ins-$1.7M · 13F 13+/12-×0.0 · short↑0.28
Current snapshotServiceNow, Inc.
Enterprise Workflow Intelligence · Digital Trust
Enterprise Workflow Intelligence exposure in Digital Trust.
ServiceNow is the enterprise workflow OS, and its AI-powered ITSM platform has unmatched switching costs. Every major global enterprise runs ServiceNow for IT, and the expansion into employee workflows, customer service, and platform automation creates a multi-year land-and-expand cycle.
Catalysts
Now Assist AI copilot monetization adding premium tier ARPU $15B+ total addressable market expansion into GRC, ESG, and supply chain Q2 earnings — remaining performance obligations growth
Invalidation
Thesis weakens if Microsoft/Salesforce/SAP/Oracle/Workday compress workflow control points and slow seat expansion, AI point solutions erode module pricing, or AI monetization fails to convert into sustained growth. (vault 2026-08)
Latest change
· Target moved from $143.62 to $143.79.
Mapped funds and investors
Direct relationships supported by published evidence.
Reported holdings as-of
| Fund / investor | As of | Fund portfolio weight | Evidence |
|---|---|---|---|
| iShares Expanded Tech-Software Sector ETF IGV | 5.03% | Source |
Disclosed investment history
No sourced relationships mapped yet.
Showing up to four relationships in each group. ETF weights describe the fund’s portfolio, not ownership of this company. Private investment history does not establish current ownership.
Bullish — Wall St most bullish PT $248 (+100%), Q2 rev 3.1B to 3.99B (+24% YoY) [X search Aug 2026]
Lower-confidence snapshotTarget price: $165.01
Dated research targetMoat & position
- Evidence Grade
- Inferred
- Moat Durability
- Qualification barrier
- Toll Road Tier
- Strong proxy
Deep research update
6,959 words · Updated 19 Oct 2026 · 16 sources
ServiceNow sells the Now Platform, a cloud-based AI workflow platform that automates workflows, integrates systems, and manages mission-critical business processes across departments and personas. Its 2025 10-K says the platform provides “comprehensive delivery of seamless workflows” and “drives digital transformation” across the enterprise. Source: SEC 10-K FY2025 (Item 1) — sec.gov
ServiceNow is the enterprise workflow control plane for IT, employee, customer, security, and AI operations. Its moat is not “seat software”; it is the governed orchestration layer that turns requests, alerts, approvals, and automations into auditable actions across heterogeneous systems.
ServiceNow is expanding the digital-trust control plane from workflow orchestration into security and identity governance. In its Q2 2026 10-Q, the company says it acquired Armis, a cyber-exposure management and cyber-physical security provider, and Veza, an AI identity security platform with search, intelligence, monitoring, and workflows.
ServiceNow sells the Now Platform — a governed enterprise workflow control plane (IT, employee, customer, security/risk, AI agents). Otto (EX-99.1) is the unified AI front door that combines Now Assist + Moveworks + AI Experience; Autonomous Security fuses Armis (cyber-physical assets) + Veza (identity graph) + AI Control Tower.
- monetization model: Subscription SaaS (cloud); plus professional services/other. (10-K FY2024, Business; Acc. 0001373715-25-000006; sec.gov )
- revenue mix: FY2024 total revenues $10.984B: subscription ~$10.463B (~95%); professional services/other ~$0.521B (~5%). One reportable segment. (10-K FY2024, Revenue/Segment notes)
- who pays: Enterprise and government CIO/IT budget holders; line-of-business owners in customer service, HR, security, risk. (10-K FY2024, Business)
- margin_value_capture: FY2024 GAAP gross margin ~82% (subscription ~85%); GAAP operating margin ~11%; non-GAAP operating margin ~30%. (10-K FY2024, MD&A)
- customer classes: CISOs & Security Operations, Compliance & GRC Officers, Platform & Developer Teams, CIOs & IT Operations, Customer Service & HR Leaders, Public Sector Agencies. (10-K FY2024, Business; Acc. 0001373715-25-000006; sec.gov )
ServiceNow reports two revenue categories: subscription revenues and professional services and other revenues.
| Segment | FY2024 revenue | % of total revenue | Source |
|---|---|---|---|
| Subscription revenues | $10,646 million | 96.96% | [ServiceNow 10-K FY24, acc. 0001373715-25-000006, filed 2025-01-29, Item 8] |
| Professional services and other | $334 million | 3.04% | [ServiceNow 10-K FY24, acc. 0001373715-25-000006, filed 2025-01-29, Item 8] |
| Total revenues | $10,980 million | 100.00% | [ServiceNow 10-K FY24, acc. 0001373715-25-000006, filed 2025-01-29, Item 8] |
Calculation:
- Subscription mix: $10,646 / $10,980 = 96.96%
- Professional services mix: $334 / $10,980 = 3.04%
This mix is important. ServiceNow is not a low-margin services business. The revenue base is almost entirely subscription software, which changes the unit economics materially.
ServiceNow’s FY2023 total revenues were $8,971 million, and FY2024 total revenues were $10,980 million [ServiceNow 10-K FY24, acc. 0001373715-25-000006, filed 2025-01-29, Item 8].
Worked growth calculation:
\[
\text{FY2024 total revenue growth} = \frac{10,980 - 8,971}{8,971} = 22.4\%
\]
Subscription revenue grew from $8,680 million in FY2023 to $10,646 million in FY2024:
\[
\text{Subscription revenue growth} = \frac{10,646 - 8,680}{8,680} = 22.6\%
\]
This subscription growth rate is a load-bearing figure because it demonstrates the company is still gaining share or expanding existing accounts at a high rate. However, because both the numerator and denominator come from the same issuer’s 10-K, it is a directly verified primary-source fact rather than an independently cross-verified fact. I tag it single-source for the issuer’s own financial statement, which is acceptable under the instruction that directly verified primary-source facts may remain single-source.
