Workflow & Automation · servicenow.comServiceNow Now Assist
Graded against 804 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
“(2) High-Risk Use terms located at [https://www.microsoft.com/licensing/terms/product/ForOnlineServices/all](https://www.microsoft.com/licensing/terms/product/ForOnlineServices/all), (3) Extracting Data and Use of Content for Training located at”
Partially verified: Terms of Service assessed · Privacy Policy pending. Everything below comes only from what was read in full.
Watch: Moderation and enforcement
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
This segment imposes restrictions on Customer's disclosure of benchmark test results (must include replication information), prohibits use of Advanced AI and Data Products for services directed at individuals under 18, and prohibits use for clinical purposes, restricting the permissible scope of commercial deployment.
This segment imposes obligations regarding the transfer of Customer Data to a Centralized ServiceNow Environment potentially hosted in a different Data Center Region, applies existing security and data protection obligations to that environment, and carves out exceptions for certifications/attestations/penetration testing conducted by Customer, directly governing how data is shared across infrastructure.
This segment imposes obligations on ServiceNow to establish and maintain ISO 27001 certification for the AI Security Program, potentially add ISO 27018, apply logical separation and encryption at rest for Filtered AI Content, and conduct penetration testing, establishing security and compliance obligations for AI training data handling.
Scores derived from 10 enriched findings — same verbatim citations as below. AI-generated, not legal advice.
- ServiceNow Now Assist's training terms are conditional — check the tier, opt-out, and enterprise exceptions before relying on protection.
- Output ownership has conditions — review the commercial use and license carve-outs before building on these outputs.
Derived from AI-enriched analysis of the verified findings below — informational only, not legal advice.
How to read this page: Overall risk rates what ServiceNow Now Assist's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Policy benchmark
rubric v1.0 — how this is scoredBased on 41 verified, verbatim-cited findings below — read the citations.
Based on 36 verified, verbatim-cited findings below — read the citations.
Automated assessment against a published rubric — not legal advice.
Partially verified — Privacy Policy — Capture pending; Terms of Service — Verified (read in full, 19 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Held for review
A core policy document failed verification or contains contested evidence that must not be treated as fully verified.
- Privacy PolicyCapture pendingstatic-revalidated
- Terms of ServiceVerified - read in full - 19 citationsPDF · 8 pagespdf textLast captured 2026-08-12
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
This segment imposes an obligation on Government Customers to immediately discontinue use of products where the Product-Specific Terms do not meet government requirements or conflict with applicable law or regulations, and requires the Government Customer to make representations about compliance, constituting an enforcement and compliance condition.
"1.4. Government Customer. If Customer is an agency or department of the federal, state, or local government or is using any of the products, features, or Subscription Service on behalf of the U.S. Government or other government organization..."
This segment imposes a dual obligation on the Customer: first, to implement and maintain appropriate safeguards protecting the security, confidentiality, and integrity of Vulnerability Data; and second, to promptly notify ServiceNow upon awareness or reasonable suspicion of misappropriation, destruction, loss, alteration, or unauthorized disclosure of such data, establishing both a protective duty and a breach-notification duty. The segment also begins a conditional provision applicable to US federal government customers, indicating a tier or jurisdictional exception.
"4.3.1. Customer will implement and maintain appropriate safeguards designed to protect the security, confidentiality, and integrity of Vulnerability Data within its control. Customer will promptly notify ServiceNow if it becomes aware or re..."
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
"2.9.2.1. Customer may publicly disclose the results of any benchmark tests of the Advanced AI and Data Products (each a “Test”) only if the public disclosure includes all necessary information to replicate the Test. 2.9.2.2. Customer may not use the Advanced AI and Data Products as part of a website, application, or other online service that is directed towards or is likely to be accessed by individuals under the age of 18. 2.9.2.3. Customer may not use the Advanced AI and Data Products for clinical purposes (for clarity, non-clinical research, scheduling, or other administrative tasks are not restricted), as a substitute for professional medical advice, or in any manner that is overseen by or requires clearance or approval from any applicable regulatory authority. 2.9.3. Anthropic on AWS AI Product Terms. Use of Advanced AI and Data Products that utilize Anthropic generative artificial intelligence models made available through Amazon Web Services, Inc. (“AWS”) requires Customer’s compliance with: (1) AWS Responsible AI Policy located at [https://aws.amazon.com/ai/responsible-](https://aws.amazon.com/ai/responsible-) ai/policy/, (2) Anthropic Usage Policy located at [https://www.anthropic.com/legal/aup](https://www.anthropic.com/legal/aup), (3) other such terms that AWS or Anthropic may identify as applicable to the use of Anthropic artificial intelligence products made available through AWS; and (4) these additional terms: 2.9.3.1. "
This segment imposes restrictions on Customer's disclosure of benchmark test results (must include replication information), prohibits use of Advanced AI and Data Products for services directed at individuals under 18, and prohibits use for clinical purposes, restricting the permissible scope of commercial deployment.
