Access Certification (AI)

Access certification is the periodic review process in which human reviewers — typically data owners or security teams — verify that AI agents still require the permissions they hold and revoke any that are no longer needed. Regular certification prevents permission accumulation and is a common requirement under SOC 2, ISO 27001, and enterprise security standards.