Managing risk and compliance

Gain visibility into AI-related risks, compliance posture, and governance outcomes for your AI portfolio in AI Control Tower.

Get started

Explore Learn how Risk and Compliance views help you evaluate AI governance posture across your AI portfolio.	Configure Understand how Risk and Compliance visibility depends on the governance applications, frameworks, and data available in your environment.	Review risk posture Review aggregated risk posture and understand how inherent risk and control effectiveness affect residual risk.
Review regulatory classification and compliance status Understand regulatory acceptability and compliance posture for priority frameworks.	Reference Look up definitions for key Risk and Compliance terms, such as compliance score, regulatory risk classification, and control effectiveness.

Important:

• Not all model providers are available for customers with in-country SKUs, and some AI products/features are currently unavailable for in-country customers. For more information, see the KB1584492 article in the Now Support Knowledge Base. Be sure to check for model provider availability updates in future releases.
• Some AI products/features are currently unavailable for customers in the FedRAMP, NSC DOD IL5, or Australia IRAP-Protected data centers, self-hosted customers, or in other restricted environments. For more information, see the KB0743854 article in the Now Support Knowledge Base. Be sure to check for availability updates in future releases.
• Some AI products/features are currently available only for customers in some regions. Be sure to check for availability updates in future releases.
• Some AI products and skills are not available in Regulated Markets. For more information, see KB2593939: Regulated Markets AI Products/Skills Not Available. Be sure to check for availability updates in future releases.

Data processing

This application requires data to be transferred from ServiceNow customers' individual instances to a centralized ServiceNow environment, which may be located in a different data center region from the one where your instance is, and potentially to a third-party cloud provider, such as Microsoft Azure. This data is handled per ServiceNow's internal policies and procedures, including our policies available through our CORE Compliance Portal.

Data collection

ServiceNow collects and uses the inputs, outputs, and edits to outputs of this application to develop and improve ServiceNow technologies including ServiceNow models and AI products. Customers can opt out of future data collection at any time, as described in the Now Assist Opt-Out page.