--- sourceDocument: brazil Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/delta-australia-brazil Release : - brazil ft:locale : - en-US ft:publication_title : - brazil Combined Product Files ft:clusterId : - delta3ba bundleId : - delta3ba --- # Combined AI Risk and Compliance release notes for upgrades from Australia to Brazil # Combined AI Risk and Compliance release notes for upgrades from Australia to Brazil {#ariaid-title1} Release version: Brazil Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 10 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined AI Risk and Compliance Release Notes for Upgrades from Australia to Brazil This consolidated release notes document covers all updates, new features, changes, and important upgrade information for the AI Risk and Compliance product from the Australia release through to the Brazil release (version Brazil, updated October 8, 2026). It is designed to guide ServiceNow customers through the upgrade process and highlight key capabilities introduced across these releases. Show full answer Show less The notes emphasize the importance of sequential upgrades to avoid data inconsistencies, and warn about synchronizing upgrades across related applications such as EA Workspace and AI Control Tower Core to prevent loss of business application associations. ## New Features * **Continuous Controls Monitoring (Australia 22.5.x):** Automates control verification with scheduled indicators that monitor compliance, creating GRC issues automatically for remediation by asset owners. * **Risk and Compliance Tasks in Activity Center (Australia 22.5.x):** AI Asset Owners can manage risk and compliance lifecycle tasks such as impact assessments and control attestations directly from the AI Control Tower Activity Center. * **AI Risk and Compliance Lifecycle Tasks in AI Governance (Australia 22.5.x):** AI Stewards and Analysts can conduct risk assessments within the AI Control Tower workspace playbook, streamlining workflow without switching contexts. * **ServiceNow Otto AI Assistance (Australia 22.4.x):** AI-powered assistance enables guided issue creation, summary generation of complex GRC issues, executive summaries for assessments, and intelligent response suggestions to improve early risk capture and compliance documentation. * **Risk-Based Classification During Intake (Australia 22.0.3):** Introduces risk-based classification of AI systems at intake, aligning governance workflows with regulatory and internal risk needs for improved oversight throughout the AI system lifecycle. * **Anonymous AI Case Reporting (Australia 22.0.3):** Enables anonymous submission of AI cases via the Employee Center's Anonymous Reporting Center, promoting broader participation in AI governance while protecting reporter identity. * **Offboarding AI Models and Datasets (Australia 22.0.3):** Supports managing AI asset offboarding lifecycle tasks to ensure governance activities such as assessments and audit documentation are completed when AI assets are retired. ## Changes * **AI Record Labels:** The "AI assets" table renamed to "AI records" and field labels updated for clarity and consistency across AI system, model, and dataset records. * **Smart Assessment Engine Template Versioning (Australia 22.3.5):** Allows creation, publishing, and automatic versioning of Smart Assessment templates, improving assessment governance control. * **Assessment Scope Context in Task and Work Queue Lists (Australia 22.3.5):** Additional columns display governance scope information for control attestations, enhancing task list visibility without needing to open records. * **Impact Assessment Field Auto-Population (Australia 22.3.5):** Screening question responses from AI use case request forms automatically populate impact assessments, reducing manual entry and improving data consistency. * **Expanded Regulatory Frameworks in Content Pack (Australia 22.3.0):** Added authority documents, agency mappings, and citations for new AI regulations (Transparency in Frontier AI Act and Colorado AI Act) to help assess cross-framework coverage efficiently. * **Operations Tab Enhancements:** Added "Offboard" state tracking for retired AI systems and risk classification grouping by department for improved asset management visibility. * **AI Use Case Request and System Record Form Updates:** Added "Use and Purpose" sections to capture AI system context and enable risk-based classification during intake. * **Anonymous AI Case Reporting Access:** Added direct navigation card to Anonymous Reporting Center in Employee Center for easier anonymous case submissions. ## Upgrade and Activation Guidance Upgrades must be performed sequentially through each release to maintain data integrity and functionality. Out-of-sync upgrades with related modules can disrupt business application associations. AI Risk and Compliance is available for installation and activation via the ServiceNow Store, with cumulative release notes accessible there for reference. ## Highlighted Benefits for Customers * Automated and continuous monitoring of AI controls enhances real-time compliance visibility. * Role-specific access and task management streamline governance responsibilities across AI asset lifecycles. * AI-powered assistance accelerates issue documentation and risk communication. * Risk-based classification at intake ensures governance aligns with regulatory obligations from the start. * Anonymous reporting fosters inclusive risk identification and early detection of AI-related issues. * Lifecycle management features support structured offboarding for retiring AI assets, ensuring governance completeness. * Versioning and improved UI elements enhance assessment governance and operational efficiency. * Expanded regulatory content supports compliance with evolving AI legislation. These enhancements enable ServiceNow customers to better assess, monitor, and manage AI risk and compliance across the entire AI asset lifecycle, from onboarding and deployment to retirement, within a centralized workspace. Consolidated page of all release notes for AI Risk and Compliance from Australia to Brazil. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family AI Risk and Compliance release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Australia to Brazil. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading AI Risk and Compliance to Brazil Before you upgrade to Brazil, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-airiskandcompliance-summary__entry__2} | Release | Release notes | |-|-| | Australia | No updates for this release. | | Brazil | Upgrade information : If you're upgrading from an earlier release, upgrade sequentially through each release rather than skipping versions. Upgrade scripts depend on running in order, and skipping releases can cause data inconsistencies or broken functionality. Warning: If AI Risk and Compliance, EA Workspace, and AI Control Tower Core are upgraded out of sync, business application associations may be lost or unavailable. For more information, see [Enterprise Architecture for AICT plugin installation and upgrade considerations](https://www.servicenow.com/docs/access?context=aict-ea-common-upgrade-considerations&family=brazil&ft:locale=en-US) and [Configure](https://www.servicenow.com/docs/access?context=configuring-ai-risk-and-compliance&family=brazil&ft:locale=en-US). | [ ] ## New features Between your current release family and Brazil, new features were introduced for AI Risk and Compliance. {#dfrn3-airiskandcompliance-summary__entry__8} | Release | Release notes | |-|-| | Australia | [Continuous controls monitoring](https://www.servicenow.com/docs/access?context=airc-continuous-controls-monitoring&family=australia&ft:locale=en-US) : Use Continuous Controls Monitoring to automate control verification and gather real-time visibility into control health. After upgrading to version 22.5.x, users with the AI Risk and Compliance Manager \[sn_grc_ai_gov.ai_risk_and_compliance_manager\] role can create a compliance evaluation configuration. Indicators that use metrics from ServiceNow or Traceloop, can run on a schedule and evaluate whether a control associated with the asset is compliant or non-compliant. When an indicator fails, a GRC issue is created so that the product owner of the affected asset can remediate it. Users with the AI Risk and Compliance Analyst \[sn_grc_ai_gov.ai_risk_and_compliance_analyst\] role can access the configurations but can't make changes. [Risk and compliance tasks for Asset owners in Activity center](https://www.servicenow.com/docs/access?context=aict-activity-center&family=australia&ft:locale=en-US) : After upgrading to version 22.5.x, if you have the AI Asset Owner \[sn_ai_asset_mgmt.ai_asset_owner\] role, you can access and act on risk and compliance life cycle tasks, such as impact assessments and control attestations, from the Activity Center in AI Control Tower. The Activity Center surfaces AI asset tasks, issues, policy exceptions, and AI cases for the asset owner. On the asset record page, all life cycle tasks specific to the assigned assets can be accessed and performed. [AI Risk and Compliance lifecycle tasks in AI Governance](https://www.servicenow.com/docs/access?context=risk-compliance-lifecycle-tasks-aict&family=australia&ft:locale=en-US) : After upgrading to version 22.5.x, if you have the AI Steward \[sn_ai_governance.ai_steward\] and AI Risk and Compliance Analyst \[sn_grc_ai_gov.ai_risk_and_compliance_analyst\] roles, you can take and manage risk assessments directly from the playbook within the AI Control Tower workspace, without switching between workspaces. [ServiceNow Otto for AI Risk and Compliance](https://www.servicenow.com/docs/access?context=airc-exploring-now-assist&family=australia&ft:locale=en-US) : Use Now Assist for AI Risk and Compliance to get AI-powered assistance throughout the AI asset lifecycle. After upgrading to version 22.4.x, users with the AI Risk and Compliance AI user \[sn_airc_gen_ai.airc_ai_user\] and AI Risk and Compliance AI agent user \[sn_airc_gen_ai.airc_ai_agent\] roles can access the following capabilities: * Create and document governance, risk, and compliance issues with guided assistance from the employee center. * Generate concise summaries of complex GRC issues for faster review and decision-making. * Create executive summaries of risk assessments to communicate findings to stakeholders. * Generate responses to assessment questions based on past assessments and reference documentation. * Identify related control objectives from your controls library to reduce duplication. Use these capabilities to capture AI risk context early in the development process and address compliance requirements throughout the system lifecycle. [Risk‑based classification during intake](https://www.servicenow.com/docs/access?context=request-ai-system&family=australia&ft:locale=en-US) : After upgrading to version 22.0.3, if you have the AI risk and compliance business user \[sn_grc_ai_gov.ai_risk_and_compliance_business_user\] role, you can now classify AI systems using a risk‑based approach at intake, enabling organizations to capture AI risk context early and align governance workflows with regulatory and internal risk requirements. This improvement to the AI use case request form supports more accurate AI oversight throughout the system life cycle. [Report an AI case anonymously](https://www.servicenow.com/docs/access?context=report-ai-case-anon&family=australia&ft:locale=en-US) : After upgrading to version 22.0.3, if you have the AI Case Management (sn_ai_case_mgmt) application installed and the AI case business user \[sn_ai_case_mgmt.ai_case_business_user\] role, you can navigate to the Employee Center to access the Anonymous Reporting Center and submit AI cases anonymously, enabling broader participation in AI governance while protecting the identity of reporters. No additional role is required to submit an anonymous report directly through the Anonymous Reporting Center. Broader participation helps organizations identify potential AI risks earlier by removing barriers to case submission. [Offboard AI models and datasets](https://www.servicenow.com/docs/access?context=airc-offboarding-ai-assets&family=australia&ft:locale=en-US) : After upgrading to version 22.0.3, if you have the AI risk and compliance analyst \[sn_grc_ai_gov.ai_risk_and_compliance_analyst\] or AI risk and compliance manager \[sn_grc_ai_gov.ai_risk_and_compliance_manager\] role you can manage AI asset offboarding life cycle tasks. Managing these tasks supports completion of governance-related activities, such as risk and impact assessments, conformity reviews, issue closure, and audit documentation, when an AI asset is retired or removed from active use. | | Brazil | No updates for this release. | [ ] ## Changes Between your current release family and Brazil, some changes were made to existing AI Risk and Compliance features. {#dfrn3-airiskandcompliance-summary__entry__14} | Release | Release notes | |-|-| | Australia | AI record labels : The AI assets (sn_grc_ai_gov_ai_system) table has been renamed to AI records (sn_grc_ai_gov_ai_system). Two field labels on AI system, AI model, and dataset record pages in the AI Risk and Compliance Workspace have changed. The Record type field now displays AI record instead of the previous asset-specific labels. On AI system records, the Asset type field has been replaced by Parent category, which displays AI system. [Smart Assessment Engine template versioning](https://www.servicenow.com/docs/access?context=airc-assessment-templates&family=australia&ft:locale=en-US) : After upgrading to version 22.3.5, if you have the AI risk and compliance admin \[sn_grc_ai_gov.ai_risk_and_compliance_admin\] role, you can use Smart Assessment templates that support versioning. A new version is created automatically when you edit and save a template. Publishing a new version retires the previously published version. Existing templates are set to Version 1. [Assessment scope context in task and work queue lists](https://www.servicenow.com/docs/access?context=tasks-ai-risk-compliance&family=australia&ft:locale=en-US) : After upgrading to version 22.3.5, if you have the AI risk and compliance analyst \[sn_grc_ai_gov.ai_risk_and_compliance_analyst\] or AI risk and compliance manager \[sn_grc_ai_gov.ai_risk_and_compliance_manager\] role, assessment task list and work queue views display additional columns that show the governance scope (related entity such as AI asset, model, or dataset) of each control attestation-based assessment. These columns let you identify which AI asset, entity, and control an assessment belongs to without opening the individual record. [Impact assessment field auto-population](https://www.servicenow.com/docs/access?context=airc-intake&family=australia&ft:locale=en-US) : After upgrading to version 22.3.5, if you have the AI asset owner \[sn_ai_asset_mgmt.ai_asset_owner\] or AI risk and compliance business user \[sn_grc_ai_gov.ai_risk_and_compliance_business_user\] role, the screening question responses that capture the AI system's intended use and operational context from the Use and Purpose section of the AI use case request form are automatically populated in the corresponding Use and Purpose fields of a new impact assessment. This synchronization reduces manual entry and helps ensure that impact assessment responses are consistent with the information submitted at intake. [AI Risk and Compliance Content Pack regulatory frameworks](https://www.servicenow.com/docs/access?context=airc-content-pack&family=australia&ft:locale=en-US) : After upgrading to version 22.3.0, if you have the AI Risk and Compliance Content application installed and the admin role, the AI Risk and Compliance content pack includes additional authority documents, agency mappings, and citations for the following regulatory frameworks: the Transparency in Frontier Artificial Intelligence Act (SB 53) and the Colorado Artificial Intelligence Act (SB 205). When at least one regulatory framework is activated, control objective records display citations from all activated authority documents in the Citations tab. This enables you to assess cross-framework regulatory coverage from a single control objective record without navigating each framework separately. [Operations tab](https://www.servicenow.com/docs/access?context=operations-tab&family=australia&ft:locale=en-US) : On the Operations tab in the AI Risk and