ServiceNow Pushes Agent Governance and Employee Automation Forward

ServiceNow ties agent authority to enterprise policy at runtime

ServiceNow made its clearest move yet to give companies enforceable limits on AI agents, unveiling AI Passport, a cryptographically signed credential that defines an agent's identity, permitted actions, accessible systems and accountable owner. Issued through the AI Control Tower governance platform, the credential carries permissions across agents, tools and vendors and is checked as work executes. ServiceNow's Nenshad Bardoliwalla argued that monitoring alone is insufficient: "Without that baseline, every guardrail is just advisory." In a demonstration, a third-party customer service agent processed an $18 refund automatically while a $40 refund was rejected because it exceeded the threshold for human review [siliconangle.com].

The enforcement model is the substantive change because it moves governance from static policy to runtime checks. AI Passport draws business context from ServiceNow's configuration management database, governance policies and workflow approvals, and supports graduated responses: revoking session tokens to pause an agent, restricting access to approved tools or deactivating credentials entirely. Bardoliwalla framed this as "a dimmer switch" that allows agents to be reinstated with a recorded explanation. The credential uses open specifications so other governance products, identity providers and enforcement systems can issue and verify it, and is designed for third-party agents as well as ServiceNow's own [siliconangle.com].

EmployeeWorks brings no-code agent building to the workforce

Alongside the governance announcement, ServiceNow updated its EmployeeWorks information portal so non-technical employees can build specialized assistants and automate routine tasks without writing code. Reported coverage frames this as the third generation of ServiceNow's employee-centric AI strategy, positioning the workforce itself as the builder of role-specific agents rather than treating employees only as end users [gurufocus.com; businesswire].

Nvidia partnership anchors the enforcement layer

Nvidia joined as a design and launch partner for AI Passport, linking it with the Open Agent Safety Platform, including the OpenShell secure runtime and Sentry security framework. The integration is meant to connect enterprise policies with enforcement inside the agent runtime. Nvidia's Itay Ozery identified the central problem as "making your enterprise policy meaningful at the point of execution" [siliconangle.com]. This positions Nvidia's safety tooling as a candidate enforcement point rather than a generic GPU supplier role, though adoption metrics were not disclosed.

AI Control Tower widens discovery and cost tracking

AI Control Tower itself is expanding beyond credentials into discovery, observability and financial oversight of agent activity. Additions include shadow AI detection, more than 400 vendor connectors for discovery and access mapping, and cost capabilities that track spending by agent, workflow or department. The aim is to give procurement and finance teams the same line of sight over agent operations that they already expect from cloud or SaaS spend [siliconangle.com].

Next observable milestone

ServiceNow has not disclosed a general-availability date or pricing for AI Passport; the credential and EmployeeWorks updates were announced rather than shipped. The next verifiable signal is whether a customer reference or production deployment appears in ServiceNow's earnings commentary or user-conference sessions, since advisory board posts and pricing tiers were not supplied in the reports.

Related industries and supply products