---
sourceDocument: Australia ServiceNow AI Platform Capabilities
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/servicenow-platform

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia ServiceNow AI Platform Capabilities

ft:clusterId :

    - platcap

bundleId :

    - platcap

workflow :

    - Platform


---

# Security model

# Hermes Messaging Service security model {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
The Hermes Messaging Service security model relies on the following capabilities.
{#hermes-messaging-service-security-model__table_ckl_5bm_5wb__entry__2}

| Capability | Description |
|-|-|
| Namespaces and data isolation | All Kafka topics are namespaced per customer. You can only view topics that belong to you and your topics aren't visible to anyone else. |
| Authentication and authorization | The Hermes Messaging Service requires certificate-based authentication using mTLS endpoint authentication with trusted identities and authorization based on identity. |
| Domain separation | Domain separation is supported with the Hermes Messaging Service. See [Hermes Messaging Service domain separation](https://www.servicenow.com/docs/jiHIap0whZtb_AOZmu0DbA "Domain separation is supported for the Hermes Messaging Service. Domain separation enables you to separate data, processes, and administrative tasks into logical groupings called domains. You can control several aspects of this separation, including which users can see and access data."). |
| High-availability | Failover is provided by multiple Kafka clusters running in separate ServiceNow datacenters. |
[Table 1. Hermes Messaging Service security model]

{#hermes-messaging-service-security-model__table_ckl_5bm_5wb}
**Related concepts**   

* [Hermes Messaging Service domain separation](https://www.servicenow.com/docs/jiHIap0whZtb_AOZmu0DbA "Domain separation is supported for the Hermes Messaging Service. Domain separation enables you to separate data, processes, and administrative tasks into logical groupings called domains. You can control several aspects of this separation, including which users can see and access data.")  
**Related reference**   

* [Hermes Messaging Service components](https://www.servicenow.com/docs/0wfYOuro4bPFQ4cZjOOB3w "The Hermes Messaging Service architecture is built on the following components.")
* [Hermes Messaging Service system properties](https://www.servicenow.com/docs/bgZBvsbhgYGMKGqmtHkYQg "These system properties control the behavior of the Hermes Messaging Service.")
* [Hermes background jobs](https://www.servicenow.com/docs/HLbzgFCRjt6gl7TKoIO8oQ "These background jobs are associated with Hermes settings. The table lists their default run frequencies and descriptions.")
* [Hermes Messaging Service roles](https://www.servicenow.com/docs/eFAZGITGCY7mQncYOiVgLQ#hermes-messaging-service-roles "Hermes Messaging Service is installed with these roles.")