Explore about data classification.

Data Classification enables support for:
  • Visibility into the types of data hosted on a ServiceNow AI Platform instances.
  • Compliance with privacy laws, and meeting regulation requirements for industries such as financial services and medical device manufacturing.

Data classifications

Data classification is a standalone process in which you manually apply data classifications to existing dictionary entries in any table. See Data dictionary tables for additional information.
  • You classify data as you find appropriate for your business and you can alter the available data classes as necessary.
  • When you classify data, you can use the pre-defined data classifications, or create your own. Although use of pre-defined data classifications is optional, it is advisable do so as a starting point. These pre-defined data classifications are included in demo data that you can install in your instance. To learn more, see Installing Data Classification plugin demo data and Components installed with Data Classification demo data.
  • If you create your own data classifications, you can also design a tiered hierarchical system with parent and child data classifications.

Overview dashboard

Use the Overview dashboard to understand how your current data tables map to different data classifications. You can also analyze how your global, regional, international users may require different approaches to data classification, regarding the use or access to data. You can also customize the Overview dashboard content and layout to fit your needs.

To learn how to use the available scripted and REST APIs to apply the classification metadata within existing processes, workflows, and applications, see the following:
Note: Data Classification supports domain separation, and the data_classification table itself is process separated.

Use cases

Example

General Data Protection Regulation (GDPR) is a European Union regulation whose purpose is to provide individuals with control over their own personal data. You can use data classifications, such as Personally Identifiable Information, to identify where personal data is being stored in your instance. By applying the appropriate security mechanisms to protect that personal data from leaking out, your organization satisfies GDPR requirements.

Example

If you store customer information in the ServiceNow AI Platform, use the Personally Identifiable Information (PII) classification code where needed to track data subject to regulation by local privacy laws. When you install demo data, it automatically applies this classification code to certain security-sensitive fields in the User [sys_user] table. To learn more, see:

Example

You can apply a Restricted data classification to Employee table columns that store sensitive employee information such as Social Security Numbers (SSN). Administrators and auditors can then use the Overview dashboard to confirm that you have assigned data classifications to the correct columns. They can also view the classification details for restricted types of information.