ServiceNow primarily sells subscriptions to its Now Platform and workflow applications. Revenue is recognized ratably over the subscription term. Professional services are ancillary, usually implementation, configuration, training, or advisory work, and are recognized as services are delivered [ServiceNow 10-K FY24, acc. 0001373715-25-000006, filed 2025-01-29, Notes to Consolidated Financial Statements].
Who pays: enterprises and government entities pay ServiceNow directly or through partners for named-user subscriptions, usage-based entitlements, or a combination of both. The 10-K does not provide a published list price; pricing is negotiated enterprise software pricing. Therefore, any specific list-price figure is needs primary source validation.
The critical takeaway is that ServiceNow has a recurring subscription model with a small services layer, not a project-based services model. That matters because subscription gross margin is structurally higher than services margin.
From the Q4 2024 earnings release furnished as Exhibit 99.1 to the 8-K:
| Metric | Reported figure | Period | Source |
|---|---|---|---|
| GAAP subscription gross margin | 82% | Q4 2024 | [ServiceNow 8-K, acc. 0001373715-25-000005, filed 2025-01-29, Exhibit 99.1] |
| Non-GAAP subscription gross margin | 84% | Q4 2024 | [same] |
| GAAP total gross margin | 79% | Q4 2024 | [same] |
| Non-GAAP operating margin | 29.5% | Q4 2024 | [same] |
I do not use full-year GAAP operating margin here because I could not resolve the exact full-year percentage directly against the 8-K exhibit. That specific figure is needs primary source validation if needed for a model.
The subscription gross margin is load-bearing for the pricing-power and scalability argument. At 82% GAAP / 84% non-GAAP, incremental subscription revenue is highly profitable. That supports the view that ServiceNow can invest heavily in sales, marketing, and GenAI product development while still expanding operating margin.
However, this margin figure is from the issuer’s earnings release and not independently cross-verified by another unrelated source. Tagged single-source.
The 8-K reports current remaining performance obligations (cRPO) of $10.27 billion as of Q4 2024 [ServiceNow 8-K, acc. 0001373715-25-000005, filed 2025-01-29, Exhibit 99.1]. This is a forward revenue-visibility measure. It is not recognized revenue; it is contracted future revenue, including amounts not yet invoiced, expected to be recognized within 12 months.
Why cRPO matters: if cRPO growth remains strong while recognized revenue decelerates, the company may be building billings/renewals ahead of revenue recognition. If cRPO growth collapses while recognized revenue still looks fine, the market is probably misreading forward growth.
I used cRPO rather than total RPO because total RPO includes longer-dated contracts and can be more influenced by large multi-year renewals. The 8-K also reports total RPO, but I do not load a specific full-year cRPO growth rate here because the exact comparison value is needs primary source validation.
Because ServiceNow does not publish list prices, the following is an illustrative enterprise-customer unit model. It uses one measured issuer metric—Q4 2024 GAAP subscription gross margin of 82%—and several assumed inputs. Do not treat the $120 seat price or 1.5 product attach as verified. They are assumptions for sensitivity analysis.
Formula:
\[
\text{Annual subscription revenue} = \text{seats} \times \text{blended annual seat price} \times \text{product attach multiplier}
\]
\[
\text{Annual gross profit} = \text{Annual subscription revenue} \times \text{GAAP subscription gross margin}
\]
\[
\text{3-year gross profit} = 3 \times \text{Annual gross profit}
\]
Base assumptions:
| Parameter | Value | Source/Tier | Measured/Derived/Assumed | Cross-verified |
|---|---|---|---|---|
| Seats | 1,000 | Assumed, no primary source | Assumed | No |
| Blended annual seat price | $120 | Assumed, no primary source; ServiceNow does not publish list price | Assumed | No |
| Product attach multiplier | 1.5 | Assumed, typical enterprise multi-product footprint; not from 10-K | Assumed | No |
| GAAP subscription gross margin | 82% | ServiceNow 8-K acc. 0001373715-25-000005, Exhibit 99.1 | Measured | Single-source |
Calculation:
\[
\text{Annual subscription revenue} = 1,000 \times \$120 \times 1.5 = \$180,000
\]
\[
\text{Annual gross profit} = \$180,000 \times 82\% = \$147,600
\]
\[
\text{3-year gross profit} = 3 \times \$147,600 = \$442,800
\]
Sensitivity table:
| Scenario | Annual revenue | Annual gross profit | 3-year gross profit |
|---|---|---|---|
| $80 seat price, 1.5 attach | $120,000 | $98,400 | $295,200 |
| $120 seat price, 1.0 attach | $120,000 | $98,400 | $295,200 |
| $120 seat price, 1.5 attach | $180,000 | $147,600 | $442,800 |
| $180 seat price, 1.5 attach | $270,000 | $221,400 | $664,200 |
| $120 seat price, 2.5 attach | $300,000 | $246,000 | $738,000 |
This calculation is not a claim about ServiceNow’s realized average selling price. It is a sensitivity model to show how the subscription gross-margin structure converts incremental seat/product expansion into gross profit. The load-bearing financial input—82% subscription gross margin—is single-source from the 8-K.
Switching cost is one of the main pricing-power arguments for ServiceNow. Enterprise IT workflows are embedded through custom fields, integrations, service catalogs, integrations with identity/ITSM ecosystems, and employee/customer-facing service portals. Moving off ServiceNow is not simply a software cancellation.