AI-generated interpretation, not legal advice.
"If Customer performs or discloses any benchmarks or comparative tests or evaluations (each, a “Benchmark”) of the Advanced AI and Data Products, or directs or permits any third party to perform or disclose, any Benchmark of any of the Advanced AI and Data Products, Customer will include in any such disclosure, and may be required to disclose to AWS, all information necessary to replicate such Benchmark. 2.9.3.2. AWS may use automated abuse detection mechanisms designed to detect harmful content, including related to potential violations of AWS or Anthropic terms of service or acceptable use policies. If these mechanisms detect apparent child sexual abuse material, Customer agrees and instructs that AWS may report the incident to the National Center for Missing and Exploited Children or other authority. © 2026 ServiceNow, Inc. All rights reserved. ServiceNow, the ServiceNow logo, Now, Now Platform, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc. in the United States and/or other countries. Other company and product names may be trademarks of the respective companies with which they are associated."
This segment imposes an obligation on Customer to include all information necessary to replicate benchmarks in any public disclosure and potentially to disclose such information to AWS, and notes AWS may use automated abuse detection mechanisms, governing benchmark transparency and third-party moderation enforcement obligations.
AI-generated interpretation, not legal advice.
"1.4. Government Customer. If Customer is an agency or department of the federal, state, or local government or is using any of the products, features, or Subscription Service on behalf of the U.S. Government or other government organization (collectively “Government Customer”) and these Product-Specific Terms do not meet Government Customer’s requirements or are inconsistent with applicable law, regulations or Government Customer’s contract terms, Government Customer must immediately discontinue its use of the applicable product, feature, or Subscription Service. Government Customer represents and warrants that it has the authority and capacity to accept these Product-Specific Terms and to bind the Government Customer. These Product-Specific Terms will control to the extent of any conflict with other terms of service applicable to usage of ServiceNow’s products, features, or Subscription Service. Government Customers are solely responsible to confirm with the agency’s Ethics Office or its authorized representative that acceptance and usage of the products, features, or Subscription Service is permissible. 1.5. Commercial Availability. If a Subscription Service identified in these Product-Specific Terms is provided to Customer prior to general commercial availability, Customer’s access and use of such Subscription Service will terminate on the earlier of: (a) the termination date specified by ServiceNow in a written communication provided to Customer (including via email); (b) the date the Subscription Service becomes commercially available; or (c) the termination of the Agreement. Notwithstanding the foregoing, ServiceNow may extend such access in its sole discretion."
This segment imposes an obligation on Government Customers to immediately discontinue use of products where the Product-Specific Terms do not meet government requirements or conflict with applicable law or regulations, and requires the Government Customer to make representations about compliance, constituting an enforcement and compliance condition.
AI-generated interpretation, not legal advice.
"4.3.1. Customer will implement and maintain appropriate safeguards designed to protect the security, confidentiality, and integrity of Vulnerability Data within its control. Customer will promptly notify ServiceNow if it becomes aware or reasonably suspects that any Vulnerability Data has been subject to misappropriation, accidental or unlawful destruction, loss, alteration, or unauthorized disclosure or access that compromises the security, confidentiality, or integrity of such information. 4.3.2. If Customer is an agency or department of the United States federal government, then Customer may only obtain the Vulnerability Data through the ServiceNow- provided software solution that provides a graphical user interface that allows authorized users to interact with the Warning Products through queries (the “Front **End”). The Warning Products and Vulnerability Data may not be shared with other** agencies, foreign governments, or third-party contractors without explicit written authorization from ServiceNow. Customer understands and agrees that DFARS 252.227-7013 and FAR 52.227-14 do not apply because the Warning Products and Vulnerability Data are commercial items under FAR 2.101. © 2026 ServiceNow, Inc. All rights reserved. ServiceNow, the ServiceNow logo, Now, Now Platform, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc. in the United States and/or other countries. Other company and product names may be trademarks of the respective companies with which they are associated."
