--- sourceDocument: brazil Combined Product Files sourceDocumentLink: https://www.servicenow.com/docs/r/delta-australia-brazil Release : - brazil ft:locale : - en-US ft:publication_title : - brazil Combined Product Files ft:clusterId : - delta3ba bundleId : - delta3ba --- # Combined ServiceNow Vault release notes for upgrades from Australia to Brazil # Combined ServiceNow Vault release notes for upgrades from Australia to Brazil {#ariaid-title1} Release version: Brazil Updated October 8, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 11 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Combined ServiceNow Vault release notes for upgrades from Australia to Brazil This consolidated release notes document provides ServiceNow customers with comprehensive information on upgrading ServiceNow Vault from the Australia release family to Brazil. ServiceNow Vault is a bundled solution comprising Data Discovery, Data Privacy, Zero Trust Access, Field Encryption, Code Signing, and Log Export Service. The Brazil release introduces enhancements to simplify deployment, automate security tasks, and improve visibility into data security posture, enabling customers to protect sensitive data across its lifecycle using a unified console. Show full answer Show less ## Key Features * **Vault Suite:** A new automated installation bundle for all paid ServiceNow Vault capabilities, including Vault Console, Field Encryption, Zero Trust Access, Log Export Service, Code Signing Enterprise, and Cloud Encryption. This eliminates manual plugin setup for entitled instances. * **Default Log Export Service Configuration:** Preconfigured export topics and curated log sources enable easy activation of security and audit log exports with a single step from Vault Console (requires Log Export Service v3.5.0+). * **Agentic Workflows via ServiceNow Otto for Vault:** AI-driven workflows assist with securing custom applications by recommending data classifications, monitoring data access (Access Observer), encrypting fields with role-based access, and summarizing access logs---all enabled by default when Otto is installed. * **AI Insights:** Dashboard feature that identifies unprotected sensitive data and users entering such data, helping prioritize protection efforts. * **Agentic Classification for ServiceNow Assets:** Automates sensitive data classification on large tables using schema metadata to recommend and apply classifications, streamlining data cataloging. * **Vault Coverage Report Email:** Monthly emails to active administrators summarizing sensitive data protection coverage when sensitive columns are detected. * **AI-Generated Security Posture Summary:** Provides an AI-written overview with recommended next steps on Vault console home page, reducing time spent interpreting metrics. * **Field Encryption with Auto-Generated Access Policies:** Automates creation of module access policies for encrypted fields based on roles, simplifying management of access control. * **Zero Trust Access Default Policies:** Applies default step-up authentication policies automatically upon Zero Trust Access installation to protect data access from the start. * **Monitoring Enhancements:** Includes code signing activity metrics and log export monitoring widgets directly in Vault Console for improved operational visibility. * **ServiceNow Vault in Admin Home:** Provides an easy way for administrators with appropriate entitlements to discover, install, and access Vault components via Admin Home. ## Key Changes * The **securityadmin role** has been removed from Vault Console administrative tasks, with all admin functions now available through the `snvaultconsole.vaultconsoleadmin` role, aligning with least-privilege security principles. * **ServiceNow Otto** is the new name for the conversational AI platform integrated into workflows, delivering enhanced agentic and multimodal AI capabilities for Vault security automation. * The **default AI model provider** for new or inactive AI assets switched from Now LLM Service to Azure OpenAI, while existing configurations remain unchanged. * **Role masking** in Access Observer and Field Encryption workflows no longer uses the securityadmin role, further adhering to least-privilege guidelines. * All default policies provisioned for Vault components are now prefixed with `Vault by Default` to clearly distinguish ServiceNow-provisioned policies from customer-created ones. * Vault onboarding email design has been refreshed for Brazil release. ## Deprecations and Removals No features or functionalities were removed or deprecated in this upgrade from Australia to Brazil, except for changes related to AI model usage noted above. ## Upgrade and Activation Information * ServiceNow Vault components---Vault Console, Vault Suite, and ServiceNow Otto for Vault---are available through the ServiceNow Store. Vault Console can be installed for free, but full feature access requires a valid ServiceNow Vault subscription. * For smooth upgrade, customers should review and complete pre- and post-upgrade tasks as outlined in the release notes. * Vault Suite simplifies deployment by automating the installation of all Vault capabilities