Policy exceptions

concept brazil Updated Sep 10, 2026 1 min read ac-policy-exceptions.md

Request an approved, time-bound deviation from a policy or control objective that applies to an AI asset.

A policy exception documents why an AI asset can't currently meet a control objective and requests approval to operate outside that control for a defined period. Each exception includes a justification and a risk assessment that an approver reviews before the exception takes effect.

Policy exception lifecycle

An AI steward or asset owner creates a policy exception, identifies the policy or control objective it applies to, and documents the justification and risk assessment. The exception is valid only for the period defined by its Valid from and Valid to dates; a valid-to date is required to raise an exception.

The exception moves into review, and the request routes to an approval group or approver. The approver approves or rejects the exception based on the documented justification and risk assessment, and an approved exception closes once its valid-to date passes.

Where policy exceptions appear

Policy exceptions appear on the Policy exceptions sub-tab of the Team, Assigned to you, Unassigned, and Submitted by you tabs in Activity Center, depending on assignment.

Keywords policy exceptioncontrol objectiverisk assessment

30 lines · 1.8 KB Wrap lines

---
title: Policy exceptions
description: Request an approved, time-bound deviation from a policy or control objective that applies to an AI asset.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/intelligent-experiences/ac-policy-exceptions.html
release: brazil
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 1
keywords: [policy exception, control objective, risk assessment]
breadcrumb: [Managing tasks and approvals, Address action items, AI Control Tower, Establishing AI governance, Enable AI Experiences]
---

# Policy exceptions

Request an approved, time-bound deviation from a policy or control objective that applies to an AI asset.

A policy exception documents why an AI asset can't currently meet a control objective and requests approval to operate outside that control for a defined period. Each exception includes a justification and a risk assessment that an approver reviews before the exception takes effect.

## Policy exception lifecycle

An AI steward or asset owner creates a policy exception, identifies the policy or control objective it applies to, and documents the justification and risk assessment. The exception is valid only for the period defined by its **Valid from** and **Valid to** dates; a valid-to date is required to raise an exception.

The exception moves into review, and the request routes to an approval group or approver. The approver approves or rejects the exception based on the documented justification and risk assessment, and an approved exception closes once its valid-to date passes.

## Where policy exceptions appear

Policy exceptions appear on the **Policy exceptions** sub-tab of the **Team**, **Assigned to you**, **Unassigned**, and **Submitted by you** tabs in Activity Center, depending on assignment.