This segment imposes a dual obligation on the Customer: first, to implement and maintain appropriate safeguards protecting the security, confidentiality, and integrity of Vulnerability Data; and second, to promptly notify ServiceNow upon awareness or reasonable suspicion of misappropriation, destruction, loss, alteration, or unauthorized disclosure of such data, establishing both a protective duty and a breach-notification duty. The segment also begins a conditional provision applicable to US federal government customers, indicating a tier or jurisdictional exception.
AI-generated interpretation, not legal advice.
"1.1. Centralized ServiceNow Environment. Customer Data may be transferred outside of Customer’s ServiceNow instance to a centralized ServiceNow environment, which may be hosted in a different Data Center Region from Customer’s originating ServiceNow instance (“Centralized ServiceNow Environment”). The relevant terms set forth in the Agreement pertaining to ServiceNow’s security and data protection program will apply to the Centralized ServiceNow Environment, except for any terms relating to certifications, attestations, and penetration testing conducted by Customer. Notwithstanding the foregoing, ServiceNow will make available a SOC 2 Type 2 attestation and a penetration test summary report applicable to Customer Data processing by Advanced AI and Data Products in the Centralized ServiceNow Environment."
This segment imposes obligations regarding the transfer of Customer Data to a Centralized ServiceNow Environment potentially hosted in a different Data Center Region, applies existing security and data protection obligations to that environment, and carves out exceptions for certifications/attestations/penetration testing conducted by Customer, directly governing how data is shared across infrastructure.
AI-generated interpretation, not legal advice.
"2.5.2. Certifications. ServiceNow will establish and maintain an ISO27001 certification for the AI Security Program. In addition, ServiceNow may establish additional certifications in the future, which may include an ISO 27018 certification. 2.5.3. Data Separation & Encryption at Rest. ServiceNow may, but is not obligated to, apply a logical separation of Filtered AI Content, except that ServiceNow will deploy standard technologies to encrypt data at rest. 2.5.4. Penetration Testing. ServiceNow will conduct penetration testing in accordance with ServiceNow’s standard security procedures. However, because Filtered AI Content will be used within a ServiceNow controlled environment, Customer will not be permitted to perform penetration testing on the environment and no reporting will be provided. 2.6. Necessary Rights and Privacy Obligations. Customer agrees that it has all rights necessary to use the Advanced AI and Data Products, including rights to the data Customer submits to any Advanced AI and Data Products. Customer is solely responsible for providing any legally adequate notices to and obtaining any consents from individuals and all third parties for ServiceNow to perform its rights and obligations under these Product-Specific Terms. 2.7. Acceptable Use. Customer's use of Advanced AI and Data Products is subject to ServiceNow’s AI Acceptable Use Policy, currently available at [https://www.servicenow.com/ai-acceptable-use-policy.html](https://www.servicenow.com/ai-acceptable-use-policy.html) (the "AUP"), as updated by ServiceNow from time to time. "
This segment imposes obligations on ServiceNow to establish and maintain ISO 27001 certification for the AI Security Program, potentially add ISO 27018, apply logical separation and encryption at rest for Filtered AI Content, and conduct penetration testing, establishing security and compliance obligations for AI training data handling.
AI-generated interpretation, not legal advice.
"(2) High-Risk Use terms located at [https://www.microsoft.com/licensing/terms/product/ForOnlineServices/all](https://www.microsoft.com/licensing/terms/product/ForOnlineServices/all), (3) Extracting Data and Use of Content for Training located at"
This segment incorporates by reference Microsoft's High-Risk Use terms and 'Extracting Data and Use of Content for Training' terms applicable to Azure AI Services, which directly govern how data may be used for training purposes when Microsoft-based AI services are utilized.
AI-generated interpretation, not legal advice.
"[https://www.microsoft.com/licensing/terms/product/ForOnlineServices/all](https://www.microsoft.com/licensing/terms/product/ForOnlineServices/all), and (4) other such terms that Microsoft may identify as applicable to Azure AI Services."
This segment incorporates by reference additional Microsoft terms for Azure AI Services including terms on 'Extracting Data and Use of Content for Training,' binding Customer to third-party training data use restrictions when using Microsoft-based AI features.
