ServiceNow is FedRAMP certified and, because of this, so is AssetTrack for ServiceNow.
AssetTrack is built on the ServiceNow platform
AssetTrack for ServiceNow is built using ServiceNow's Rest API, security, and database. AssetTrack does not provide any additional cloud services that are of concern to cloud customers. Storage, processing and access to sensitive customer data is protected by the ServiceNow cloud.
AssetTrack Mobile is tested and secure
The only non-ServiceNow-managed application as the AssetTrack Mobile apps for iOS and Android. These are Cordova-built wrappers to the AssetTrack web user interface served by ServiceNow.
AssetTrack Mobile apps are tested and certified by third-party security professionals. All security issues are remediated. Documentation is available upon request regarding applicable penetration testing.