Every field is source-linked and dated.See the rubric behind the grades.

How we grade
Sovereign AI Registry
ExploreBlogGov accessCertsCountries

Footer

Sovereign AI Registry

The compliance registry for AI vendors. Data residency, training defaults, retention, subprocessors and EU AI Act posture — one row per vendor, product and deployment, every claim linked to its source.

Registry

  • Explore vendors
  • Deployment models
  • Categories
  • Countries

Compliance

  • Gov access exposure
  • EU AI Act roles
  • Certifications

Resources

  • FAQ
  • Methodology
Built with ShipMore·Build yours →

© 2026 Sovereign AI Registry. All rights reserved.

  1. Explore
  2. Now Assist / AI Agents (ServiceNow AI Platform)
NA

Now Assist / AI Agents (ServiceNow AI Platform)

Sovereignty grade C (53/100). EU region selectable; trains unless you opt out; self-hostable. ServiceNow, United States.

Category
saas-embedded
Certifications
C5FedRAMPISO 27001ISO 27017ISO 27018ISO 27701ISO 42001PCI DSSSOC 2 Type II
EU AI Act role
Deployer
Deployments
Hosted API
Categories
SaaS-embedded
Government access exposure
US CLOUD Act
Countries
United States

Details

Deployment
hosted
Hq Country
United States
Hq City
Santa Clara
Ownership
public
Founded
2004
Trust Center Url
www.servicenow.com/company/trust.html
Training Default
opt-out-clear
Residency Options
European Union (Commercial EMEA / SPP-EU regional deployment), United States, Other ServiceNow regional data centres
Gov Access Exposure
us-cloud-act
Eu Ai Act Role
deployer
Certs
ISO 42001, ISO 27001, ISO 27017, ISO 27018, ISO 27701, SOC 2 Type II, C5, FedRAMP, DoD IL5, IRAP, ENS, PCI DSS
DPA available
yes
Zero Retention Available
Yes
Self Host Option
Yes
Retention Default
Prompts and responses are processed transiently for inference and deleted from the processing environment afterwards; ServiceNow's authoritative data-handling FAQs (Overview of Advanced AI & Data Products, Data Processing for Advanced AI & Data Products) require a Support login to read, so the public record is a summary rather than the policy.
Retention Exceptions
An optional data-sharing programme for model improvement exists, controlled by an opt-out in the Now Assist Admin Console / AI Control Tower; ServiceNow states shared prompts and responses are masked and anonymised first. From 2026-07-09 the out-of-the-box default model provider switches from ServiceNow's own Now LLM Service to third-party providers (Azure OpenAI, AWS Claude, Google Gemini).
Subprocessors
Microsoft Corporation (Azure OpenAI), Amazon Web Services, Inc. (Claude via Bedrock), Google LLC (Gemini)
Subprocessor Count
3
Transfer Mechanism
sccs+dpf
Eu Procurement Ready
conditional
Eu Procurement Reason
ServiceNow is the only row in this category with a published self-host path for the AI itself — on-premises customers can be whitelisted to download the Now Assist images and model files and run them in their own AWS, GCP or Azure account, which is a real exit route the rest of the category does not offer. Against that: from 2026-07-09 the out-of-the-box default model provider moves from ServiceNow's own Now LLM Service to third-party US providers, ServiceNow actively recommends customers migrate off Now LLM, the model-improvement data-sharing programme is governed by an opt-out rather than an opt-in, and the authoritative data-handling documentation sits behind a Support login.
Last Policy Change
2026-07-09T00:00:00.000Z
Change Summary
Third-party model providers (Azure OpenAI, AWS Claude, Google Gemini) began rolling out as the default for out-of-the-box Now Assist skills and AI agents, replacing ServiceNow's own Now LLM Service; ServiceNow recommends customers get a third-party provider approved and migrate custom skills off Now LLM.
Prior Value
ServiceNow's in-house Now LLM Service was the out-of-the-box default model provider for Now Assist skills and agents.
Training Evidence Url
www.servicenow.com/community/now-assist-articles/now-assist-responsible-ai-data-handling-amp-security/ta-p/2794374
Training Claim Basis
stated
Training Confidence
medium
Residency Evidence Url
www.servicenow.com/community/now-assist-articles/model-provider-flexibility-servicenow-integrated-model-providers/ta-p/3334951
Residency Claim Basis
stated
Residency Confidence
medium
Retention Evidence Url
www.servicenow.com/community/now-assist-articles/sensitive-data-and-advanced-ai-products-faqs/ta-p/3200663
Retention Claim Basis
inferred
Retention Confidence
medium
Subprocessors Evidence Url
www.servicenow.com/community/now-assist-articles/third-party-model-providers-are-becoming-the-default-for-now/ta-p/3560810
Subprocessors Claim Basis
stated
Subprocessors Confidence
medium
Residency Class
eu-selectable
Portability / Exit Path
proprietary-only
Subprocessor Jurisdiction
non-eu
Underlying model providers
ServiceNow (Now LLM Service), Microsoft (Azure OpenAI), Anthropic (AWS Claude), Google (Gemini)
At a glance
Governance Grade
C
Governance Score
53
EC SOV-2 Legal & Jurisdictional (0-4)
1
EC SOV-3 Data & AI (0-4)
2
Website

Similar

Read AI · Sep 2026

RARead AI meeting assistant

Sovereignty grade F (24/100). No EU residency. Read AI, United States.

meeting-ai
Governance Grade
F
Fathom · Aug 2026

FAFathom AI notetaker

Sovereignty grade D (35/100). No EU residency. Fathom, United States.

meeting-ai
Governance Grade
D
Granola · Sep 2026

GAGranola AI notepad

Sovereignty grade D (30/100). No EU residency. Granola, United States.

meeting-ai
Governance Grade
D

More Certifications

  • SOC 2 Type II46
  • ISO 2700136
  • ISO 4200113
  • ISO 270177
  • ISO 277017
  • ISO 270186
  • HDS5
  • HIPAA4
  • CSA STAR4
  • C54
  • ISO 90013
  • PCI DSS3
  • FedRAMP High3
  • ISO 27001:20223
  • SOC 2 (type unverified)2
  • ISO 500012
  • BSI C52
  • SOC 32
  • FedRAMP2
  • GDPR2
  • CSA STAR Level 12

More EU AI Act role

  • Deployer59
  • General-purpose AI (GPAI)10
  • provider9
  • GPAI with systemic risk5

More Deployments

  • Hosted API68
  • Self-hosted weights6
  • On-premise6
  • Private VPC2

More Categories

  • Coding assistant15
  • meeting-ai13
  • Sovereign host13
  • Inference host13
  • SaaS-embedded11
  • Foundation model11
  • Cloud platform7

More Government access exposure

  • US CLOUD Act44
  • No non-EU government access27
  • Mixed jurisdiction9
  • PRC National Intelligence Law2

More Countries

  • United States45
  • Germany9
  • France7
  • Switzerland5
  • Singapore3
  • Israel2
  • United Kingdom2
  • China2
  • Netherlands2