Moveworks AI Vendor Risk Profile
Enterprise AI platform for IT service desks and employee support. Automates ticket resolution, knowledge retrieval, and workflow actions across IT, HR, and facilities using conversational AI agents.
Risk overview
Risk score: 31/100
Risk tier: Moderate
Safety rating: 69/100 (higher is better)
Lower risk scores indicate lower assessed risk.
Last verified: Apr 19, 2026 Aging
Risk dimensions
| Dimension | Risk score |
|---|---|
| Data Handling | 28/100 |
| IP Exposure | 26/100 |
| Jurisdiction | 13/100 |
| Security | 34/100 |
| Regulatory Compliance | 50/100 |
| Transparency | 60/100 |
| Business Stability | 29/100 |
| Dependency Chain | 27/100 |
| Agent Governance | Not assessed |
Analyst summary
Rating: Recommended
Moveworks is the leading IT service desk AI platform, now a wholly-owned subsidiary of ServiceNow following its 2025 acquisition. Its compliance stack (SOC 2 Type II, ISO 27001/27701, HIPAA) and tenant-isolation posture are mature, and ServiceNow ownership strengthens the enterprise procurement story.
Bottom line: The default enterprise choice for IT service desk AI, now strengthened by ServiceNow ownership.
Strengths
- Comprehensive compliance stack: SOC 2 Type II, ISO 27001, ISO 27701, HIPAA
- No-training-on-customer-data with tenant isolation and customer-governed DPA
- EU data residency available for qualifying customers
- Now owned by ServiceNow (NYSE: NOW), materially strengthening vendor stability
- Production-scale deployments across Fortune 500 IT organizations
Concerns
- Post-acquisition integration with ServiceNow will affect roadmap and pricing over the next 18-24 months
- Deep ServiceNow integration may become a lock-in for non-ServiceNow IT stacks
- Enterprise-only pricing puts it out of reach for mid-market IT teams
Best for
- Large enterprise IT service desks looking to automate tier-1 and tier-2 support
- Existing ServiceNow ITSM customers wanting deep native AI integration
- Regulated industries needing HIPAA-compliant IT service desk AI
Avoid if
- You run a small IT organization; pricing and scope won't fit
- You are strategically moving away from ServiceNow
- You need a best-of-breed AI agent platform rather than ITSM-focused automation
Citations
- Data Handling — Trains On User Data
Moveworks does not use Customer Data to train foundation models. Customer data is logically isolated per tenant and governed by the customer's DPA.
- Governance — Privacy Policy Url
Moveworks Privacy Policy describes data collection, use, and sharing.
- Governance — Tos Url
Moveworks Terms govern use of the enterprise AI platform.
- Ip Profiles — User Owns Outputs
Customer retains all rights, title, and interest in Customer Data, including outputs generated by the Moveworks platform.
- Jurisdiction Profiles — Incorporation Country
Moveworks, Inc. is a Delaware corporation headquartered in Mountain View, California. Moveworks was acquired by ServiceNow in 2025.
- Security Compliance — Gdpr Compliant
Moveworks provides GDPR-compliant data processing and offers EU data residency for qualifying customers.
- Security Compliance — Hipaa Compliant
Moveworks supports HIPAA compliance and signs Business Associate Agreements for healthcare customers.
- Security Compliance — Soc2 Type2
Moveworks is SOC 2 Type II, ISO 27001, and ISO 27701 certified with independently audited controls.