Formula:
\[
\text{Switching cost} = \text{internal migration labor} + \text{external implementation} + \text{dual-run overlap}
\]
Inputs:
| Parameter | Value | Source/Tier | Measured/Derived/Assumed | Cross-verified |
|---|---|---|---|---|
| Internal migration hours | 800 hours | Assumed, analyst model | Assumed | No |
| Fully-loaded software developer wage | $63.60/hour | Derived from BLS median annual wage for software developers, $132,270 / 2,080 hours | Derived | No |
| External implementation support | $150,000 | Assumed, analyst model | Assumed | No |
| Dual-run overlap | $45,000 | Derived: 3 months of $180,000 annual subscription = $45,000 | Derived | No |
BLS source: U.S. Bureau of Labor Statistics, Occupational Outlook Handbook, “Software Developers, Quality Assurance Analysts, and Testers,” accessed 2026-05-02. The OOH reports a median annual wage of $132,270 for software developers [BLS OOH, URL in Sources].
Internal migration labor:
\[
800 \text{ hours} \times \$63.60/\text{hour} = \$50,880
\]
External implementation:
\[
\$150,000
\]
Dual-run overlap:
\[
\$180,000 \times \frac{3}{12} = \$45,000
\]
Total estimated switching cost:
\[
\$50,880 + \$150,000 + \$45,000 = \$245,880
\]
Compare that to the three-year gross profit a vendor would lose if the customer churned:
\[
3\text{-year gross profit} = \$442,800
\]
Interpretation: the customer’s hard switching cost is roughly 55% of the three-year gross profit ServiceNow would lose. That does not include lost productivity during migration, political/IT governance switching costs, or the risk of business disruption. This is directionally consistent with pricing power, but the non-issuer inputs are assumptions and should not be used for precision.
ServiceNow’s 10-K does not name its top end customers by name. The filing does not disclose a list of largest customers. I did not identify any top-customer names in the 10-K or the Q4 8-K reviewed.
The 10-K does contain the standard issuer statement that no single customer accounted for more than 10% of total revenues. That statement is in the revenue-concentration risk disclosure [ServiceNow 10-K FY24, acc. 0001373715-25-000006, filed 2025-01-29, Item 1A/Notes to Financial Statements]. I treat the exact location as “Item 1A risk factor / revenue concentration note” for citation purposes; if the exact exhibit page differs, the substance is still issuer-filed and source-bound.
I will not invent a customer list. For customer archetypes, I rely on the business description and risk-factor disclosures in the 10-K.
From the 10-K business and risk sections, ServiceNow sells primarily to large enterprises, government entities, and upper-mid-market organizations [ServiceNow 10-K FY24, acc. 0001373715-25-000006, filed 2025-01-29, Item 1/Item 1A].
Buyer archetypes include:
- CIO/IT operations leaders — for ITSM, ITOM, ITAM, DevOps, and service desk modernization.
- HR and employee-experience leaders — for employee service delivery, HR case management, and workflow automation.
- Customer service/operations leaders — for customer service management and front-office-to-back-office workflows.
- Security and risk leaders — for security incident response, vulnerability management, and GRC.
- Business-unit leaders and “citizen developers” — for low-code App Engine applications built on the Now Platform.
- Public-sector procurement and mission-owner organizations — federal, state, local, and regulated entities.
The filing describes exposure to the public sector and highly regulated industries, which creates revenue durability but also procurement risk and government spending cycles [ServiceNow 10-K FY24, acc. 0001373715-25-000006, filed 2025-01-29, Item 1A].
I did not find named top customer logos in the 10-K or the Q4 8-K. ServiceNow does not present a customer list in the reviewed primary filings. Therefore, I will not supply a list of top customers.
The only customer-concentration evidence I rely on is the risk disclosure that no single customer represented more than 10% of total revenues [ServiceNow 10-K FY24, acc. 0001373715-25-000006, filed 2025-01-29, Item 1A]. That is a negative disclosure; it does not name a customer.
If a conviction score requires named customer logos, treat this as needs primary source validation and do not substitute a third-party customer list.
FY2025 revenue was $13.278B (+20.9% YoY vs FY2024 $10.984B), with gross profit $10.295B (77.5% gross margin) and operating income $1.824B (13.7% operating margin). In Q2 2026, total revenue was $3.987B (+24% YoY), subscription revenue was $3.877B, current RPO was $13.20B (+21% YoY), and RPO was $29.0B (+21% YoY). Sources: SEC companyfacts JSON — data.sec.gov ; Q2 2026 EX-99.1 earnings release — sec.gov
FY2025 revenue was $13.278B (+20.9% YoY). In Q2 FY2026, revenue was $3.987B (+24.0% YoY), subscription revenue was $3.877B, gross profit was $2.818B (derived 70.7% gross margin), and operating income was $162M (derived 4.1% operating margin). H1 FY2026 revenue was $7.757B, gross profit was $5.648B, and operating income was $665M. Q2 cRPO was $13.20B, RPO was $29.0B, the company had 658 customers with >$5M ACV, and it logged 123 transactions over $1M in net new ACV. Sources: SEC companyfacts JSON — data.sec.gov ; Q2 FY2026 EX-99.1 release — sec.gov
As of June 30, 2026, ServiceNow reported $29.0B in RPO, with 46% of that in cRPO, and both RPO and cRPO were up 21% YoY. The implied cRPO is about $13.3B, consistent with the Q2 earnings release. Source: Q2 2026 10-Q — sec.gov ; Q2 2026 EX-99.1 — sec.gov
- Q2 2026 revenue $3.987B (+24% YoY); subscription $3.877B (+24.5% YoY) = 97.2% of revenue.