in a single step, reducing manual configuration effort. ## Practical Benefits for ServiceNow Customers * **Streamlined Deployment:** Automate installation of comprehensive Vault security features with Vault Suite, saving time and reducing errors. * **Improved Security Posture:** Leverage AI-powered workflows and insights to efficiently classify, protect, and monitor sensitive data, including custom applications. * **Operational Visibility:** Access consolidated dashboards and reports for code signing, log export, data access, and overall security posture. * **Least-Privilege Security:** Benefit from updated role management that enhances security by minimizing unnecessary elevated privileges. * **Consistent Policy Management:** Easily identify and manage default Vault policies, ensuring clarity between system and custom configurations. Consolidated page of all release notes for ServiceNow Vault from Australia to Brazil. ## How to use this page To help you prepare for your upgrade, we have combined the cross-family ServiceNow Vault release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Australia to Brazil. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." ## Important information for upgrading ServiceNow Vault to Brazil Before you upgrade to Brazil, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-servicenowvault-summary__entry__2} | Release | Release notes | |-|-| | Australia | Upgrade information : ServiceNow Vault is a bundle of the following products: * [ServiceNow Vault](https://www.servicenow.com/docs/access?context=servicenow-vault-landing&family=australia&ft:locale=en-US) * [Data Discovery](https://www.servicenow.com/docs/access?context=data-discovery-landing&family=australia&ft:locale=en-US) * [Data Privacy](https://www.servicenow.com/docs/access?context=data-privacy-landing&family=australia&ft:locale=en-US) * [Zero Trust Access](https://www.servicenow.com/docs/access?context=session-access&family=australia&ft:locale=en-US) * [Field Encryption](https://www.servicenow.com/docs/access?context=field-encryption&family=australia&ft:locale=en-US) * [Code Signing](https://www.servicenow.com/docs/access?context=code-signing-landing&family=australia&ft:locale=en-US) * [Log Export Service (LES)](https://www.servicenow.com/docs/access?context=les-intro&family=australia&ft:locale=en-US) Note: Field Encryption, Data Discovery, and Data Privacy can be automatically installed using Vault Console. | | Brazil | No updates for this release. | [ ] ## New features Between your current release family and Brazil, new features were introduced for ServiceNow Vault. {#dfrn3-servicenowvault-summary__entry__8} | Release | Release notes | |-|-| | Australia | [Vault Suite](https://www.servicenow.com/docs/access?context=vault-suite&family=australia&ft:locale=en-US) : Deploy the complete ServiceNow Vault offering on your instance with Vault Suite, which automates the installation of all paid ServiceNow Vault capabilities for instances with a ServiceNow Vault subscription. Vault Suite includes Vault Console, Field Encryption, Zero Trust Access (Continuous Authentication, Location, and Session Access), Log Export Service, Code Signing Enterprise, and Cloud Encryption, eliminating the manual plugin setup previously required to access the full set of ServiceNow Vault capabilities. [Default Log Export Service configuration for Vault](https://www.servicenow.com/docs/access?context=vault-default-policies-configs&family=australia&ft:locale=en-US) : Begin exporting security and audit logs from your instance with a preconfigured Log Export Service topic and curated log sources, designed for instances with a ServiceNow Vault subscription. Activate the default configuration in a single step from the Vault Console, with no manual setup required. Log Export Service version 3.5.0 or later must be installed on the instance. [Guided setup for custom applications](https://www.servicenow.com/docs/access?context=use-vault-guided-setup&family=australia&ft:locale=en-US) : Use Ask Now Assist to enhance your security posture autonomously by identifying, classifying, and protecting sensitive data in your custom applications. [Securing custom apps with Vault agents agentic workflow](https://www.servicenow.com/docs/access?context=now-assist-vault-securing-custom-apps-agents&family=australia&ft:locale=en-US) : Propose data classifications and available protections for a custom application. When you install ServiceNow Otto for Vault, this agentic workflow is turned on by default. [Access Observer configuration agentic workflow](https://www.servicenow.com/docs/access?context=now-assist-vault-access-observer-config&family=australia&ft:locale=en-US) : View, create, deactivate, and delete Access Observer settings for a particular field. The access observer configuration agentic workflow helps you monitor the people and processes that access data on your instance. When you install ServiceNow Otto for Vault, this agentic workflow is turned on by default. [Summarize Access Observer logs agentic workflow](https://www.servicenow.com/docs/access?context=now-assist-vault-access-observer-logs&family=australia&ft:locale=en-US) : Review and summarize