This ServiceNow data sheet gives an executive overview of how the ServiceNow AI Platform is secured. Security is built into the platform foundation. ServiceNow protects the infrastructure with continuous monitoring and a global security team, and gives customers tools to manage security in their own instances under a shared responsibility model. The platform holds ISO/IEC certifications (27001 since 2012, 27017, 27018, 27701, 9001, 22301, and 42001 for AI management systems) and undergoes annual SOC 2 Type 2 audits. Its multi-instance architecture gives each customer a dedicated database with no commingling of data. Instances run on active-active site pairs across five continents, with failover in under two minutes, a two-hour recovery time objective, a one-hour recovery point objective, and AES-256 encrypted backups retained at least 14 days. Customers remain the data controller and choose their hosting region. Built-in protections include ServiceNow Security Center, the High Security Settings plugin, default multi-factor authentication for local logins, SSO options, TLS 1.2+ encryption in transit, Field Encryption Starter, Antivirus Protection, and SNC Access Control for approving or blocking support access. The optional Vault bundle adds Platform Encryption (Cloud Encryption and Field Encryption Enterprise), Data Privacy, Zero Trust Access, and Log Export Service for SIEM streaming. Transaction logs, event logs, and audit history support monitoring, alongside ServiceNow’s 24/7 global security operations.