- Q2 GAAP gross profit $2.818B → 70.7% GM (FY2025 was 77.5% on $13.278B / $10.295B).
- Q2 GAAP operating income $162M → 4.1% OM (FY2025 13.7%; Q2 2025 $358M, −55% YoY).
- H1 2026 revenue $7.757B, GP $5.648B (72.8% GM), OI $665M (8.6% OM).
- cRPO $13.20B / RPO $29.0B (both +21% YoY); 46% of RPO is cRPO (10-Q).
- 658 customers with ACV >$5M (vs 533 a year earlier); 123 transactions >$1M net-new ACV in Q2.
- Renewal rate 98% for Q2 and H1 2026 (and 2025).
- AI ACV crossed $1B in Q2 (EX-99.1).
- Q3 2026 guide: subscription $3.975–$3.980B (20.5% YoY / 20% cc); FY2026 subscription $15.760–$15.780B (22.5% / 21% cc); non-GAAP OM 31.5%, FCF margin 35% (EX-99.1).
- Next earnings: 28 Oct 2026 after close (confirmed calendar; no Q3 8-K yet).
Once workflow logic, integrations, and governance rules are embedded in the control plane, replacing the platform means rebuilding business process plumbing, not just changing a UI. The moat is accumulated operational dependency across IT, employee, customer, and automation workflows.
The platform compounds because every new workflow, approval rule, integration, and AI action becomes part of the customer’s operating graph. Replacing ServiceNow means re-building business process plumbing and revalidating controls, not merely swapping SaaS vendors.
The moat is no longer just workflow gravity; it is now workflow plus security plus identity graph lock-in. Replacing ServiceNow would require re-platforming approvals, audit trails, identity controls, and now security-response workflows while keeping enterprise operations live.
ServiceNow is a high-margin enterprise-software platform business whose revenue is overwhelmingly subscription-based. The company is attempting to consolidate multiple enterprise workflows—IT service management, IT operations, HR, customer service, security, and low-code application development—onto one platform. The investment case rests on: high subscription gross margin, long-duration recurring revenue, revenue growth faster than large enterprise-software peers, and high switching costs created by workflow configuration and integrations. The main risks are price compression, platform fatigue, AI-driven disruption of traditional IT service management, and public-sector/enterprise contract cycles.
This is not a risk-free “needs no proof” story. The strongest primary-source evidence for the thesis is the subscription revenue line and current remaining performance obligations (cRPO), both reported in ServiceNow’s SEC filings. The strongest disconfirming evidence would be a material deceleration in cRPO growth or a decline in subscription gross margin, since those would signal that pricing power or renewal/expansion momentum has broken before it fully appears in recognized revenue.
Q2 2026 cRPO was $13.20B and ServiceNow had 658 customers with more than $5M in ACV. That implies roughly $20.1M of cRPO per large-customer estate ($13.2B / 658). That is not a literal switching fee, but it is a good proxy for the scale of committed workflow spend a large enterprise must unwind before a migration can finish. The changeover cost also includes parallel run, re-integration, and retraining; in practice, the friction is measured in tens of millions for the larger estates, not in seat replacement.
- 658 customers with more than $5M ACV in Q2 2026; 123 transactions over $1M in net new ACV. Source: Q2 2026 EX-99.1 release — sec.gov
- AI crossed $1B annual contract value in Q2 2026. Source: Q2 2026 EX-99.1 release — sec.gov
- FY2025 revenue $13.278B, gross margin 77.5%, operating margin 13.7%. Source: SEC companyfacts JSON — data.sec.gov
- Competition includes Microsoft, Oracle, SAP, Salesforce, Workday, plus custom-developed / in-house solutions and AI point solutions. Source: FY2025 10-K competition section — sec.gov
- Q2 FY2026 revenue of $3.987B and subscription revenue of $3.877B show the platform is still monetizing at scale. Source: Q2 FY2026 EX-99.1.
- Q2 FY2026 cRPO of $13.20B and RPO of $29.0B provide multi-year visibility. Source: Q2 FY2026 EX-99.1.
- 658 customers now exceed $5M ACV, and the quarter produced 123 >$1M net-new ACV transactions, showing that the moat is greatest in large estates. Source: Q2 FY2026 EX-99.1.
- ServiceNow said AI crossed $1B in annual contract value, confirming that AI monetization is attaching to the workflow control plane rather than sitting outside it. Source: Q2 FY2026 EX-99.1.
- The FY2025 10-K competition section names Microsoft, Oracle, SAP, Salesforce, Workday, custom-developed/in-house systems, and AI point solutions, confirming the control-plane battleground. Source: FY2025 10-K — sec.gov
The cleanest public switching-cost proxy is committed workflow spend per large estate. With $13.20B of cRPO across 658 customers above $5M ACV, the implied cRPO per large-customer estate is about $20.1M. Total RPO per large estate is about $44.1M. Even a partial migration therefore implies a very large parallel-run / re-integration burden before a buyer can retire the old stack.
- Armis acquired for ~$7.6B cash; ServiceNow says the deal expands security workflow offerings and advances AI-native, proactive cybersecurity and vulnerability response across connected devices. Source: Q2 2026 10-Q — sec.gov
- Veza acquired for ~$1.2B cash; ServiceNow says it extends security and risk portfolios into identity security. Source: Q2 2026 10-Q — sec.gov
- RPO $29.0B with 46% cRPO implies about $13.3B of revenue already contracted for the next 12 months, reinforcing a large committed estate. Source: Q2 2026 10-Q — sec.gov
- The Q2 release also previously showed 658 customers >$5M ACV and AI >$1B ACV, so the new security/identity acquisitions are being layered onto an already large workflow base. Source: Q2 2026 EX-99.1 — sec.gov
- Autonomous Security / AI Center for Cyber Defense launched Aug 4, 2026, bringing Armis + Veza into a unified cyber-defense layer for assets, identities, and AI agents (Source: @ServiceNowNews, 2026-08-04; Black Hat USA).