access logs for a specific field, identifying access sources, users, and their roles. For example, you can ask Now Assist to summarize access logs to view users who accessed a field, along with their roles and how they accessed the data. When you install ServiceNow Otto for Vault, this agentic workflow is turned on by default. [Field encryption with Vault module agentic workflow](https://www.servicenow.com/docs/access?context=now-assist-vault-field-encryption-module&family=australia&ft:locale=en-US) : Encrypt specific fields and configure secure access to users with designated roles using the field encryption with vault module agentic workflow. When you install ServiceNow Otto for Vault, this agentic workflow is turned on by default. [Sensitive data monitoring in AI Insights](https://www.servicenow.com/docs/access?context=vault-tools&family=australia&ft:locale=en-US) : Identify unprotected sensitive data across your configured tables using the AI Insights section in the Vault console dashboard. View users entering sensitive data in unprotected columns and channels, grouped by sensitive data patterns. This information can further be used to prioritize protection efforts. [Guided setup for custom applications](https://www.servicenow.com/docs/access?context=use-vault-guided-setup&family=australia&ft:locale=en-US) : Autoclassify and protect the occurrences of sensitive data within your custom applications using guided setup for Vault. This flow helps you to quickly start using Vault capabilities in your own applications. | | Brazil | [Agentic classification for ServiceNow assets](https://www.servicenow.com/docs/access?context=now-assist-vault-classify-servicenow-assets&family=brazil&ft:locale=en-US) : Classify sensitive data across a large table estate without labeling each column by hand. Select a category of ServiceNow assets in the Data Catalog, and the agent recommends a data class for each column in scope, with the reason for each recommendation. Recommendations are based on schema metadata, such as table and column names and any existing classifications. Review the recommendations and then confirm to apply them. The classifications appear on the data assets after the next ServiceNow metadata collector run. Vault coverage report email : Stay informed about how much of your sensitive data is protected with a Vault coverage report email. Active administrators receive it on the last Monday of each month. The email is sent only when Vault finds sensitive columns on your instance. [AI-generated security posture summary](https://www.servicenow.com/docs/access?context=vault-insights&family=brazil&ft:locale=en-US) : Reduce the time you spend interpreting individual charts by reading an AI-generated summary of your data security, with a recommended next step for each area. Insights appears at the top of the Vault console home page and reports on data discovery, classification, and data protection. [Field encryption and auto-generate access policies agentic workflow](https://www.servicenow.com/docs/access?context=now-assist-vault-field-encryption-access-policies&family=brazil&ft:locale=en-US) : Keep encrypted fields readable for the roles that need them by creating the module access policies as part of field encryption. Request encryption for a table field, review the roles that currently have access to it, and confirm the final list. The workflow creates a module access policy for each confirmed role and then encrypts the field, so you no longer review access control lists or Access Observer logs to build the role list yourself. [Zero Trust Access default policies](https://www.servicenow.com/docs/access?context=vault-default-policies-configs&family=brazil&ft:locale=en-US) : Protect access to data from the start by automatically applying default step-up authentication policies when you install Zero Trust Access with ServiceNow Vault. Review these default policies at any time from Vault Console. [Code signing activity metrics in Vault Console](https://www.servicenow.com/docs/access?context=vault-tools&family=brazil&ft:locale=en-US) : Monitor code signing activity across your instance by tracking the create, update, and delete operations applied to code signing enabled records over the past week, and see which tables have the most such records. [Log Export Service export monitoring widget](https://www.servicenow.com/docs/access?context=vault-tools&family=brazil&ft:locale=en-US) : Monitor your instance's log export activity by tracking total data exported over the past six months, the topics that export the most data, and the data exported by each topic so far in the current month. [ServiceNow Vault in Admin Home](https://www.servicenow.com/docs/access?context=install-vault-suite&family=brazil&ft:locale=en-US) : Discover and install ServiceNow Vault from Admin Home. Instances with a ServiceNow Vault entitlement show a ServiceNow Vault tile, where an administrator can install Vault Suite and then open the Vault Console from the Configuration Console. Vault onboarding email notification : Receive an email notification when ServiceNow Vault onboarding completes on your instance. | [ ] ## Changes Between your