AI-generated interpretation, not legal advice.
"Customer’s hardware environment (such database, along with any other data or software code obtained through use of Warning Products, the “Vulnerability Data”). Notwithstanding anything to the contrary in the Agreement, Customer may not make available any Warning Product or Vulnerability Data to any Affiliate or Service Provider."
This segment defines 'Vulnerability Data' as data obtained through Warning Products and restricts Customer from making Warning Products or Vulnerability Data available to any Affiliate or Service Provider, directly restricting disclosure and sharing of sensitive security data.
AI-generated interpretation, not legal advice.
"2.3. EU Hosting. Customer Data Processed by ServiceNow and its Sub-processors as part of the provision of an Advanced AI and Data Product to the Customer which originate from Customer instances located within the European Union will remain hosted within the European Union except to the extent: (1) authorized by Customer in advance; (2) necessary to prevent or remediate a material issue involving security, data loss prevention, disaster recovery, or critical maintenance or service availability; (3) required by Law or to prevent fraud or abuse; or (4) documented in a Support Portal interaction (by or on behalf of Customer). The foregoing commitment does not supersede or modify those contractual terms applicable to certain ServiceNow products or services that require transfers of Customer Data to outside of the EU to use such products or services, nor will it apply to any third-party integrations or services utilized or configured by Customer that may transfer Customer Data to outside of the EU. Customer also acknowledges and agrees that the foregoing commitment does not apply to information provided to ServiceNow in respect of which ServiceNow is a data controller (e.g., marketing, billing, and account management data). 2.4. Ownership. Customer retains all ownership of Customer Data that is processed by the Advanced AI and Data Products. To the extent permitted by law and excluding any ServiceNow Core Technology, Customer owns the Generated Outputs. "
This segment restricts the transfer of Customer Data processed as part of Advanced AI and Data Products originating from EU-hosted instances, requiring that data remain hosted within the European Union except in enumerated circumstances, establishing EU data residency obligations and exceptions.
AI-generated interpretation, not legal advice.
"standard, which govern the processing, storage, transmission and security of Filtered AI Content (the “AI Security Program”)."
This segment defines the 'AI Security Program' as the standards governing processing, storage, transmission, and security of Filtered AI Content, establishing the definitional framework for the security obligations applicable to that data.
AI-generated interpretation, not legal advice.
"2.9.2. Gemini on Vertex AI Platform Terms. Use of Advanced AI and Data Products that utilize Gemini on Google’s Vertex AI Platform requires Customer’s compliance with: (1) Generative AI Prohibited Use Policy located at [https://policies.google.com/terms/generative-ai/use-policy](https://policies.google.com/terms/generative-ai/use-policy), (2) Google Cloud Platform Acceptable Use Policy located at [https://cloud.google.com/terms/aup](https://cloud.google.com/terms/aup),"
This segment incorporates by reference Google's Generative AI Prohibited Use Policy and Google Cloud Platform Acceptable Use Policy as conditions of using Advanced AI and Data Products that utilize Gemini on Vertex AI, binding Customer to third-party acceptable use and moderation standards.
AI-generated interpretation, not legal advice.
" of the Advanced AI and Data Products breaches the Agreement."
This segment is a continuation of the indemnity/defense of claims clause for Advanced AI and Data Products, conditioning indemnity obligations on whether Customer's use of the products breaches the Agreement, directly allocating liability and indemnification rights.
AI-generated interpretation, not legal advice.
"3.3. Moveworks Products require implementation services for proper configuration, which must be procured from either ServiceNow or a qualified implementation partner."
This segment imposes an obligation that Moveworks Products require implementation services for proper configuration, which must be procured from ServiceNow or a qualified implementation partner, restricting how the product may be commercially deployed and operated.
AI-generated interpretation, not legal advice.
