---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Using Code Signing

# Using Code Signing {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Learn how to sign records, messages, and attachments to help verify the authenticity and integrity of your data.

[Sign the JDBC data source records in the protected instance](https://www.servicenow.com/docs/cf9ZykAkZgUFyKc5DB3lyQ#cs-jdbc "Use update sets to sign and validate the JDBC data sources by enabling the code signing in protected and trusted instances.")
:   Use update sets to sign and validate the JDBC data sources by enabling the code signing in protected and trusted instances.

[Sign the REST and SOAP messages in the production instance](https://www.servicenow.com/docs/qBqi~3wFLiS4n_22JbR3Mg "Use update sets to sign and validate the REST and SOAP messages by enabling the code signing in protected and trusted instances.")
:   Use update sets to sign and validate the REST and SOAP messages by enabling the code signing in protected and trusted instances.

[Sign the flows, subflows, and actions in the protected instance](https://www.servicenow.com/docs/8s61GPDAOBR05LV0bxvrdQ#cs-fdih "Use update sets to sign and validate the flows, subflows, and actions by enabling the Code Signing in protected and trusted instances.")
:   Use update sets to sign and validate the flows, subflows, and actions by enabling the Code Signing in protected and trusted instances.

[Sign specific records or attachments](https://www.servicenow.com/docs/cG4LLv8mMkeQt9jgD0gLQQ "Create a security job to sign specific records or attachments rather than all records or attachments on a table.")
:   Create a security job to sign specific records or attachments rather than all records or attachments on a table.

[Standalone signing tool](https://www.servicenow.com/docs/JAHhBf_kXaZ6U0RLyd4uog "Use the standalone Signing Tool to sign supported records in ServiceNow applications using your own private key.")
:   Use the standalone Signing Tool to sign supported records in ServiceNow applications using your own private key.

[Signature generation during source control commit](https://www.servicenow.com/docs/~mbQLDMlOB4umdYA0PNeTw "Generate Code Signing signatures automatically when you commit application files to source control from a trusted instance. The signatures are added to the same update set as their source records and are pushed to the remote repository together.")
:   Generate signatures automatically when you commit application files to source control from a trusted instance in ServiceNow Studio. The signatures are added to the same update set as their source records and pushed to the remote repository together.
* **[Standalone signing tool](https://www.servicenow.com/docs/JAHhBf_kXaZ6U0RLyd4uog)**   
  Use the standalone Signing Tool to sign supported records in ServiceNow applications using your own private key.
* **[Sign the JDBC data source records in the protected instance](https://www.servicenow.com/docs/cf9ZykAkZgUFyKc5DB3lyQ#cs-jdbc)**   
  Use update sets to sign and validate the JDBC data sources by enabling the code signing in protected and trusted instances.
* **[Sign the REST and SOAP messages in the production instance](https://www.servicenow.com/docs/qBqi~3wFLiS4n_22JbR3Mg)**   
  Use update sets to sign and validate the REST and SOAP messages by enabling the code signing in protected and trusted instances.
* **[Sign specific records or attachments](https://www.servicenow.com/docs/cG4LLv8mMkeQt9jgD0gLQQ#sign-specific-records)**   
  Create a security job to sign specific records or attachments rather than all records or attachments on a table.
* **[Signature generation during source control commit](https://www.servicenow.com/docs/~mbQLDMlOB4umdYA0PNeTw)**   
  Generate Code Signing signatures automatically when you commit application files to source control from a trusted instance. The signatures are added to the same update set as their source records and are pushed to the remote repository together.
* **[Sign the flows, subflows, and actions in the protected instance](https://www.servicenow.com/docs/8s61GPDAOBR05LV0bxvrdQ#cs-fdih)**   
  Use update sets to sign and validate the flows, subflows, and actions by enabling the Code Signing in protected and trusted instances.
* **[Signature Verification in Code Signing](https://www.servicenow.com/docs/qwo9~1Q5P7yk3DwLvKlVfg)**   
  Signature verification helps confirm that records, scripts, and other signed content originate from trusted sources and remain unaltered.