current release family and Brazil, some changes were made to existing ServiceNow Vault features. {#dfrn3-servicenowvault-summary__entry__14} | Release | Release notes | |-|-| | Australia | [Removed `security_admin` role from Vault console admin](https://www.servicenow.com/docs/access?context=vault-roles&family=australia&ft:locale=en-US) : The `security_admin` role has been removed from the roles required to elevate to and administer Vault Console. All administrative tasks including that of viewing tools metrics across the dashboard is now available to the `sn_vault_console.vault_console_admin` [ServiceNow Otto name change](https://www.servicenow.com/docs/access?context=now-assist-vault-landing&family=australia&ft:locale=en-US) : ServiceNow Otto introduced AI on the platform. As that experience has evolved, there's a new name for the experience. ServiceNow Otto® is the conversational AI platform integrated into ServiceNow workflows. It provides agentic capabilities, supports multimodal interactions across web, mobile, and messaging channels, and enables autonomous orchestration for cross-system workflows. [Default model provider for AI assets](https://www.servicenow.com/docs/access?context=exploring-large-language-models&family=australia&ft:locale=en-US) : The Now LLM Service is no longer the default model provider for new or inactive AI assets. A third-party LLM is now selected by default, while existing configurations using the Now LLM Service continue unchanged. The Now LLM Service is still available for manual selection. Azure OpenAI is the default model for all AI assets in ServiceNow Otto for Vault. | | Brazil | Vault onboarding email design : The Vault onboarding email uses an updated template design. [ServiceNow Otto name change](https://www.servicenow.com/docs/access?context=now-assist-vault-landing&family=brazil&ft:locale=en-US) : ServiceNow Otto introduced AI on the platform. As that experience has evolved, there's a new name for the experience. ServiceNow Otto® is the conversational AI platform integrated into ServiceNow workflows. It provides agentic capabilities, supports multimodal interactions across web, mobile, and messaging channels, and enables autonomous orchestration for cross-system workflows. Role masking in the Access Observer and Field Encryption workflows : The security_admin role is no longer used as the role masking agent for the Access Observer and Field Encryption agentic workflows. Following least-privilege principles, these workflows run without elevating to security_admin. Default policy naming : Default policies provisioned for field encryption, data privacy, Zero Trust Access, and Log Export Service are prefixed with Vault by Default, so you can distinguish policies that ServiceNow provisioned from policies your organization created. | [ ] ## Removed Between your current release family and Brazil, some ServiceNow Vault features or functionality were removed. {#dfrn3-servicenowvault-summary__entry__20} | Release | Release notes | |-|-| | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Deprecations Between your current release family and Brazil, some ServiceNow Vault features or functionality were deprecated. {#dfrn3-servicenowvault-summary__entry__26} | Release | Release notes | |-|-| | Australia | No updates for this release. | | Brazil | Now LLM Service : Starting with the September 2026 release, Gemma 4 joins our growing portfolio of open-weight models available through Now LLM Service. The latest industry advancements are available alongside sovereignty-focused options. All models are hosted and governed by ServiceNow with the same infrastructure and data protections. Older models will remain available for existing published AI skills, agents, and agentic workflows, but will no longer be available for new development or configuration. For details, see the [KB3066214: ServiceNow Otto Model Upgrades](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3066214) article in the Now Support Knowledge Base. | [ ] ## Activation information Review information on how to activate ServiceNow Vault. {#dfrn3-servicenowvault-summary__entry__32} | Release | Release notes | |-|-| | Australia | Activation information : Install Vault Console, ServiceNow Otto for Vault and Vault Suite by requesting them from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=australia&ft:locale=en-US). Important: ServiceNow Vault is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes. | | Brazil | Activation information : Install Vault Console, Vault Suite and ServiceNow Otto for Vault by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=brazil&ft:locale=en-US). Vault console is available for free installation, but a ServiceNow Vault subscription is required to access its full features. Note: ServiceNow Vault is available in the ServiceNow Store. For details, see the following activation information. | [ ] ## Additional requirements If any additional requirements were introduced or changed for ServiceNow Vault we have noted them here. {#dfrn3-servicenowvault-summary__entry__38} | Release | Release notes | |-|-| | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Browser requirements If