- 8 of 12 announced Autonomous Security functions were available at launch; the remaining 4 are expected December 2026 (Source: X / launch coverage).
- The AI Control Tower (AICT) passed 500 customers in ~6 months, with agentic AI deployments up 9x in nine months; AICT ACV is on pace to approach or exceed ~$500M against total AI ACV already above $1B (Source: X analyst/investor posts; total AI ACV $1B confirmed by Q2 EX-99.1).
- ServiceNow signed multi-year agreements with OpenAI (Jan 2026) and Anthropic (Feb 2026): Claude is the default for building agent workflows, OpenAI powers voice/multimodal; ServiceNow governs/orchestrates rather than building foundation models (Source: X / BuildWithYar, 2026-08).
| Parameter | Value | Source | Confidence |
|---|---|---|---|
| Q2 2026 revenue / subscription | $3.987B / $3.877B | EX-99.1 + companyfacts | measured |
| Q2 GAAP GM / OM | 70.7% / 4.1% | companyfacts ($2.818B GP, $162M OI) | derived |
| FY2025 revenue / GM / OM | $13.278B / 77.5% / 13.7% | companyfacts | measured |
| Q2 SBC / amort. / deal costs / severance | $655M / $219M / $75M / $62M | 10-Q non-GAAP bridge | measured |
| Q2 SBC as % of revenue | 16.4% | $655M ÷ $3.987B | derived |
| Non-GAAP OM (Q2) | 29.5% | EX-99.1 | measured |
| cRPO / RPO | $13.20B / $29.0B | 10-Q + EX-99.1 | measured |
| Customers >$5M ACV | 658 (vs 533) | 10-Q | measured |
| cRPO per large estate | $20.06M | $13.20B ÷ 658 | derived |
| Renewal rate | 98% | 10-Q | measured |
| AI ACV | >$1B | EX-99.1 | measured |
| Moveworks consideration | $2.407B | 10-Q Note 5 | measured |
| Veza net assets acquired | $1.237B | 10-Q Note 5 | measured |
| Armis consideration / allocation | ~$7.6B cash / $7.637B | 10-Q Note 5 | measured |
| Three-deal stack | $11.281B | sum of allocations | derived |
| Cost-of-moat / AI ACV | 11.3× | $11.281B ÷ $1.0B | derived |
| Cost-of-moat / cRPO | 0.85× | $11.281B ÷ $13.20B | derived |
| Goodwill / intangibles (30 Jun 2026) | $9.837B / $3.781B | companyfacts + 10-Q BS | measured |
| Long-term debt / short-term debt | $5.435B / $2.082B | 10-Q BS | measured |
| Q2 interest expense | $66M (vs $6M Q2 2025) | 10-Q Note 11 | measured |
| FY26 sub guide | $15.760–$15.780B | EX-99.1 | measured |
| Q3 2026 sub guide | $3.975–$3.980B (20.5% YoY) | EX-99.1 | measured |
| Sweep.io | S-8 2026-08-20; 177,896 shares assumed | S-8 | measured (consideration unknown) |
| Q3 earnings date | 28 Oct 2026 AMC | earnings calendar | inferred |
The 08-22 note still cited FY2025 77.5% GM / 13.7% OM. Q2 2026 GAAP is 70.7% / 4.1%. The bridge is not a demand collapse (sub +24.5%, cRPO +21%, 98% renewal) — it is acquisition accounting + AI compute + severance:
- SBC $655M = 16.4% of Q2 revenue (management target: <10% of revenue by 2029, EX-99.1).
- Purchased-intangible amortization $219M = 5.5% of Q2 revenue (vs $25M / ~0.8% a year ago).
- Deal costs $75M + severance $62M in Q2; H1 severance $80M.
- Debt: long-term $5.435B + commercial paper $2.082B = $7.517B vs YE2025 long-term $1.491B (Armis funded with a $4.0B term loan in April, refinanced into $4.0B senior notes in May; 10-Q Note 11). Q2 interest $66M vs $6M.
- Cash $2.503B vs $3.726B YE2025. H1 buybacks $2.225B.
- GAAP operating income −55% YoY on +24% revenue.
Non-GAAP OM held at 29.5% (EX-99.1). The cash engine is intact; the GAAP engine is not. That split is the 2026–2027 debate.
ServiceNow’s bottleneck is enterprise workflow orchestration under governance constraints. AI can generate recommendations, but ServiceNow’s value is in turning those recommendations into controlled actions across heterogeneous systems while preserving continuity and compliance.
- The 10-K says ServiceNow’s platform automates workflows, integrates systems, and supports secure, reliable tools for managing AI risk and operational continuity. That is the architectural moat: execute across systems, not just advise.
- The 10-K competition section lists Microsoft, Oracle, SAP, Salesforce, Workday, custom-developed and in-house solutions, and AI point solutions — evidence that the company competes at the enterprise control-plane layer where switching requires re-integration, not just feature parity.
- In Q2 2026, ServiceNow said AI crossed $1B in annual contract value, which indicates the platform is being monetized as a workflow control layer rather than a narrow ITSM tool.
Enterprise workflow gravity. The platform sits where work is routed, approved, audited, and automated; that embedded process graph is harder to replace than any single application module.
Enterprise workflow gravity. ServiceNow owns the routable layer where work is approved, audited, and automated; that embedded process graph is expensive to unwind because a replacement must recreate permissions, integrations, policy logic, and historical context while keeping operations running.
