PDIs & Security

[daneshvark]

I was wondering how security works with ServiceNow personal development instances (PDIs). We want to have an isolated system from our production environments and don't want to interfere with our test and dev instances. If we build something in a PDI, how secure is it? Any official sources? Thank you. 

[Hemanth M · Accepted solution]

Hi @daneshvark ,

Why don't to you request a sandbox instance from ServiceNow and you don't have worry about security (this may cost, check with your ServiceNow account rep)

or if its for particular set of users you can try developer sandboxes - https://www.servicenow.com/docs/r/zurich/application-development/developer-sandboxes/sandboxes-landi... 

I would avoid PDIs from customer POCs

Hope it helps!

[daneshvark]

Hello Hemanth, 

Understood. For the sake of completion of our knowledge, so we can advise our colleagues about avoiding this practice, how safe is the data in a PDI? Is a PDI not a secure environment? 

[Hemanth M]

Hi @daneshvark ,

It's a tricky question - but it's pretty safe since it has all the standard security guardrails of ServiceNow.
Also ServiceNow completely wipes the PDI clean before allocating it to anyone else.

However, we should absolutely avoid setting up any real customer data especially PII, PHI or sensitive workflows.

You can also read this (ServiceNow general privacy and security set up) - https://www.servicenow.com/privacy-statement.html#confidentiality 

Hope it helps!