Data protection
Learn how ServiceNow security tools such as the Key Management Framework, Field Encryption, and Data Classification work to keep your data secure.
Key Management Framework (KMF)
KMF is ServiceNow’s built‑in system for protecting your sensitive data using strong encryption. When you use Now Assist, KMF plays an important role in keeping your information secure before, during, and after AI processing.
KMF tracks how keys are used, which helps your security and compliance teams understand:
- What is encrypted?
- Which keys protect which data?
- Who accessed or changed encryption settings?
This is especially important if you use Now Assist with sensitive workloads (for example, HR, legal, financial, healthcare). Learn more about KMF at Key Management Framework.
Field Encryption
Field Encryption protects encrypted data on your instance from unauthorized users, scripts, or system processes. Because your AI Agents are granted access based on role assignment, you can use role-based module access policies to limit which data AI agents can access. Learn more about how Field Encryption secures data in Exploring Field Encryption.
Data Classification
Data Classification helps you keep your sensitive information safe by labeling fields and tables as sensitive, confidential, and so on. Once you have labeled your data, security controls, such as ACL and role masking help ensure that your AI agents only interact with the data you want. For example, if an AI agent tries to perform an action on highly sensitive data, such as closing a critical security incident, classification labels can prevent that action from being allowed.
For more details on this tool, see Data classification.