any specific browser requirements were introduced or changed for ServiceNow Vault we have noted them here. {#dfrn3-servicenowvault-summary__entry__44} | Release | Release notes | |-|-| | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Accessibility information Review details on accessibility information for ServiceNow Vault, such as specific requirements or compliance levels. {#dfrn3-servicenowvault-summary__entry__50} | Release | Release notes | |-|-| | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Localization information If there are specific localization considerations for ServiceNow Vault we have noted them here. {#dfrn3-servicenowvault-summary__entry__56} | Release | Release notes | |-|-| | Australia | No updates for this release. | | Brazil | No updates for this release. | [ ] ## Highlight information If there are specific highlight considerations for ServiceNow Vault we have noted them here. {#dfrn3-servicenowvault-summary__entry__62} | Release | Release notes | |-|-| | Australia | [Australia Patch 5](https://www.servicenow.com/docs/access?context=australia-patch-5&family=australia&ft:locale=en-US) * The `security_admin` role no longer appears on the elevated roles list required for Vault Console administration. This change was made to conform with the principle of least privilege, ensuring administrators only elevate to roles they actually need. * Starting with [Australia Patch 5](https://www.servicenow.com/docs/access?context=australia-patch-5&family=australia&ft:locale=en-US), Now Assist for Vault is now ServiceNow Otto for Vault. Access AI-powered security capabilities within Vault Console with the [ServiceNow Otto for Vault](https://www.servicenow.com/docs/access?context=now-assist-vault-landing&family=australia&ft:locale=en-US) application. This change reflects the evolution of AI assistance features while existing entitlements remain unchanged. Check your entitlements to determine access to specific features. [Australia Patch 3](https://www.servicenow.com/docs/access?context=australia-patch-3&family=australia&ft:locale=en-US) * Receive the full value of your ServiceNow Vault subscription with the new Vault Suite, which installs the complete set of paid ServiceNow Vault capabilities, including Vault Console, Field Encryption, Zero Trust Access, Log Export Service, and Cloud Encryption, on entitled instances. * Begin exporting security and audit logs from your instance by default with a preconfigured Log Export Service topic and curated log sources. [Australia Patch 1](https://www.servicenow.com/docs/access?context=australia-patch-1&family=australia&ft:locale=en-US) * Enhance your security posture by securing the data in your custom applications with Ask Now Assist. * Surface sensitive data access by users automatically by leveraging Now Assist to configure, audit, and summarize your Access Observer logs. [Early availability](https://www.servicenow.com/docs/access?context=australia-all-other-fixes&family=australia&ft:locale=en-US) * Identify potential threats and data leaks using the new AI Insights section within the ServiceNow Vault console dashboard. * Use guided setup to begin autoclassifying sensitive data within your custom applications. See [ServiceNow Vault](https://www.servicenow.com/docs/access?context=servicenow-vault-landing&family=australia&ft:locale=en-US) for more information. | | Brazil | * Protect sensitive data across its entire life cycle by implementing encryption, data discovery, classification, anonymization, zero trust access, code signing, and log export from a unified console. * Accelerate deployment by installing the Vault Suite application to activate all data security capabilities within ServiceNow Vault automatically in a single step, eliminating manual plugin configuration. * Automate security administration tasks using AI capabilities provided by the ServiceNow Otto for Vault application to generate custom data patterns, recommend data classifications for applications, monitor data access, and secure custom applications * Gain visibility into your security posture with a centralized dashboard that track metrics across all Vault tools. * ServiceNow Vault is a bundle of the following products: * [ServiceNow Vault](https://www.servicenow.com/docs/access?context=servicenow-vault-landing&family=brazil&ft:locale=en-US) * [Data Discovery](https://www.servicenow.com/docs/access?context=data-discovery-landing&family=brazil&ft:locale=en-US) * [Data Privacy](https://www.servicenow.com/docs/access?context=data-privacy-landing&family=brazil&ft:locale=en-US) * [Zero Trust Access](https://www.servicenow.com/docs/access?context=session-access&family=brazil&ft:locale=en-US) * [Field Encryption](https://www.servicenow.com/docs/access?context=field-encryption&family=brazil&ft:locale=en-US) * [Code Signing](https://www.servicenow.com/docs/access?context=code-signing-landing&family=brazil&ft:locale=en-US) * [Log Export Service (LES)](https://www.servicenow.com/docs/access?context=les-intro&family=brazil&ft:locale=en-US) See [ServiceNow Vault](https://www.servicenow.com/docs/access?context=servicenow-vault-landing&family=brazil&ft:locale=en-US) for more information. | [ ]