Combined ServiceNow Vault release notes for upgrades from Zurich to Brazil

reference brazil Updated Nov 6, 2026 13 min read brazil-zurich-servicenowvault-release-notes.md
Raw file servicenow.com

Consolidated page of all release notes for ServiceNow Vault from Zurich to Brazil.

How to use this page

To help you prepare for your upgrade, we have combined the cross-family ServiceNow Vault release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Zurich to Brazil.

Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release."

Important information for upgrading ServiceNow Vault to Brazil

Before you upgrade to Brazil, review these pre- and post-upgrade tasks and complete the tasks as needed.

Release

Release notes

Zurich

  • Upgrade information

To install ServiceNow Vault, the following must be installed:

-   [Data Discovery](https://www.servicenow.com/docs/access?context=data-discovery-landing&family=zurich&ft:locale=en-US)
-   [Data Privacy](https://www.servicenow.com/docs/access?context=data-privacy-landing&family=zurich&ft:locale=en-US)
-   [Data anonymization](https://www.servicenow.com/docs/access?context=dps-data-anonymization&family=zurich&ft:locale=en-US)
-   [Field Encryption](https://www.servicenow.com/docs/access?context=field-encryption&family=zurich&ft:locale=en-US)
-   [Zero Trust Access](https://www.servicenow.com/docs/access?context=session-access&family=zurich&ft:locale=en-US)

Note: Field Encryption, Data Discovery, and Data Privacy can be automatically installed using Vault Console.

Australia

  • Upgrade information

ServiceNow Vault is a bundle of the following products:

-   [ServiceNow Vault](https://www.servicenow.com/docs/access?context=servicenow-vault-landing&family=australia&ft:locale=en-US)
-   [Data Discovery](https://www.servicenow.com/docs/access?context=data-discovery-landing&family=australia&ft:locale=en-US)
-   [Data Privacy](https://www.servicenow.com/docs/access?context=data-privacy-landing&family=australia&ft:locale=en-US)
-   [Zero Trust Access](https://www.servicenow.com/docs/access?context=session-access&family=australia&ft:locale=en-US)
-   [Field Encryption](https://www.servicenow.com/docs/access?context=field-encryption&family=australia&ft:locale=en-US)
-   [Code Signing](https://www.servicenow.com/docs/access?context=code-signing-landing&family=australia&ft:locale=en-US)
-   [Log Export Service \(LES\)](https://www.servicenow.com/docs/access?context=les-intro&family=australia&ft:locale=en-US)

Note: Field Encryption, Data Discovery, and Data Privacy can be automatically installed using Vault Console.

Brazil

No updates for this release.

## New features

Between your current release family and Brazil, new features were introduced for ServiceNow Vault.

Release

Release notes

Zurich

Monitor your sensitive data in ServiceNow Vault with a comprehensive dashboard. The dashboard view shows metrics from each of the ServiceNow Vault tools and provides easy access to them.

Use guided setup to quickly start using ServiceNow Vault on the following applications:

-   [Financial Services](https://www.servicenow.com/docs/access?context=fso-overview&family=zurich&ft:locale=en-US)
-   [Customer Service Management](https://www.servicenow.com/docs/access?context=c_CustomerServiceManagement&family=zurich&ft:locale=en-US)

Australia

Deploy the complete ServiceNow Vault offering on your instance with Vault Suite, which automates the installation of all paid ServiceNow Vault capabilities for instances with a ServiceNow Vault subscription. Vault Suite includes Vault Console, Field Encryption, Zero Trust Access (Continuous Authentication, Location, and Session Access), Log Export Service, Code Signing Enterprise, and Cloud Encryption, eliminating the manual plugin setup previously required to access the full set of ServiceNow Vault capabilities.

Begin exporting security and audit logs from your instance with a preconfigured Log Export Service topic and curated log sources, designed for instances with a ServiceNow Vault subscription. Activate the default configuration in a single step from the Vault Console, with no manual setup required. Log Export Service version 3.5.0 or later must be installed on the instance.

Use Ask Now Assist to enhance your security posture autonomously by identifying, classifying, and protecting sensitive data in your custom applications.

Propose data classifications and available protections for a custom application. When you install ServiceNow Otto for Vault, this agentic workflow is turned on by default.

View, create, deactivate, and delete Access Observer settings for a particular field. The access observer configuration agentic workflow helps you monitor the people and processes that access data on your instance. When you install ServiceNow Otto for Vault, this agentic workflow is turned on by default.

Review and summarize access logs for a specific field, identifying access sources, users, and their roles. For example, you can ask Now Assist to summarize access logs to view users who accessed a field, along with their roles and how they accessed the data. When you install ServiceNow Otto for Vault, this agentic workflow is turned on by default.

Encrypt specific fields and configure secure access to users with designated roles using the field encryption with vault module agentic workflow. When you install ServiceNow Otto for Vault, this agentic workflow is turned on by default.

