Know it. Protect it. Scale It. A practical guide to ServiceNow Data Privacy

[Justina Buzza]

ServiceNow Data Privacy delivers at every level — from classifying sensitive data out of the box, to AI-powered protection where traditional rules fall short, with more capability unlocking as you scale.

Watch the full 38-minute session on YouTube:

Data privacy isn’t something you bolt-on at the end of a project. On the ServiceNow platform, it’s a layered capability set: some of it is available to every customer today, some unlocked with additional licensing. The question most teams ask is simple: what do I have right now, and what do I need to do more?

In this Platform Academy session, the ServiceNow Data Privacy product management team walks through the full picture with live demos, from core classification to premium anonymization to AI-powered discovery and Now Assist integration. Here’s what you need to know.

The four tiers of Data Privacy capabilities

Think of Data Privacy on ServiceNow as a progression. You don’t need everything on day one but knowing what’s available helps you match capabilities to your actual use cases. Some features require a ServiceNow Vault subscription. ServiceNow Vault is the security layer for the ServiceNow AI Platform, bundling Data Privacy, Platform Encryption, Zero Trust Access, Log Export Service, and Code Signing into a single managed solution that controls access, encryption, and data protection built for the scale and risk of agentic AI.  

Data Privacy Features	Core Platform Every customer	Premium Features² ServiceNow Vault or Data Privacy subscription	AI Add-On³ $0 SKU — requires Tier 2	Now Assist for Vault⁴ Vault + Now Assist
			Requires Vault or Data Privacy subscription as prerequisite	Requires Vault + Now Assist — Data Privacy standalone does not qualify
CORE PLATFORM
Data Classification Classify table and column data based on sensitivity and risk.	✓	—	—	—
Incoming Email (RTA) Real-time discovery and anonymization of sensitive data found in incoming email.	✓	—	—	—
GenAI Model Protection¹ Masks and synthetically replaces sensitive data in real-time across Now Assist prompts, responses, and data extractions before LLM consumption.	✓	—	—	—
PREMIUM FEATURES
User Data Anonymization Anonymization of PII associated with users. (e.g., a GDPR request is made to delete a user’s data).	—	✓	—	—
Scheduled Jobs Re-occurring as well as on-demand discovery and anonymization of sensitive data in tables. (e.g., cloning, prod and sub-prod scans).	—	✓	—	—
Real-time Anonymization (RTA) Proactive, real-time data discovery and anonymization of sensitive data in tables and columns. (e.g., data matching a pattern is immediately anonymized on update).	—	✓	—	—
Granular Findings Monitor and review specific columns for new sensitive records. (e.g., looking at a specific incident record to verify a pattern match).	—	✓	—	—
Real-time APIs Real-time data discovery and anonymization APIs for admins and developers for custom workflows.	—	✓	—	—
AI ADD-ON (REQUIRES TIER 2 — DATA PRIVACY OR VAULT)
AI Discovery³ Detect and anonymize sensitive data that doesn’t follow standard patterns (e.g., names, organizations and addresses — NER).	—	—	✓	—
Attachment Scanning³ Discover sensitive data in attachments using common productivity formats PDF, DOC(X), XLS(X), CSV and TXT to notify admins.	—	—	✓	—
NOW ASSIST FOR VAULT (REQUIRES VAULT SUBSCRIPTION + NOW ASSIST ENTITLEMENT)
RegEx Generation Generates regular expression patterns for sensitive data discovery from plain-text prompts.	—	—	—	✓
Data Discovery Job Scheduling and Summarization Schedule discovery jobs and retrieve job summaries using plain-language commands.	—	—	—	✓
Recommend Column Classifications Recommend sensitivity labels for columns by analyzing table and column metadata.	—	—	—	✓

Table notes:

¹ Features specific to Now Assist and Virtual Agent customers. Requires an active Now Assist and/or Virtual Agent entitlement to leverage these capabilities.

² Entitled through a Vault or Data Privacy standalone subscription.

³ Opt-in features — requires AI Enhanced Workflow Security SKU which is a $0 add-on entitlement to leverage AI/ML capabilities. Prerequisite: requires Data Privacy and ServiceNow Vault subscription.

⁴ Now Assist for Vault is activated by purchasing both Vault AND any Pro Plus, Ent Plus, or AI Native Tier (Foundational, Advanced, Prime), excluding Creator Pro Plus and App Engine Foundational.

The key takeaway: Core capabilities help you understand where sensitive data exists. Premium capabilities help you protect it at scale. AI extends that coverage to unstructured content and attachments that traditional regex simply can’t reach. Now Assist makes it faster, turning complex admin tasks like scheduling discovery jobs and writing regex into plain-language conversations.