Enterprise trust graph gravity. The real moat is the combination of permissions, approvals, security workflow, and historical audit context; each acquisition deepens the cost of unwinding the control plane.
| Test | Score | Evidence |
|---|---|---|
| Q1 Bypass | 2 (PARTIAL) | Substitutes exist (Microsoft Dynamics/Copilot Studio, Salesforce Service Cloud, SAP, in-house) — the FY2025 10-K names Microsoft/Oracle/SAP/Salesforce/Workday as competitors — but switching cost is high: 658 customers >$5M ACV ⇒ ≥$3.29B committed large-estate ACV, 98% renewal rate, 1000+ integrations, ~$20.1M cRPO per large estate ($13.2B ÷ 658). 6–12+ month disruption. |
| Q2 Concentration | 3 (PASS) | Dominant ITSM/enterprise-workflow category position + demonstrated pricing power: 77.5% gross margin (≥65% doctrine threshold, measured via companyfacts), 98% renewal, $29.0B RPO, 123 transactions >$1M net-new ACV in Q2. |
| Q3 Hyperscaler | 2 (PARTIAL) | Microsoft (Dynamics 365, Power Platform, Copilot Studio) has an announced/GA competitor, but it is a build-your-own platform rather than a governed workflow control-plane equivalent; ServiceNow is deeply complementary — runs on Azure/AWS, multi-year agreements with OpenAI (Jan 2026) and Anthropic (Feb 2026). 2–4 year window. |
Composite = 2 + 3 + 2 = 7 → STRONG PROXY. Passes Q2 cleanly with Q1/Q3 partial. The hyperscaler exposure (Q3) is the binding constraint, consistent with the doctrine's DT guidance ("most DT score 4-6; hyperscaler exposure is the binding constraint") — ServiceNow lands at the top of that range because its workflow-control-plane + AI-governance + security/identity (Armis $7.6B + Veza $1.2B) moat is deeper than standalone DT point-tools.
The binding constraint is not ITSM seats. It is the number of governed domains a replacement must unwind at once — workflow graph + AI-agent control tower + cyber-physical asset inventory (Armis) + identity/authorization graph (Veza) + conversational front door (Moveworks/Otto). The quantitative test is whether $11.3B of disclosed acquisition consideration earns its keep against $1B of AI ACV and $13.2B of cRPO, or whether it is just GAAP-margin destruction.
10-Q Note 5 purchase-price allocations (in millions, measured):
| Deal | Close | Consideration | Goodwill | Intangibles | Net assets acquired |
|---|---|---|---|---|---|
| Moveworks Inc. | 2025-12-15 | $2,407 (stock $1,467 + cash $905 + loan settle $31 + SBC $4) | $1,748 | $770 | $2,407 |
| Veza Technologies | 2026-03-02 | $1,237 (allocation) | $826 | $356 | $1,237 |
| Armis Security Ltd. | 2026-04-20 | ~$7.6B cash / allocation $7,637 | $5,323 | $2,530 | $7,637 |
| Three-deal stack | $11.281B | $7.897B | $3.656B |
The 08-15/08-22 notes used Armis+Veza only (~$8.8B) and omitted Moveworks. That understated the cash-and-stock deployed to extend the control plane by $2.407B / 21%.
- product_service: ServiceNow AI Platform / Now Platform for enterprise workflow automation and service management. (10-K FY2024, Business; Acc. 0001373715-25-000006; sec.gov )
- technical function: Cloud SaaS with CMDB, workflow engine, AI/ML, low-code app development, integrations; automates IT, customer, employee, security, GRC workflows. (10-K FY2024, Business)
- why it is hard: Single system of record/CMDB, deep integrations, process/data lock-in, suite breadth, enterprise scale/compliance, high switching costs. (10-K FY2024, Business/Risk Factors)
- substitutes: BMC, Microsoft, Oracle, SAP, Salesforce, Workday, homegrown/point ITSM tools. (10-K FY2024, Risk Factors)
- pricing power: HIGH — ~95% subscription mix, 98% renewal rate, ~85% subscription gross margin. (10-K FY2024, Business/MD&A)
ServiceNow sells the Now Platform, which is a single data-model platform for workflow automation, digital workflow applications, and enterprise service management. The 10-K business description lists the core product areas as [ServiceNow 10-K FY24, acc. 0001373715-25-000006, filed 2025-01-29, Item 1]:
- IT Service Management (ITSM) — incident, problem, change, request, and asset management.
- IT Operations Management (ITOM) — discovery, service mapping, event management, AIOps.
- Strategic Portfolio Management — project, portfolio, and application portfolio management.
- IT Asset Management — hardware/software asset tracking and compliance.
- Security Operations and Governance, Risk & Compliance — security incident response, vulnerability response, risk workflows.
- HR Service Delivery — employee service center, case management, onboarding, and HR workflows.
- Workplace Service Delivery — facilities, space, and workplace requests.
- Customer Service Management — customer service workflows that connect front office to back office.
- App Engine / low-code development — custom workflow applications built on the Now Platform.
- Automation Engine / Integration Hub — process automation and third-party integration.
- Now Assist / generative AI — AI-assisted summarization, search, virtual agent, and workflow generation.
This is not a single-product company. The economic moat at the firm level is less about any one module and more about the installed platform footprint: once an enterprise has moved multiple workflows onto the Now Platform, expansion selling becomes easier and migration becomes harder.
The technical function is to provide a common data model, service catalog, workflow engine, integration layer, and reporting/analytics capability. Employees, customers, and agents interact through service portals or virtual agents; workflows route requests to the appropriate resolving team or automated process. The platform is delivered primarily as a cloud subscription, with federal/regulated environments available on dedicated or compliant cloud offerings [ServiceNow 10-K FY24, acc. 0001373715-25-000006, filed 2025-01-29, Item 1].
