AI Control Tower enables enterprises to actively manage, optimize, govern, secure & measure the value of their AI investments, ensuring performance, compliance, and workforce transformation while seamlessly embedding AI into enterprise strategy. AI Control Tower centralized enterprise AI asset inventory, boosts efficiency in the AI development with automated workflows and embeds risk and compliance management in the AI asset lifecycle.
- AI Control Tower: Single pane view of status of AI in the organization with actionable insights.
- Centralized AI asset inventory: Centralized information about AI systems, AI models, prompts and datasets, and their relationships. Supports automated discovery of Now Assist skills and ServiceNow deployed models.
- AI discovery: Discover and add enterprise AI assets in hyperscalers to the AI inventory
- AI asset lifecycle: Enables management of AI asset lifecycle from intake and to deployment, with review and governance tasks embedded in the appropriate phases of the lifecycle.
- AI risk and compliance management: Embeds risk and impact assessments, application of policies and controls in the AI asset lifecycle to manage and mitigate risk and measure compliance against organizational policies and regulatory needs.
- AI value and adoption: enables value measurement and track adoption and usage of AI in the enterprise delivering continuous visibility into progress and tangible outcomes
- AI case management: Enables logging and management of AI cases and inquiries to address issues.
- AI security and privacy: enables monitoring AI agents, their access maps and usage to flag security vulnerabilities with elevated access and dormant assets
AI Control Tower adds new capabilities across discovery, governance, security, monitoring, and measurement of AI usage.
Inventory and Discovery
- Detect unsanctioned AI use with network detection (Armis) and endpoint detection (ITOM ACC), including model, user, department, and device details.
- Block AI services detected through ACC.
- An AI Inventory Enrichment Agent scans your inventory for incomplete records and suggests values to fill the gaps.
- New and enhanced connectors extend discovery to Microsoft Agent365, Azure AI Foundry, Copilot, and AWS.
Govern
- Discovered AI systems are now risk-classified at the point of discovery, before they enter the managed workflow.
- An AI Risk & Control Applicability Advisor recommends the most relevant risks and controls for each system, with rationale.
- Dynamic Playbook 2.0 tailors onboarding tasks to an asset's risk classification.
- ServiceNow-managed AI agents can now be published to Microsoft Agent365 and other external registries.
Secure
- AI agent containment can be triggered automatically based on authored policies in the AI Control Tower, removing the need for manual intervention. Support is extended to Azure AI Foundry for agent runtime and Gemini Enterprise Agent Platform (via Okta integration).
- Design-time security now covers AI agents, tools, MCP servers, and system prompts, not just AI models.
- The Veza connector now uses OAuth 2.0 for authentication.
Monitor
- Configure trace data retention to fit your needs.
- View new latency and token-usage visualizations.
- Set evaluation metrics at the asset level.
- Use custom date ranges of up to 18 months for evaluation data.
Measure
- Product owners can now view and work with just the AI systems and metrics that matter to them.
Foundations
Domain separation is available across AI Control Tower, enabling MSP and multi-tenant deployments with isolated inventories, security posture, and value data for each tenant.
For full details, see AI Control Tower release notes.
Requires Brazil or Australia Patch 6