Compliance frameworks, security audits, and quality certifications this company maintains.
ServiceNow maintains SOC 2 Type II certification across its Now Platform data centers, providing enterprise customers independent verification that security, availability, and confidentiality controls are operating effectively.
ServiceNow holds ISO 27001 certification for its information security management system, demonstrating the rigorous controls protecting customer workflow data hosted on the Now Platform globally.
ServiceNow's Government Cloud is FedRAMP High authorized, enabling US federal agencies to deploy ITSM, HRSD, and SecOps workflows in a compliant cloud environment meeting the highest federal security standards.
ServiceNow is certified to ISO 27017, the cloud security extension of ISO 27001, confirming cloud-specific controls governing the Now Platform's multi-tenant architecture are properly implemented.
ServiceNow holds ISO 27018 certification for protection of personally identifiable information in public cloud services, ensuring customer HR and employee data processed through HRSD meets international privacy standards.
ServiceNow operates as a data processor under GDPR for European customers running workflows on the Now Platform, with data residency options in EU data centers and data processing addenda available to all enterprise customers.
ServiceNow supports HIPAA-compliant configurations for healthcare customers using the Now Platform for patient intake and HR workflows, with Business Associate Agreements available for covered entities.
ServiceNow achieves PCI DSS Level 1 compliance for platform components that handle payment card data, ensuring customers in financial services can use Commerce and CSM workflows in regulated environments.
ServiceNow is certified at CSA STAR Level 2, requiring third-party assessment and validating cloud-specific security practices for enterprise and government customers on the Now Platform.
ServiceNow is StateRAMP authorized, enabling US state and local government agencies to deploy Now Platform workflows for citizen services and government IT operations with verified security controls.