What every customer has today

Data Classification

The foundation of any data privacy strategy is knowing where sensitive data lives. Data Classification lets admins apply sensitivity and risk classifications to dictionary entries – table columns – across the instance. Admins can apply pre-defined or custom classifications (such as PII, PHI, or Restricted) to the fields they identify as sensitive and use the Overview dashboard to track how data tables map to those classifications. This structured labeling helps to enable downstream controls, compliance reporting, and GDPR readiness.

Use Case

A healthcare organization needs to identify which tables and columns contain PHI to meet HIPAA compliance requirements and establish appropriate access controls. A Data Classification Admin can create data classifications and assign them to specific columns in specific tables.

Incoming Email Real-Time Anonymization

Email is one of the most common entry points for sensitive data on the platform. With incoming email RTA, sensitive data like SSNs or credit card numbers can be automatically detected and anonymized before it ever enters the database. Low configuration effort, immediate risk reduction.

Use Case

A financial services company routes customer support emails to ServiceNow. Credit card numbers and SSNs are automatically anonymized on ingest so agents see the ticket, not the sensitive data.

Data Privacy for Now Assist

For customers with a Now Assist subscription, sensitive data is automatically masked in prompts before they are sent to LLMs for inference, then restored in the response when it returns to the user. Teams can adopt generative AI without exposing sensitive data externally.

*Requires a separate Now Assist subscription.

What Premium unlocks

With a Data Privacy or ServiceNow Vault subscription, you move from discovery into active, scalable protection. The session covers five key capabilities and their real-world applications:

Real-Time Anonymization

Proactive, real-time data discovery and anonymization in tables, columns, and channels (like Virtual Agent) — data matching a pattern is immediately anonymized on update.

Scheduled Anonymization Jobs

Run discovery and anonymization on historical data as a one-time cleanup or on a recurring schedule (weekly, monthly) to ensure sensitive data is consistently removed sensitive data in tables — cloning, prod, and sub-prod scans

GDPR “Right to be Forgotten”

When a data subject requests deletion, User Data Anonymization processes PII removal across all associated records, preserving operational data while meeting compliance obligations.

Anonymization in Cloning

When production is cloned to dev/test, sensitive PII like SSNs and addresses is automatically masked. Your test environment stays functional while reducing your compliance risk.

Real-Time APIs

Admins and developers can build custom workflows using real-time data discovery and anonymization APIs, extending protection into bespoke processes and integrations.

Where AI changes the game

Traditional regex-based detection is powerful, but it has a hard limit: it can only find what you have explicitly defined a pattern for. Names, freehand addresses, organization references in unstructured text? Regex misses them. Attachments have historically been a blind spot too.

The AI/ML Add-On (a $0 SKU for Data Privacy or Vault customers) closes both gaps.

Named Entity Recognition (NER)

An ML model identifies names, organizations, locations, dates, nationalities, and affiliations in free-form text without a defined pattern. A user types "Contact John Smith at 123 Main St" in an incident field and NER catches it.

Attachment Scanning

PDF, DOCX, XLSX, CSV, and TXT files are scanned for sensitive data. When a customer uploads a document containing SSNs, admins are alerted before it becomes a compliance risk.

Licensing note: The AI Add-On includes additional contract language authorizing data transfer to a centralized ServiceNow environment for AI/ML processing. Your team will need to request this $0 SKU to activate these capabilities.

Now Assist for Vault: faster admin workflows

For customers with both a Vault subscription and a Now Assist entitlement, three new capabilities among others reduce the operational burden on admins.

Schedule Data Discovery Jobs via natural language

Instead of navigating multiple configuration screens, admins can describe what they want in plain language, and Now Assist handles the setup.

Generate RegEx patterns from simple prompts.

Building regex expressions manually is time-consuming and error prone. Now Assist generates them from a plain-text description of the pattern you’re looking for.

Recommend Column Classifcations

Manual classifications can be time consuming. Save time with Now Assist for Vault where analyzed table and column metadata provides recommended column classifications.

Data discovery job scheduler

Streamlines sensitive data discovery by guiding admins through scheduling a discovery job with minimal input.

Create & modify data privacy advanced configuration

Guides admins through configuring and managing data masking settings for Data Privacy across Now assist and Data Extraction channels. 

Where to start

If you’re not sure which tier is right for your organization, start with the question the session opens with: do you know where your sensitive data lives? Data Classification is available today and gives you a baseline inventory.

From there, the 30-day free trial of Data Privacy and Data Discovery in your sub-production environment is a low-friction way to see premium capabilities in action against your real data structures.

Watch the full session

Learn more! Check out the three live demos included in this session: email anonymization, GDPR Right to be Forgotten, and Data Privacy for Now Assist.

YouTube: https://www.youtube.com/watch?v=dAXFXhd0dxo

Platform Academy: https://sn.works/academies

© 2026 ServiceNow, Inc. All rights reserved.