"4.2.2. Customer acknowledges that Collectors are physical hardware items that may require an export license prior to shipment to certain jurisdictions. Customer will obtain any required export licenses or authorizations before exporting, re- exporting, or transferring any Collector to any country, entity, or individual. 4.2.3. Customer will use and maintain Collectors in good working order in accordance with the Documentation, at the locations agreed to by the parties, so as to enable proper usage and operation of the Armis Products. 4.2.4. Upon termination or expiration of the Agreement or applicable Order Form: (i) Customer will immediately and permanently delete all Collector Technology installed on Customer’s hardware devices; (ii) Customer will ensure that all Collectors remain connected to the internet for 7 days following the termination to enable ServiceNow to permanently delete the Collector Technology remotely; and (iii) Customer will return the Collectors to ServiceNow in accordance with ServiceNow’s then-current instructions. 4.3. Intelligence Center and Early Warning Products. Certain Armis Products, including Intelligence Center and Early Warning (such products, the “Warning Products”), provide Customer with access to a database of potential security vulnerabilities in © 2026 ServiceNow, Inc. All rights reserved. ServiceNow, the ServiceNow logo, Now, Now Platform, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc. "
This segment imposes obligations on Customer to obtain required export licenses before transferring Collectors to restricted jurisdictions, to maintain Collectors in good working order per Documentation, and to return or properly handle Collectors upon termination or expiration of the Agreement, governing physical hardware compliance and end-of-term obligations.
AI-generated interpretation, not legal advice.
"Customer shall ensure that each of its authorized users complies with the AUP. 2.8. Integration Hub. Advanced AI and Data Products may consume Integration Hub transactions. Integration Hub transactions are licensed through Integration Hub or Automation Engine packages. An Integration Hub Transaction is defined as any outbound call originating from Integration Hub, Flow Designer, Remote Tables and/or Orchestration. This includes any operation, action, orchestration from Integration Hub, Remote Tables or Orchestration resulting in an outbound call. Additional annual Transactions require the purchase of a separate Integration Hub package. 2.9. Third Party AI-Specific Terms. Customer’s use of any third-party machine learning or artificial intelligence in Advanced AI and Data Products is subject to the additional terms below: 2.9.1. Azure AI Terms. Use of Advanced AI and Data Products that utilize the Azure AI Service is subject to Microsoft terms applicable to the Azure AI Service: (1) Code of Conduct for the Azure OpenAI Service located at [https://learn.microsoft.com/en-us/legal/cognitive-services/openai/code-of-conduct](https://learn.microsoft.com/en-us/legal/cognitive-services/openai/code-of-conduct),"
This segment imposes an obligation on Customer to ensure its authorized users comply with the AUP for Advanced AI and Data Products, and defines Integration Hub transaction licensing requirements including that additional transactions require purchase, governing commercial use conditions and compliance obligations.
AI-generated interpretation, not legal advice.
"qualified professional."
This segment is a continuation of the disclaimer that AI Outputs are not a substitute for advice from a qualified professional, reinforcing the limitation on reliance on AI-generated content.
AI-generated interpretation, not legal advice.
"2.9.3.3. Advanced AI and Data Products are not intended for use in, or in association with, the operation of any hazardous environments or critical systems that may lead to serious bodily injury or death or cause environmental or property damage. Advanced AI and Data Products are not medical devices and are not intended to be used without human oversight for any clinical decision-making or other clinical use. Customer is responsible for liability that may arise in connection with any such use 2.10. Defense of Claims and Indemnity for Advanced AI and Data Products. 2.10.1. Subject to the conditions, limitations, and processes set forth in the Defense Obligations of the Agreement and this Section 2.10, ServiceNow will (1) defend Customer and Customer Affiliates against any IPR Claim to the extent alleging that Generated Output directly infringes any third-party's copyright; and (2) pay any settlement amount or court-ordered damages finally awarded to the extent arising from such IPR Claim. 2.10.2. In addition to the limitations set forth in the Defense Obligations of the Agreement, Section 2.10.1 does not apply where: (1) Customer knew or should have known the relevant Generated Output was infringing or likely infringing; (2) Customer interfered with, circumvented, or failed to use relevant citations, filters, instructions, or other safety features ServiceNow makes available for use in connection with the Advanced AI and Data Products; (3) the IPR Claim arises from Customer’s use of the relevant Generated Output after Customer received notice of alleged infringement related to such Generated Output; (4) the Generated Output was modified or used in combination with materials not provided by ServiceNow, where such materials give rise to the IPR Claim; or (5) Customer’s use"
This segment disclaims that Advanced AI and Data Products are not intended for hazardous or critical systems use, are not medical devices, and are not for unsupervised clinical decision-making, and assigns liability for any such use to Customer, establishing a liability allocation and disclaimer regarding high-risk use scenarios.
AI-generated interpretation, not legal advice.
Common questions about ServiceNow Now Assist's policies
- Does ServiceNow Now Assist train its AI models on your data?
