Is Moveworks SOC 2 compliant? Yes, SOC 2 Type 2 plus ISO 27001, 27701 and 42001.
Moveworks is compliant with SOC 2 Type 2 and holds ISO/IEC 27001, 27017, 27018, 27701 and CSA STAR Level 2. In May 2026 it added ISO/IEC 42001, the AI management system standard, so it now meets the AI-specific governance criterion that most vendors still miss and passes all seven of the seven criteria on this site. Moveworks is now a ServiceNow company, following the acquisition that closed in December 2025.
Source: moveworks.com security (SOC 2 Type 2, ISO/IEC 27001, 27017, 27018, 27701, 42001, CSA STAR Level 2) and the ISO 42001 certification announcement. Editorial vetting, not a compliance certification; verify directly before purchase.
Moveworks ownership, ISO 42001 and data handling, in detail
Is Moveworks owned by ServiceNow?
Yes. ServiceNow completed its acquisition of Moveworks on 15 December 2025, in a deal first announced in March 2025 and valued at roughly 2.85 billion US dollars. Moveworks now operates inside ServiceNow, pairing its front-end AI assistant and enterprise search with ServiceNow's workflow platform. The founding team, including CEO Bhavin Shah and CTO Vaibhav Nivargi, remains named on the Moveworks company pages, so the team criterion is met.
Does Moveworks have ISO 42001, and what does it cover?
Yes. Moveworks announced ISO/IEC 42001 certification, the AI management system standard, on 27 May 2026, evaluated by an independent accredited auditor. The company describes the certification as reflecting AI governance controls already running in production rather than a program created for the audit. This is the AI-specific governance criterion on this site and is what moves Moveworks from six to seven of seven.
Does Moveworks train its AI models on my data?
No. Moveworks states that no customer data is used to train its global generative models. The security page describes encryption, access controls and data masking, and terms are governed by the Data Processing Agreement. Teams with strict data-use requirements should confirm the specifics in their DPA before deployment.
Where is my data stored, and does Moveworks offer data residency?
Moveworks hosts on AWS across multiple regions, including US Commercial, EU Commercial, US GovCloud, Canada, Australia, the UK and Japan. Because the available region depends on your contract, confirm the specific hosting region and residency guarantees directly with Moveworks before purchase.
Sources: moveworks.com security, ServiceNow acquisition close (Dec 2025). Editorial vetting, not a compliance certification; verify directly before purchase.
Moveworks
7/7 criteria7-Criterion Scorecard
Security Certifications
Public Reference Customers
- ✓Broadcom[www.moveworks.com]
- ✓Hearst[www.moveworks.com]
- ✓Databricks[www.moveworks.com]
Data Residency and Training Opt-Out
Regions: US, EU, UK, Canada, Australia, Japan
Training opt-out: Yes, available
Retention: Per DPA; no customer data used to train global generative models
www.moveworks.com/us/en/platform/securityOutcome Accountability
Model: Ticket-deflection benchmarks
Published ticket deflection and resolution rate benchmarks
www.moveworks.comTime in Market
Founded: 2016
Public launch: 2018
Customers (min triangulated): 500+
Team Composition
Founders: Bhavin Shah, Vaibhav Nivargi, Varun Singh, Jiang Chen
www.moveworks.com/us/en/company/bhavin-shahFor detailed pricing and comparison data for IT Service Desk vendors, see Service Desk Agents reference.