Identify unprotected sensitive data across your configured tables using the AI Insights section in the Vault console dashboard. View users entering sensitive data in unprotected columns and channels, grouped by sensitive data patterns. This information can further be used to prioritize protection efforts.

Autoclassify and protect the occurrences of sensitive data within your custom applications using guided setup for Vault. This flow helps you to quickly start using Vault capabilities in your own applications.

Brazil

Classify sensitive data across a large table estate without labeling each column by hand. Select a category of ServiceNow assets in the Data Catalog, and the agent recommends a data class for each column in scope, with the reason for each recommendation. Recommendations are based on schema metadata, such as table and column names and any existing classifications. Review the recommendations and then confirm to apply them. The classifications appear on the data assets after the next ServiceNow metadata collector run.

  • Vault coverage report email

Stay informed about how much of your sensitive data is protected with a Vault coverage report email. Active administrators receive it on the last Monday of each month. The email is sent only when Vault finds sensitive columns on your instance.

Reduce the time you spend interpreting individual charts by reading an AI-generated summary of your data security, with a recommended next step for each area. Insights appears at the top of the Vault console home page and reports on data discovery, classification, and data protection.

Keep encrypted fields readable for the roles that need them by creating the module access policies as part of field encryption. Request encryption for a table field, review the roles that currently have access to it, and confirm the final list. The workflow creates a module access policy for each confirmed role and then encrypts the field, so you no longer review access control lists or Access Observer logs to build the role list yourself.

Protect access to data from the start by automatically applying default step-up authentication policies when you install Zero Trust Access with ServiceNow Vault. Review these default policies at any time from Vault Console.

Monitor code signing activity across your instance by tracking the create, update, and delete operations applied to code signing enabled records over the past week, and see which tables have the most such records.

Monitor your instance's log export activity by tracking total data exported over the past six months, the topics that export the most data, and the data exported by each topic so far in the current month.

Discover and install ServiceNow Vault from Admin Home. Instances with a ServiceNow Vault entitlement show a ServiceNow Vault tile, where an administrator can install Vault Suite and then open the Vault Console from the Configuration Console.

  • Vault onboarding email notification

Receive an email notification when ServiceNow Vault onboarding completes on your instance.

## Changes

Between your current release family and Brazil, some changes were made to existing ServiceNow Vault features.

Release

Release notes

Zurich

No updates for this release.

Australia

The security_admin role has been removed from the roles required to elevate to and administer Vault Console. All administrative tasks including that of viewing tools metrics across the dashboard is now available to the sn_vault_console.vault_console_admin

ServiceNow Otto introduced AI on the platform. As that experience has evolved, there's a new name for the experience. ServiceNow Otto® is the conversational AI platform integrated into ServiceNow workflows. It provides agentic capabilities, supports multimodal interactions across web, mobile, and messaging channels, and enables autonomous orchestration for cross-system workflows.

The Now LLM Service is no longer the default model provider for new or inactive AI assets. A third-party LLM is now selected by default, while existing configurations using the Now LLM Service continue unchanged. The Now LLM Service is still available for manual selection. Azure OpenAI is the default model for all AI assets in ServiceNow Otto for Vault.

Brazil

  • Vault onboarding email design

The Vault onboarding email uses an updated template design.

ServiceNow Otto introduced AI on the platform. As that experience has evolved, there's a new name for the experience. ServiceNow Otto® is the conversational AI platform integrated into ServiceNow workflows. It provides agentic capabilities, supports multimodal interactions across web, mobile, and messaging channels, and enables autonomous orchestration for cross-system workflows.

  • Role masking in the Access Observer and Field Encryption workflows

The security_admin role isn't part of the sn_vault_console.vault_console_admin role. To use the Access Observer and Field Encryption agentic workflows, assign the security_admin role to sn_vault_console.vault_console_admin users, and then elevate to security_admin.

  • Default policy naming

Default policies provisioned for field encryption, data privacy, Zero Trust Access, and Log Export Service are prefixed with Vault by Default, so you can distinguish policies that ServiceNow provisioned from policies your organization created.

## Removed

Between your current release family and Brazil, some ServiceNow Vault features or functionality were removed.

Release

Release notes

Zurich

No updates for this release.

Australia

No updates for this release.

Brazil

No updates for this release.

## Deprecations

Between your current release family and Brazil, some ServiceNow Vault features or functionality were deprecated.

Release

Release notes

Zurich

No updates for this release.

Australia

No updates for this release.

Brazil

  • Code Signing in Vault Suite

Code Signing is no longer included in Vault Suite. Installing Vault Suite doesn't install Code Signing. On instances that already have Code Signing, it no longer appears in Vault Console.

  • Now LLM Service

Starting with the September 2026 release, Gemma 4 joins our growing portfolio of open-weight models available through Now LLM Service. The latest industry advancements are available alongside sovereignty-focused options. All models are hosted and governed by ServiceNow with the same infrastructure and data protections. Older models will remain available for existing published AI skills, agents, and agentic workflows, but will no longer be available for new development or configuration. For details, see the KB3066214: ServiceNow Otto Model Upgrades article in the Now Support Knowledge Base.