- No training on your content by default — based on 1 verified finding from ServiceNow Now Assist's published policy. Informational only, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from ServiceNow Now Assist's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
2 verified clausesClauses in ServiceNow Now Assist's policies that work in your favour — commitments the platform made to you.
- Indemnity & liabilityindemnity direction
“2.9.3.3. Advanced AI and Data Products are not intended for use in, or in association with, the operation of any hazardous environments or critical systems that may lead to serious bodily injury or death or cause environmental or property damage. Advanced AI a…”
This segment disclaims that Advanced AI and Data Products are not intended for hazardous or critical systems use, are not medical devices, and are not for unsupervised clinical decision-making, and assigns liability for…
Location: exact-text link only — source has no section structureJump to exact text → - Audit rights, DPA & residency
“2.3. EU Hosting. Customer Data Processed by ServiceNow and its Sub-processors as part of the provision of an Advanced AI and Data Product to the Customer which originate from Customer instances located within the European Union will remain hosted within the Eu…”
This segment restricts the transfer of Customer Data processed as part of Advanced AI and Data Products originating from EU-hosted instances, requiring that data remain hosted within the European Union except in enumerat…
Location: exact-text link only — source has no section structureJump to exact text →
📋 Rules you must follow
3 verified clausesWhat ServiceNow Now Assist requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
- Moderation & enforcement
“4.2.2. Customer acknowledges that Collectors are physical hardware items that may require an export license prior to shipment to certain jurisdictions. Customer will obtain any required export licenses or authorizations before exporting, re- exporting, or tran…”
This segment imposes obligations on Customer to obtain required export licenses before transferring Collectors to restricted jurisdictions, to maintain Collectors in good working order per Documentation, and to return or…
Location: exact-text link only — source has no section structureJump to exact text → - Moderation & enforcement
“2.9.2.1. Customer may publicly disclose the results of any benchmark tests of the Advanced AI and Data Products (each a “Test”) only if the public disclosure includes all necessary information to replicate the Test. 2.9.2.2. Customer may not use the Advanced A…”
This segment imposes restrictions on Customer's disclosure of benchmark test results (must include replication information), prohibits use of Advanced AI and Data Products for services directed at individuals under 18, a…
Location: exact-text link only — source has no section structureJump to exact text → - Moderation & enforcementconduct restrictions
“Customer’s hardware environment (such database, along with any other data or software code obtained through use of Warning Products, the “Vulnerability Data”). Notwithstanding anything to the contrary in the Agreement, Customer may not make available any Warni…”
This segment defines 'Vulnerability Data' as data obtained through Warning Products and restricts Customer from making Warning Products or Vulnerability Data available to any Affiliate or Service Provider, directly restr…
Location: exact-text link only — source has no section structureJump to exact text →
What the policies actually cover
2 topics- Indemnity direction1 protective1 clause
- Conduct restrictions1 obligation1 clause
17 further verified clauses are cited on this page but not yet assigned a topic.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause provides a deletion or time-bounded retention path.
“4.2.2. Customer acknowledges that Collectors are physical hardware items that may require an export license prior to shipment to certain jurisdictions. Customer will obtain any required export licenses or authorizations before exporting, re- exporting, or transferring any Collector to any country, entity, or individual. 4.2.3. Customer will use and maintain Collectors in good working order in accordance with the D...”Open source citation
The clause provides a deletion or time-bounded retention path.
“4.2.2. Customer acknowledges that Collectors are physical hardware items that may require an export license prior to shipment to certain jurisdictions. Customer will obtain any required export licenses or authorizations before exporting, re- exporting, or transferring any Collector to any country, entity, or individual. 4.2.3. Customer will use and maintain Collectors in good working order in accordance with the D...”Open source citation
The clause requires defense, indemnity, or hold-harmless obligations.
“2.9.3.3. Advanced AI and Data Products are not intended for use in, or in association with, the operation of any hazardous environments or critical systems that may lead to serious bodily injury or death or cause environmental or property damage. Advanced AI and Data Products are not medical devices and are not intended to be used without human oversight for any clinical decision-making or other clinical use. Cust...”Open source citation
The clause permits sale of personal data or information.
