AI Risk and Compliance release notes
Summarize
Summarized using AI
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.
Summary of AI Risk and Compliance release notes
The ServiceNow® AI Risk and Compliance application empowers organizations to ethically manage AI capabilities, mitigate AI risks, and ensure regulatory compliance. The Australia release introduces significant enhancements that improve governance, risk assessment, reporting, and lifecycle management of AI assets.
Show less
Key Features
- Risk-based Classification at Intake: Classify AI systems early using a configured Risk Assessment Methodology (RAM) to capture risk context and enable consistent governance decisions throughout the AI system lifecycle.
- Anonymous AI Case Reporting: Employees can submit AI risk concerns anonymously via the Employee Center’s Anonymous Reporting Center, promoting wider participation in AI governance and earlier risk identification.
- AI Asset Offboarding: Structured lifecycle tasks support governance activities such as risk assessments, impact reviews, and audit documentation when retiring or replacing AI models or datasets.
- Smart Assessment Template Versioning: Manage assessment templates with version control to maintain consistent governance; new versions are auto-created upon edits, with prior versions retired upon publishing.
- Enhanced UI and Contextual Information: New “Use and Purpose” sections on AI use case request forms and AI system records capture operational context and support automated risk classification and impact assessment auto-population.
- Improved Assessment Visibility: Task and work queue lists now display related AI entities and controls directly, enabling quick identification of assessment scope without opening individual records.
- Expanded Regulatory Framework Content: Additional authority documents, agency mappings, and citations for the Transparency in Frontier AI Act and Colorado AI Act are included in the AI Risk and Compliance content pack, allowing cross-framework regulatory coverage assessment.
Activation and Integration
AI Risk and Compliance is available for installation via the ServiceNow Store. It integrates effectively with the AI Control Tower application for comprehensive AI asset inventory and lifecycle management.
Benefits for ServiceNow Customers
- Enables early and consistent risk classification to align AI governance with regulatory and internal policies.
- Facilitates anonymous reporting to improve risk visibility and employee engagement in AI oversight.
- Supports structured offboarding processes to ensure governance completeness when AI assets are retired.
- Enhances assessment workflows through template versioning and contextual data synchronization, reducing manual effort and improving accuracy.
- Provides richer regulatory content to simplify compliance tracking across multiple frameworks.
The ServiceNow® AI Risk and Compliance application helps you to manage your AI capabilities ethically, mitigate AI risks, and maintain compliance. AI Risk and Compliance was enhanced and updated in the Australia release.
AI Risk and Compliance highlights for the Australia release
- Classify AI systems based on regulatory risk at intake by applying a configured Risk Assessment Methodology (RAM), enabling early risk identification and consistent AI governance decisions across the system life cycle.
- Submit AI cases anonymously to report potential AI risks or concerns without disclosing your identity, helping improve early risk visibility and participation in AI governance.
- Offboard AI assets with structured life-cycle tasks to support completion of governance and risk activities when systems are retired or replaced.
See AI Risk and Compliance for more information.
Important:
AI Risk and Compliance is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes.
New in the AI Risk and Compliance release
- Risk‑based classification during intake
- After upgrading to version 22.0.3, if you have the AI risk and compliance business user [sn_grc_ai_gov.ai_risk_and_compliance_business_user] role, you can now classify AI systems using a risk‑based approach at intake, enabling organizations to capture AI risk context early and align governance workflows with regulatory and internal risk requirements. This improvement to the AI use case request form supports more accurate AI oversight throughout the system life cycle.
- Report an AI case anonymously
- After upgrading to version 22.0.3, if you have the AI Case Management (sn_ai_case_mgmt) application installed and the AI case business user [sn_ai_case_mgmt.ai_case_business_user] role, you can navigate to the Employee Center to access the Anonymous Reporting Center and submit AI cases anonymously, enabling broader participation in AI governance while protecting the identity of reporters. No additional role is required to submit an anonymous report directly through the Anonymous Reporting Center. Broader participation helps organizations identify potential AI risks earlier by removing barriers to case submission.
- Offboard AI models and datasets
- After upgrading to version 22.0.3, if you have the AI risk and compliance analyst [sn_grc_ai_gov.ai_risk_and_compliance_analyst] or AI risk and compliance manager [sn_grc_ai_gov.ai_risk_and_compliance_manager] role you can manage AI asset offboarding life cycle tasks. Managing these tasks supports completion of governance-related activities, such as risk and impact assessments, conformity reviews, issue closure, and audit documentation, when an AI asset is retired or removed from active use.
UI changes
- Operations tab
- On the Operations tab in the AI Risk and Compliance Workspace, the AI systems by state section includes an Offboard state to track AI systems in retirement or offboarding and the AI systems by department section now supports grouping by Risk classification from the Show by drop-down list to view the distribution of AI systems in each department.
- AI use case request form
- A Use and Purpose section containing screening questions has been added to the AI use case request form to capture contextual information about how an AI system will be used and supports automated risk‑based classification during submission.
- AI system record page
- A Use and Purpose section has been added to the AI system record page, which you can access from the AI asset inventory list in the AI Risk and Compliance Workspace.
- Anonymous AI case reporting
- A Visit Anonymous Reporting Center card is available in the Support resources section of the AI assets page in the Employee Center, enabling you to navigate to the Anonymous Reporting Center to submit an anonymous AI case.
Changed in this release
Activation information
Install AI Risk and Compliance by requesting it from the ServiceNow Store. Visit the ServiceNow Store to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.