---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Default data privacy configurations

# Default data privacy configurations {#ariaid-title1}

Release version: Brazil  
Updated November 5, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Data Privacy includes out-of-the-box default configurations that automatically activate for licensed Vault customers, providing immediate value without requiring setup. These configurations enable discovery of existing
sensitive data and real-time alerting and user logs for new sensitive data entries in specific fields.

The Vault by Default initiative solves a critical adoption challenge: licensed Vault customers often delay implementing data privacy protections because the setup process is time-consuming and requires configuration across multiple product modules. By providing intelligent default configurations, customers derive immediate value from Data Privacy upon Store App installation and license activation---before completing any manual setup.

## Default alerting policy {#default-data-privacy-configurations-overview__default-alerting-policy-desc}

The **default alerting policy** monitors new sensitive data entry in real-time:

* **When:** Activates automatically upon Data Privacy Store App installation for all licensed Vault customers.
* **What:** Detects seven sensitive data types: Email, Social Security Numbers, Dates of Birth, and four major credit card types (VISA, Discover, American Express, Mastercard).
* **Where:** Monitors Task table, Work_notes, and Comments fields.
* **How:** Generates real-time alerts to the users when the sensitive data is detected, without blocking submission. Alerts and user information are logged for administrators to refer to and take action.
* **Value:** Provides immediate visibility into sensitive data flows, enabling quick response and proactive user training

## Default discovery job {#default-data-privacy-configurations-overview__default-discovery-job-desc}

The default discovery job scans existing sensitive data on the instance automatically and sends an email notification to the admin

* **When:** Runs automatically for trial customers and new and existing licensed ServiceNow Vault customers.
* **What:** Scans 10,000 random records using predefined data patterns.
* **Where:** Targets the following tables and respective fields:
  * Incident (description, short_description, comments, work_notes, close_notes)
  * sc_req_item (via sc_item_option_mtom and question_answer)
  * sc_task (comments, work_notes)
  * sn_customer_service_case and interaction (comments, work_notes)
  * sn_hr_core_case and scoped children (comments, work_notes).
* **Frequency:** Runs only once.
* **Value:** Delivers an immediate baseline of sensitive data exposure, establishing the foundation for classification and data governance

## Related topics {#default-data-privacy-configurations-overview__section_related_topics}

For more information on individual default configurations, see:

* [Default data discovery job](https://www.servicenow.com/docs/Shss2d8y4B57wVbwov7VoQ "The Vault by Default data discovery job automatically runs on ServiceNow instances. It helps to identify sensitive data in primary sources, providing immediate value for trial and licensed Vault customers without requiring configuration.") --- Overview of the default discovery job that scans existing sensitive data.
* [Default alerting policy for sensitive data entry](https://www.servicenow.com/docs/0jpid1jPmrLOBbxtnb84Vg "The default alerting policy automatically detects sensitive data being entered into unstructured fields in real-time and alerts administrators, providing immediate visibility into sensitive data flows without requiring configuration.") --- Overview of the default alerting policy that monitors new sensitive data entry.

To learn how to work with these configurations, see the task topics within each feature overview.