Compliance Workspace, the AI systems by state section includes an Offboard state to track AI systems in retirement or offboarding and the AI systems by department section now supports grouping by Risk classification from the Show by drop-down list to view the distribution of AI systems in each department. [AI use case request form](https://www.servicenow.com/docs/access?context=airc-intake&family=australia&ft:locale=en-US) : A Use and Purpose section containing screening questions has been added to the AI use case request form to capture contextual information about how an AI system will be used and supports automated risk‑based classification during submission. [AI system record page](https://www.servicenow.com/docs/access?context=ai-system-airc&family=australia&ft:locale=en-US) : A Use and Purpose section has been added to the AI system record page, which you can access from the AI asset inventory list in the AI Risk and Compliance Workspace. [Anonymous AI case reporting](https://www.servicenow.com/docs/access?context=airc-cases-inquiries&family=australia&ft:locale=en-US) : A Visit Anonymous Reporting Center card is available in the Support resources section of the AI assets page in the Employee Center, enabling you to navigate to the Anonymous Reporting Center to submit an anonymous AI case. | | Brazil | No updates for this release. | [ ] ## Removed Between your current release family and Brazil, some AI Risk and Compliance features or functionality were removed. {#dfrn3-airiskandcompliance-summary__entry__20} | Release | Release notes | |-|-| | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Deprecations Between your current release family and Brazil, some AI Risk and Compliance features or functionality were deprecated. {#dfrn3-airiskandcompliance-summary__entry__26} | Release | Release notes | |-|-| | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Activation information Review information on how to activate AI Risk and Compliance. {#dfrn3-airiskandcompliance-summary__entry__32} | Release | Release notes | |-|-| | Australia | Activation information : Install AI Risk and Compliance by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=australia&ft:locale=en-US). Important: AI Risk and Compliance is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes. | | Brazil | Activation information : Install AI Risk and Compliance by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=brazil&ft:locale=en-US). Note: AI Risk and Compliance is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes. | [ ] ## Additional requirements If any additional requirements were introduced or changed for AI Risk and Compliance we have noted them here. {#dfrn3-airiskandcompliance-summary__entry__38} | Release | Release notes | |-|-| | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for AI Risk and Compliance we have noted them here. {#dfrn3-airiskandcompliance-summary__entry__44} | Release | Release notes | |-|-| | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for AI Risk and Compliance, such as specific requirements or compliance levels. {#dfrn3-airiskandcompliance-summary__entry__50} | Release | Release notes | |-|-| | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Localization information If there are specific localization considerations for AI Risk and Compliance we have noted them here. {#dfrn3-airiskandcompliance-summary__entry__56} | Release | Release notes | |-|-| | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for AI Risk and Compliance we have noted them here. {#dfrn3-airiskandcompliance-summary__entry__62} | Release | Release notes | |-|-| | Australia | * Manage Smart Assessment templates with versioning support. Create, publish, and delete template versions to support consistent assessment governance. * View the related entity (AI record, model, or dataset) and control for each control attestation-based assessment directly in task and work queue lists, without opening the individual record. * Access authority documents, agency mappings, and citations for additional AI regulatory frameworks in the AI Risk and Compliance content pack. * Classify AI systems based on regulatory risk at intake by applying a configured Risk Assessment Methodology (RAM), enabling early risk identification and consistent AI governance decisions across the system life cycle. * Submit AI cases anonymously to report potential AI risks or concerns without disclosing your identity, helping improve early risk visibility and participation in AI governance. * Offboard AI assets with structured life-cycle tasks to support completion of governance and risk activities when systems are retired or replaced. See [AI Risk and Compliance](https://www.servicenow.com/docs/access?context=ai-risk-and-compliance&family=australia&ft:locale=en-US) for more information. | | Brazil | * Assess, score, and monitor risk across your AI assets, from onboarding through deployment, until retirement. * Centralize regulatory risk assessments, impact assessments, issue tracking, and remediation in a single workspace. * Manage risk and compliance scores for AI assets throughout their life cycle with workflows for ongoing oversight and risk management. * Manage conformity of AI assets with global regulations and frameworks. * Identify and address potential impacts on privacy, non- discrimination, and other human rights. See [September 2026](https://www.servicenow.com/docs/access?context=airc-rn-2026-09&family=brazil&ft:locale=en-US) for more information. | [ ]