“We are committed to transparency and compliance with regulations such as GDPR and privacy best practices. We never sell customer data to third parties or use it for ads.”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“If Customer performs or discloses any benchmarks or comparative tests or evaluations (each, a “Benchmark”) of the Advanced AI and Data Products, or directs or permits any third party to perform or disclose, any Benchmark of any of the Advanced AI and Data Products, Customer will include in any such disclosure, and may be required to disclose to AWS, all information necessary to replicate such Benchmark. 2.9.3.2. A...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | commercial use | conditional | MEDIUM | 1 |
| All applicable tiers | data retention | improves | LOW | 2 |
| All applicable tiers | indemnity liability | conditional | MEDIUM | 1 |
| All applicable tiers | privacy data use | worsens | HIGH | 1 |
| All applicable tiers | subprocessors data sharing | conditional | MEDIUM | 2 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: deletion or time bound on data retention
“4.2.2. Customer acknowledges that Collectors are physical hardware items that may require an export license prior to shipment to certain jurisdictions. Customer will obtain any required export licenses or authorizations before exporting, re- exporting, or transferring any Collector to any country, entity, or individual. 4.2.3. Customer will use and maintain Collectors in good working order in accordance with the Documentation, at the locations agreed to by the parties, so as to enable proper usage and operation of the Armis Products. 4.2.4. Upon termination or expiration of the Agreement or applicable Order Form: (i) Customer will immediately and permanently delete all Collector Technology installed on Customer’s hardware devices; (ii) Customer will ensure that all Collectors remain connected to the internet for 7 days following the termination to enable ServiceNow to permanently delete the Collector Technology remotely; and (iii) Customer will return the Collectors to ServiceNow in accordance with ServiceNow’s then-current instructions. 4.3. Intelligence Center and Early Warning Products. Certain Armis Products, including Intelligence Center and Early Warning (such products, the “Warning Products”), provide Customer with access to a database of potential security vulnerabilities in © 2026 ServiceNow, Inc. All rights reserved. ServiceNow, the ServiceNow logo, Now, Now Platform, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“products, and (4) these additional terms: 2.9.2.1. Customer may publicly disclose the results of any benchmark tests of the Advanced AI and Data Products (each a “Test”) only if the public disclosure includes all necessary information to replicate the Test. 2.9.2.2. Customer may not use the Advanced AI and Data Products as part of a website, application, or other online service that is directed towards or is likely to be accessed by individuals under the age of 18. 2.9.2.3. Customer may not use the Advanced AI and Data Products for clinical purposes (for clarity, non-clinical research, scheduling, or other administrative tasks are not restricted), as a substitute for professional medical advice, or in any manner that is overseen by or requires clearance or approval from any applicable regulatory authority. 2.9.3. Anthropic on AWS AI Product Terms. Use of Advanced AI and Data Products that utilize Anthropic generative artificial intelligence models made available through Amazon Web Services, Inc. (“AWS”) requires Customer’s compliance with: (1) AWS Responsible AI Policy located at https://aws.amazon.com/ai/responsible- ai/policy/, (2) Anthropic Usage Policy located at https://www.anthropic.com/legal/aup , (3) other such terms that AWS or Anthropic may identify as applicable to the use of Anthropic artificial intelligence products made available through AWS; and (4) these additional terms: 2.9.3.1. If Customer performs or discloses any benchmarks or comparative tests or evaluations (each, a “Benchmark”) of the Advanced AI and Data Products, or directs or permits any third party to perform or disclose, any Benchmark of any of the Advanced AI and Data Products, Customer will include in any such disclosure, and may be required to disclose to AWS, all”Open timeline citation
Latest stance: deletion or time bound on data retention
“4.2.2. Customer acknowledges that Collectors are physical hardware items that may require an export license prior to shipment to certain jurisdictions. Customer will obtain any required export licenses or authorizations before exporting, re- exporting, or transferring any Collector to any country, entity, or individual. 4.2.3. Customer will use and maintain Collectors in good working order in accordance with the Documentation, at the locations agreed to by the parties, so as to enable proper usage and operation of the Armis Products. 4.2.4. Upon termination or expiration of the Agreement or applicable Order Form: (i) Customer will immediately and permanently delete all Collector Technology installed on Customer’s hardware devices; (ii) Customer will ensure that all Collectors remain connected to the internet for 7 days following the termination to enable ServiceNow to permanently delete the Collector Technology remotely; and (iii) Customer will return the Collectors to ServiceNow in accordance with ServiceNow’s then-current instructions. 