## Activation information

Review information on how to activate ServiceNow Vault.

Release

Release notes

Zurich

  • Activation information

Install ServiceNow Vault by requesting it from the ServiceNow Store. Visit the ServiceNow Store website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.

Important: ServiceNow Vault is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes.

Australia

  • Activation information

Install Vault Console, ServiceNow Otto for Vault and Vault Suite by requesting them from the ServiceNow Store. Visit the ServiceNow Store to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.

Important: ServiceNow Vault is available in the ServiceNow Store. For details, see the "Activation information" section of these release notes.

Brazil

  • Activation information

Install Vault Console, Vault Suite and ServiceNow Otto for Vault by requesting it from the ServiceNow Store. Visit the ServiceNow Store to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes. Vault console is available for free installation, but a ServiceNow Vault subscription is required to access its full features.

Note: ServiceNow Vault is available in the ServiceNow Store. For details, see the following activation information.

## Additional requirements

If any additional requirements were introduced or changed for ServiceNow Vault we have noted them here.

Release

Release notes

Zurich

No updates for this release.

Australia

No updates for this release.

Brazil

No updates for this release.

## Browser requirements

If any specific browser requirements were introduced or changed for ServiceNow Vault we have noted them here.

Release

Release notes

Zurich

No updates for this release.

Australia

No updates for this release.

Brazil

No updates for this release.

## Accessibility information

Review details on accessibility information for ServiceNow Vault, such as specific requirements or compliance levels.

Release

Release notes

Zurich

No updates for this release.

Australia

No updates for this release.

Brazil

No updates for this release.

## Localization information

If there are specific localization considerations for ServiceNow Vault we have noted them here.

Release

Release notes

Zurich

No updates for this release.

Australia

No updates for this release.

Brazil

No updates for this release.

## Highlight information

If there are specific highlight considerations for ServiceNow Vault we have noted them here.

Release

Release notes

Zurich

Zurich Patch 4

  • Manage and monitor cloud encryption metrics.

  • Get AI guidance using the Ask Now Assist panel in Vault console.

  • Use guided setup to begin autoclassifying sensitive data within Financial Services and Customer Service Management applications.

  • Monitor and review critical sensitive data metrics from the centralized ServiceNow Vault Console dashboard.

  • Navigate between security tools efficiently using the ServiceNow Vault Console dashboard.

See ServiceNow Vault for more information.

Australia

Australia Patch 5

  • The security_admin role no longer appears on the elevated roles list required for Vault Console administration. This change was made to conform with the principle of least privilege, ensuring administrators only elevate to roles they actually need.
  • Starting with Australia Patch 5, Now Assist for Vault is now ServiceNow Otto for Vault. Access AI-powered security capabilities within Vault Console with the ServiceNow Otto for Vault application. This change reflects the evolution of AI assistance features while existing entitlements remain unchanged. Check your entitlements to determine access to specific features.

Australia Patch 3

  • Receive the full value of your ServiceNow Vault subscription with the new Vault Suite, which installs the complete set of paid ServiceNow Vault capabilities, including Vault Console, Field Encryption, Zero Trust Access, Log Export Service, and Cloud Encryption, on entitled instances.
  • Begin exporting security and audit logs from your instance by default with a preconfigured Log Export Service topic and curated log sources.

Australia Patch 1

  • Enhance your security posture by securing the data in your custom applications with Ask Now Assist.
  • Surface sensitive data access by users automatically by leveraging Now Assist to configure, audit, and summarize your Access Observer logs.

Early availability

  • Identify potential threats and data leaks using the new AI Insights section within the ServiceNow Vault console dashboard.
  • Use guided setup to begin autoclassifying sensitive data within your custom applications.

See ServiceNow Vault for more information.

Important: For Now LLM Service model updates for each release, see Model provider updates.

Brazil

  • Protect sensitive data across its entire life cycle by implementing encryption, data discovery, classification, anonymization, zero trust access, code signing, and log export from a unified console.
  • Accelerate deployment by installing the Vault Suite application to activate all data security capabilities within ServiceNow Vault automatically in a single step, eliminating manual plugin configuration.
  • Automate security administration tasks using AI capabilities provided by the ServiceNow Otto for Vault application to generate custom data patterns, recommend data classifications for applications, monitor data access, and secure custom applications
  • Gain visibility into your security posture with a centralized dashboard that track metrics across all Vault tools.
  • ServiceNow Vault is a bundle of the following products:

See ServiceNow Vault for more information.

Important: For Now LLM Service model updates for each release, see Model provider updates.

**Parent Topic:**[Products combined by family](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/delta-zurich-brazil/rn-combined-intro.md)
Search documentation
Search document titles and file paths on the brazil branch