Trust and security
Your model, your boundary, every action logged.
What we can show your InfoSec and procurement teams, on request and under NDA.
GCC Now™ is the ServiceNow Accelerator by ANSR × inMorphis, a joint venture for global capability centers (GCCs) and GBS organizations. This is how we handle your data, your platform and your AI.
Certifications
inMorphis holds SOC 2 and ISO/IEC 27001, with reports available under NDA. They cover inMorphis only, so ask about ANSR's scope if ANSR's team will touch your data.
How iForge™ stays inside your boundary
iForge™ runs on your model in your boundary: your model, keys and endpoint, under OAuth, sub-production first. Every change passes five gates your people sign and ships with tests and an Evidence Pack.
How iForge™ works →The iForge™ security pack
The pack is complete, and our sales team holds it. It covers how iForge™ works in your boundary. Ask for it on your first call.
Every agent counted
AI agents get inventoried and governed on Super Intelligence Control Tower (formerly AI Control Tower). Every statement of work includes an assist forecast and a monthly report, so AI cost has an owner.
Data residency and India's DPDP Act
AI inference location is ServiceNow's commitment to confirm per instance, and we'll get it in writing for yours. We don't state India inference as a given, and we configure masking either way.
India's DPDP consent, notice and rights duties apply from May 2027. The DPDP Privacy Workflow runs DPDP and GDPR requests through one workflow. Your own counsel should confirm how the duties apply to you.
DPDP Privacy Workflow →What we ask for
A Platform Value Scan needs an NDA and approved read access, and nothing starts until both are in place. Deeper work runs sub-production first, and regulated firms start on masked data.
What stays yours
What we build on your instance is yours. Runbooks, the architecture repo and dashboards get handed over at transfer. iForge™ stays an inMorphis asset.
If you're reviewing us
HQ finance
A baseline you sign and a register you can audit. Hard savings stay separate from capacity freed.
HQ procurement
GCC Now™ sells no licenses. GCC Now™ is a joint venture of ANSR × inMorphis: one agreement, one accountable team, and your proposal confirms the contracting entity.
InfoSec
Your model, your boundary, every action logged. Ask for the iForge™ security pack, and for the SOC 2 and ISO/IEC 27001 reports for inMorphis under NDA.
Security questions
Can we see your reports?
Yes, under NDA. They cover inMorphis.
Does our data train your models?
iForge™ uses your model, keys and endpoint, so your agreement with your model provider governs that. Ask for the data flow in your security review.
Do you touch production?
Work starts in sub-production. Changes reach production only after your people sign the gates.
Bring your security team to the call.
By ANSR × inMorphis. A named lead from each firm joins your first call.