4.3. Intelligence Center and Early Warning Products. Certain Armis Products, including Intelligence Center and Early Warning (such products, the “Warning Products”), provide Customer with access to a database of potential security vulnerabilities in © 2026 ServiceNow, Inc. All rights reserved. ServiceNow, the ServiceNow logo, Now, Now Platform, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“If Customer performs or discloses any benchmarks or comparative tests or evaluations (each, a “Benchmark”) of the Advanced AI and Data Products, or directs or permits any third party to perform or disclose, any Benchmark of any of the Advanced AI and Data Products, Customer will include in any such disclosure, and may be required to disclose to AWS, all information necessary to replicate such Benchmark. 2.9.3.2. AWS may use automated abuse detection mechanisms designed to detect harmful content, including related to potential violations of AWS or Anthropic terms of service or acceptable use policies. If these mechanisms detect apparent child sexual abuse material, Customer agrees and instructs that AWS may report the incident to the National Center for Missing and Exploited Children or other authority. © 2026 ServiceNow, Inc. All rights reserved. ServiceNow, the ServiceNow logo, Now, Now Platform, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc. in the United States and/or other countries. Other company and product names may be trademarks of the respective companies with which they are associated.”Open timeline citation
Latest stance: sale or sell on privacy data use
“We are committed to transparency and compliance with regulations such as GDPR and privacy best practices. We never sell customer data to third parties or use it for ads.”Open timeline citation
Latest stance: third party or vendor sharing on commercial use
“If Customer performs or discloses any benchmarks or comparative tests or evaluations (each, a “Benchmark”) of the Advanced AI and Data Products, or directs or permits any third party to perform or disclose, any Benchmark of any of the Advanced AI and Data Products, Customer will include in any such disclosure, and may be required to disclose to AWS, all information necessary to replicate such Benchmark. 2.9.3.2. AWS may use automated abuse detection mechanisms designed to detect harmful content, including related to potential violations of AWS or Anthropic terms of service or acceptable use policies. If these mechanisms detect apparent child sexual abuse material, Customer agrees and instructs that AWS may report the incident to the National Center for Missing and Exploited Children or other authority. © 2026 ServiceNow, Inc. All rights reserved. ServiceNow, the ServiceNow logo, Now, Now Platform, and other ServiceNow marks are trademarks and/or registered trademarks of ServiceNow, Inc. in the United States and/or other countries. Other company and product names may be trademarks of the respective companies with which they are associated.”Open timeline citation
Latest stance: indemnity on indemnity liability
“2.9.3.3. Advanced AI and Data Products are not intended for use in, or in association with, the operation of any hazardous environments or critical systems that may lead to serious bodily injury or death or cause environmental or property damage. Advanced AI and Data Products are not medical devices and are not intended to be used without human oversight for any clinical decision-making or other clinical use. Customer is responsible for liability that may arise in connection with any such use 2.10. Defense of Claims and Indemnity for Advanced AI and Data Products. 2.10.1. Subject to the conditions, limitations, and processes set forth in the Defense Obligations of the Agreement and this Section 2.10, ServiceNow will (1) defend Customer and Customer Affiliates against any IPR Claim to the extent alleging that Generated Output directly infringes any third-party's copyright; and (2) pay any settlement amount or court-ordered damages finally awarded to the extent arising from such IPR Claim. 2.10.2. In addition to the limitations set forth in the Defense Obligations of the Agreement, Section 2.10.1 does not apply where: (1) Customer knew or should have known the relevant Generated Output was infringing or likely infringing; (2) Customer interfered with, circumvented, or failed to use relevant citations, filters, instructions, or other safety features ServiceNow makes available for use in connection with the Advanced AI and Data Products; (3) the IPR Claim arises from Customer’s use of the relevant Generated Output after Customer received notice of alleged infringement related to such Generated Output; (4) the Generated Output was modified or used in combination with materials not provided by ServiceNow, where such materials give rise to the IPR Claim; or (5) Customer’s use”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-08-07· verified 2026-06-09verified once — no re-scan in 94 days
- Terms of Service:Last captured 2026-08-12· verified 2026-08-12
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
↓ 8 fewer findings this quarter vs last (30 vs 38). First scan: June 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of ServiceNow Now Assist's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified ServiceNow Now Assist's Privacy Policy. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from ServiceNow Now Assist's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.