The single data model is the key technical feature. It allows an IT incident, an HR case, a security event, and a customer complaint to be modeled as records on the same platform, reducing integration friction across silos.
Substitutes include:
- Legacy on-premises IT service management tools from BMC, Broadcom/CA, Micro Focus/OpenText, and IBM.
- Point SaaS tools such as Atlassian Jira Service Management, Zendesk, Freshworks, and Salesforce Service Cloud.
- Platform competitors such as Microsoft Dynamics/Power Platform, Salesforce, Oracle, SAP, and IBM.
- Custom-built internal applications on general-purpose low-code or cloud-native tooling.
- Pure-play DevOps/observability tools that, over time, add service-management capabilities.
The 10-K competition risk factor names large enterprise-software vendors and more focused cloud/ITSM vendors as competitors [ServiceNow 10-K FY24, acc. 0001373715-25-000006, filed 2025-01-29, Item 1A]. I do not have a directly accessible independent market-share report to rank ServiceNow against all substitutes; therefore, any market-share claim is needs primary source validation.
ServiceNow is hard to replicate for several reasons:
- Configuration depth — enterprises spend years building workflows, service catalogs, integrations, and custom applications on the platform. The switching-cost calculation above quantifies a conservative lower bound.
- Installed account base — large enterprises and governments have multi-year, multi-product contracts and institutional knowledge built around ServiceNow administration.
- Ecosystem and certified administrators — the implementation-partner and certified-professional ecosystem creates a labor market around the platform. This is not directly measured in the 10-K, so I do not assign a numeric moat score; the source-bound claim is that the platform is embedded in customer IT/HR/security operations.
- Compliance and public-sector requirements — government contracts require security certifications, FedRAMP/IL4-IL5 compliance, and procurement-specific deployments, which creates switching friction [ServiceNow 10-K FY24, acc. 0001373715-25-000006, filed 2025-01-29, Item 1A].
ServiceNow does not disclose list pricing, so pricing power must be inferred from:
- High subscription gross margin: 82% GAAP / 84% non-GAAP in Q4 2024 [ServiceNow 8-K, acc. 0001373715-25-000005, filed 2025-01-29, Exhibit 99.1]. If customers had strong leverage over price, subscription gross margin would likely be lower.
- High renewal/expansion visibility: current remaining performance obligations of $10.27 billion [same]. This suggests customers are locked into future subscription commitments.
- Multi-product expansion: the business model is built on landing with one workflow, such as ITSM, and expanding into HR, security, customer service, or custom apps. Product attach expansion matters because it increases revenue per account without a proportional increase in implementation cost.
However, pricing power is not directly observed in the public filings. The margin and cRPO evidence is consistent with pricing power but does not prove pricing power by itself. Tag single-source / inferred.
ServiceNow’s own 10-K says the market is “highly competitive and rapidly evolving,” with “low barriers to entry” and frequent new AI products from incumbents and entrants. The moat is therefore not patent-exclusive; it depends on continued integration depth, governance credibility, and customer expansion into adjacent workflows.
- Microsoft, Salesforce, SAP, Oracle, Workday, and in-house tools can compress workflow control points and slow seat expansion.
- AI point solutions may erode module-level pricing if customers buy recommendation layers without adopting the full workflow stack.
- If AI monetization stays bundled rather than standalone, revenue growth could outrun margin expansion without deep lock-in.
- Microsoft, Salesforce, Oracle, SAP, and Workday can bundle adjacent workflow modules and compress the control plane.
- AI point solutions may capture the recommendation layer while leaving less budget for the full governed workflow stack.
- The 10-K explicitly notes intense competition and low barriers to entry, so the moat depends on continued integration depth and operational credibility.
- Armis and Veza integration risk: the moat expands only if the acquired platforms become one operating graph rather than two expensive product islands.
- Microsoft, Salesforce, Oracle, SAP, Workday, and point solutions still attack adjacent control points and can compress module-level pricing.
- SBC remains ~15% of revenue (management targets <10% by 2029) — a real dilution overhang on the equity.
- Q2 GAAP operating margin compressed to ~4% (AI compute + $8.8B M&A goodwill/intangibles/debt); if Autonomous Security does not convert to durable ARR, the moat is capital deployed without economic return.
- Integration risk: Armis + Veza become a moat only if they fuse into one operating graph; as two product islands they are expensive line items, not switching friction.
- Long-horizon bear case: agentic AI that reduces SaaS seat budgets could compress the core workflow franchise even as AICT grows.
a cluster of Form 4 insider sales filed Aug 11–19, 2026 (12+ insiders, post-earnings window, likely 10b5-1). Not disqualifying, but a real supply overhang to flag alongside the existing SBC ~15%-of-revenue overhang (management targets <10% by 2029).
- Cost of moat 11.3× AI ACV. If AI ACV does not scale toward the long-term “30% of ACV from AI by 2030” target (EX-99.1), the $11.3B is stranded goodwill ($9.837B already on the sheet).
- GAAP OM −55% YoY while revenue +24%. If non-GAAP OM also breaks (Q3 guide 31% / FY 31.5%), the cash engine is no longer intact.
- Q3 guide decelerates to +20.5% and management pulled federal on-prem revenue forward into Q2. A Q3 miss vs $3.975B is the near-term invalidator.
- SBC 16.4% of Q2 revenue vs <10% by 2029 target. Dilution is a second tax on the equity alongside $7.5B of new debt.
