ServiceNow

SaaS / Software United States Website Reviewed Sept. 2, 2026

Enterprise workflow platform for IT service management, HR service delivery, security operations and GRC.

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO/IEC 27001:2022 Accredited third-party certification body ServiceNow cloud services and supporting ISMS Current
ISO/IEC 27017:2015, ISO/IEC 27018:2019 and ISO/IEC 27701:2019 Accredited third-party certification body Cloud security, PII protection and privacy information management for ServiceNow services Current
ISO 22301:2019 Accredited third-party certification body Business continuity management system covering ServiceNow cloud services Current
SOC 1 Type II and SOC 2 Type II Independent third-party auditor ServiceNow cloud services; reports available to customers under NDA Current
FedRAMP High US federal authorising body ServiceNow Government Community Cloud Current

Compliance Frameworks

ISO/IEC 27001:2022
Full
SOC 2 Type 2
Full
ISO 22301:2019
Full
ISO 22301 certified business continuity management system
GDPR 2016/679
Full
Processor under its DPA; EU and UK datacentre pairs available
HIPAA Security
Partial
HIPAA support available for eligible instances with a BAA

Assess ServiceNow in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.