
ISO 42001 · ISO 42001
T4 Vendor-claimed · vendor-level
Vendor-claimed
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
○
NIST AI RMF · NIST AI RMF aligned
T4 Vendor-claimed · vendor-level
Aligned with NIST AI RMF / NIST CSF 2.0
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
○
SOC 2 · SOC 2 Type I
T4 Vendor-claimed · vendor-level
Vendor-claimed
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
○
SOC 2 · SOC 2 Type II
T4 Vendor-claimed · vendor-level
Vendor-claimed
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02

A vendor-level registry entry proves the organisation was assessed; whether this agent is inside that scope is a question for the vendor. These rows do not count toward the agent's evidence tier.

✔ found · ○ claimed · – not found · ⚠ expired, stale or revoked. Every row links to its source.Dispute or correct this dossier

GDPR, assembled from checks

GDPR● 0 found in registries or documents○ 0 vendor-claimed⚠ 0 issues linkedas of 2026-10-26
– Not foundNo Article 42 GDPR seal. "GDPR certified" is never shown without one.
☐ You checkYour lawful basis, DPIA, and whether this agent is inside the certificate scope.

News and chatter

last 90 days · linked with confidence ≥ 0.85

Nothing linked from Hacker News, GDELT, GitHub releases or the vendor's feed in the last 90 days.

Headline, link and a summary attributed to the outlet. News never changes trust or domain scores.

Healthcare & Life Sciences score

81
regulated profile · sar-score-2.0 · #1 of 100 in the curated list
Adoption / usage28 / 30
Trust & security19 / 25
Project / product health20 / 20
Ecosystem / interoperability15 / 15
Domain expertise / fit100 / 100
Governance / compliance evidence22 / 100
Docs / transparency10 / 10

Raw component / maximum, then weighted by the regulated profile (adoption 15, trust 25, project 10, ecosystem 10, domain 20, governance 15, docs 5). Trust and governance are computed from the evidence on this page (vendor-level rows at half credit); the other components come from the curated workbook, whose order is the rank. Unknown components count as 0 and are never imputed.

Before you deploy

Deployment questions answered from the vendor's documentation, each with its source.

?Masks or minimises personal data before it reaches the model? Not documented — Not covered on the governance page source
✔Data residency or regional hosting documented? Yes — "Regional data residency is available across Automation Cloud regions"; "air-gapped and on-premises deployments" via Automation Suite source
✔Customer data excluded from model training (documented)? Yes — "Your data never trains a model and never leaves approved boundaries" source
◐Human review before a decision or record change is executed? Configurable — Audit logs capture the "human approver" of agent actions, which implies an approval step; the mechanism itself is not described on this page source
✔Audit log of agent actions documented? Yes — "Tamper-evident logs capture every agent action, prompt, response, tool call, model version, and human approver" source
Evidence supporting this use (18)
CSA STAR AIUC-1 — registry-matched, vendor-level source
FedRAMP Moderate — registry-matched, vendor-level source
Cyber Essentials — vendor-claimed, vendor-level source
Cyber Essentials Plus — vendor-claimed, vendor-level source
EU AI Act Art. 50 statement — vendor-claimed, vendor-level source
FedRAMP — vendor-claimed, vendor-level source
HIPAA — vendor-claimed, vendor-level source
HITRUST — vendor-claimed, vendor-level source
IRAP — vendor-claimed, vendor-level source
ISO 27001 — vendor-claimed, vendor-level source
ISO 42001 — vendor-claimed, vendor-level source
NIST AI RMF aligned — vendor-claimed, vendor-level source
SOC 2 Type I — vendor-claimed, vendor-level source
SOC 2 Type II — vendor-claimed, vendor-level source
Data residency or regional hosting documented: yes — "Regional data residency is available across Automation Cloud regions"; "air-gapped and on-premises deployments" via Automation Suite source
Customer data excluded from model training (documented): yes — "Your data never trains a model and never leaves approved boundaries" source
Human review before a decision or record change is executed: configurable — Audit logs capture the "human approver" of agent actions, which implies an approval step; the mechanism itself is not described on this page source
Audit log of agent actions documented: yes — "Tamper-evident logs capture every agent action, prompt, response, tool call, model version, and human approver" source
Unknowns to check (7)
Masks or minimises personal data before it reaches the model: not documented — Not covered on the governance page. Ask the vendor. source
Your lawful basis and DPIA for PHI and personal data the agent will touch
That the SOC 2 report period covers the components you will use; request the report under NDA
That the HIPAA BAA is offered for this product tier and region
Whether the ISO 27001 certificate scope names this service, or only the platform
Current FedRAMP status with the agency, if government use is intended
Whether the CSA STAR entry covers this product; Level 1 is a self-assessment, Level 2 a third-party attestation
Suggested restrictions for a pilot (2)
Keep PHI and PII out of pilot inputs, or apply your own redaction before the agent sees a record.
No public trace of this agent under adversarial input was found. Run it in a sandbox against your own prompt-injection and tool-abuse scenarios before the pilot, and keep the transcript; the enterprise edition records one.

See the worked comparison: Claims and document-intake agents that touch personal data →

Rules: config/deploy_rules.json. Advice for a bounded pilot, not a verdict.

Provenance

seed workbookscores, rank, category
CSA STAR Registrycompliance evidence
FedRAMP Marketplacecompliance evidence
vendor pageclaims
NVDsecurity (CVE keyword search)
Hacker News, GDELT, vendor feedsnews and chatter
First seen2026-10-26
Recordres_7c289a53db079f6b
Open the full record (JSON) →