CompanyGraph
ServiceNow, Inc.
NOW · NYSE Arca · United States
Forces enterprise IT, HR, and security workflows onto a single CMDB schema, making the schema the irreplaceable source of truth for all service operations.
ServiceNow's Now Platform functions by pulling IT, HR, and security workflows into a single Configuration Management Database schema, which makes that schema the operational foundation all three functions depend on — because every asset relationship, approval hierarchy, and incident record is written to and read from the same structure, removing it would break cross-functional service management entirely. That architectural unification is also the platform's central vulnerability: a schema outage disables IT operations, HR service delivery, and security incident response at the same time, because the consolidation that eliminates redundant systems also eliminates the independent failure boundaries that separate point solutions preserve. Compliance obligations — SOX audit trails, GDPR data-lineage records, and federal risk management requirements — are encoded directly into the schema's approval and logging structures, which anchors regulated customers to the data model by regulatory force, making departure costly independent of the months required to recreate asset maps or reconfigure role-based controls in a competing platform. Each new customer still requires custom API construction and data-model translation from legacy systems into the schema, and because no two enterprises share the same legacy topology, this engineering work scales with the number of connected systems rather than with the size of the customer base, creating an implementation bottleneck that grows alongside the platform's own adoption.
How does this company make money?
The platform charges annual subscription fees based on the number of named users with access. Additional charges apply for premium applications such as Security Operations and Customer Service Management. Professional services engagements for implementation work and custom workflow development generate a separate stream of income.
What makes this company hard to replace?
The Configuration Management Database holds mapped relationships between all of a customer's IT assets; recreating that map in a competing platform would take months. Custom workflow automations built in the Now Platform's proprietary scripting language cannot be exported to other systems. Role-based access controls and approval hierarchies embedded in the platform require complete reconfiguration if a customer attempts to migrate.
What limits this company?
Each new enterprise implementation requires custom API construction and data-model translation between the customer's legacy IT service management, ERP, and HR systems and the Now Platform's schema. Because no two enterprises share the same legacy topology, this translation cannot be templated, and the engineering hours required scale with the number of connected legacy systems rather than with the size of the customer base.
What does this company depend on?
The platform depends on Amazon Web Services infrastructure for cloud hosting, Microsoft Active Directory integration for enterprise authentication, Salesforce API connectivity for CRM workflow synchronization, Microsoft Teams and Slack integrations for service request routing, and Oracle and SAP database connectors for ERP system integration.
Who depends on this company?
Fortune 500 IT operations centers depend on the platform for centralized incident management and would lose that capability entirely if the platform failed. Enterprise help desk teams rely on its workflow automation and would revert to manual ticket routing without it. Compliance officers at regulated firms depend on the platform's audit trails to meet SOX and GDPR reporting requirements.
How does this company scale?
Workflow templates and AI automation models replicate across new customers without meaningful additional development cost. Each enterprise implementation, however, requires custom configuration mapping between the customer's existing systems and the Now Platform's data models, creating implementation bottlenecks that cannot be automated away as the customer base grows.
What external forces can significantly affect this company?
GDPR and SOC 2 compliance requirements are pushing demand for more granular audit trail capabilities inside workflow automation tools. Federal risk management guidelines require on-premises deployment options for government customers. Supply chain cybersecurity executive orders mandate that vendor risk assessment be integrated into procurement workflows, adding scope to what the platform must handle for certain customers.
Where is this company structurally vulnerable?
Because all functions write to a single schema, a corruption event or sustained outage in the CMDB disables IT operations, HR service delivery, and security incident response at the same time across the entire enterprise — the architectural unification that eliminates redundant systems also eliminates the independent failure boundaries that point solutions preserve.