- Sweep.io S-8 (20 Aug 2026) — another tuck-in while three large deals are still being integrated. Serial M&A is the bear case (product islands, not one graph).
- Hyperscaler Q3 = PARTIAL is the binding toll-road constraint. Microsoft Agent 365 / Copilot Studio can compress the conversational + workflow layer even if Armis/Veza stay unique.
- No disclosed value → framework, not revenue; sovereign deployments routinely stall or under-deliver vs. the headline.
- Build-vs-buy reversion risk: Aramco Digital is itself an "Industrial AI company" building "Digital Platforms" and "Digital Industrial Solutions." A sovereign partner that is also a platform builder can internalize the workflow layer over 3–5 years.
- Sovereign-cloud competition: Saudi sovereign-cloud ambitions (SDAIA, NEOM) plus incumbent hyperscaler regions (Oracle/Google in-Kingdom) mean ServiceNow runs on top of a sovereign stack it does not control — the same Q3 hyperscaler-exposure logic, now in the Gulf.
- Q3 guide decelerates to +20.5% with federal on-prem pulled forward into Q2 (09-05 block) — the near-term invalidator is unchanged by a Saudi logo.
- No 8-K for the agreement (submissions CIK 0001373715 shows no item 1.01/8.01 filing) — consistent with a non-material framework, and the reason this stays a catalyst-refresh, not a re-rating.
Hypothesis verdict: INTACT (unchanged). The Aramco agreement is a positive-but-non-material sovereign revealed-preference signal: it validates the workflow-control-plane moat at national scale (and adds a Gulf sovereign beachhead) but contributes no disclosed economics, so scores are unchanged and the thesis is not re-rated. The durable output of this pass is (a) the primary-sourced catalyst capture the 09-05 block missed, and (b) execution of the integer ts/ec/ttm writeback that pass documented but did not land.
This section defines what would prove the thesis wrong. These are the failure conditions to monitor before the next filing.
The thesis relies on forward revenue visibility. If cRPO growth drops significantly while reported revenue still looks acceptable, the market is seeing a forward slowdown before the income statement reflects it. This is the earliest primary-source warning signal.
ServiceNow reported Q4 2024 GAAP subscription gross margin of 82%. If competition, public-sector pricing, or GenAI-related delivery costs push subscription gross margin down materially, the unit economics in the worked calculation become less attractive. A decline to the high-70s would not automatically break the thesis, but it would weaken the pricing-power argument.
ServiceNow is durable because it is a subscription business, not a services business. If professional services revenue grows faster than subscription revenue and becomes a larger share of total revenue, it could indicate that customers are buying more custom work and less standardized cloud software, or that platform adoption is becoming more complex. That would reduce the quality of the revenue mix.
The current cross-issuer comparison shows ServiceNow subscription growth of 22.6% versus Salesforce subscription and support growth of 9%. If Salesforce, Microsoft, or Atlassian reports materially faster progress in overlapping workflow/ITSM accounts, and ServiceNow’s subscription growth slows below 15%, the “share gain and platform consolidation” thesis would be contradicted.
ServiceNow’s 10-K states no single customer accounted for more than 10% of total revenues. If future filings disclose a 10% customer or greater government concentration, the risk profile changes because large contract losses would matter more.
The current model still depends on enterprise subscriptions. If enterprises successfully replace seat-heavy ITSM/service-desk usage with AI agents that require fewer human users, and ServiceNow does not monetize consumption or outcomes effectively, price pressure could appear even if renewal rates remain high. This would show up first in subscription gross margin, cRPO growth, or total seats/expansion metrics—none of which can be assumed away from the current 8-K.
If the EDGAR accession numbers or exhibit references in this note do not resolve in the reader’s EDGAR lookup, the affected financial claims must be treated as needs primary source validation until confirmed directly. Do not use unverified numbers in conviction scoring.
- What portion of the $1B AI ACV is attach to existing workflow estates versus net-new workflows?
- Does the next quarter show continued cRPO expansion without slowing large-customer additions?
- Is there a public product/spec document that isolates the most defensible workflow primitives (identity, orchestration, policy, audit) more cleanly than the 10-K does?
- What share of the $1B AI ACV is attach to existing workflow estates versus net-new workflow creation?
- How concentrated is the $29.0B RPO among the largest accounts, and how much of it is sticky multi-year renewal versus expansion optionality?
- How fast can ServiceNow unify Armis and Veza into the core platform without fragmenting the user and data model?
- How much of the $1B+ AI ACV is attached to existing workflow estates versus truly new governance demand?
- What is Sweep.io consideration, and does the Q3 10-Q size it? (S-8 is silent.)
- What share of the $1B AI ACV is Otto/Moveworks vs Assist attach vs Autonomous Security?
- Does Q3 cRPO hold 19.5–20% (guide) after the Q2 federal pull-forward?
- Does a follow-on 8-K/contract disclosure attach a value to the Aramco deployment (or is it pure framework)?
- Does the sovereign beachhead convert into disclosed Gulf ARR within 24 months, or stay a logo?
- Will Aramco Digital's own platform-build ambitions make it a customer, a competitor, or both by 2028?
STRENGTHENED. The business is still broadening its workflow control plane, AI monetization is visible in ACV, and recurring revenue is large enough that the switching burden for enterprise estates remains substantial.
STRENGTHENED. The quarter shows the workflow-control-plane thesis is still compounding: revenue is growing at a high-20s/low-20s pace, cRPO remains large, and AI monetization is now material enough to be visible in ACV.
STRENGTHENED. The 10-Q shows ServiceNow is using cash-heavy M&A to widen the moat from workflow orchestration into security and identity governance, which raises switching costs and broadens the control-plane thesis.
STRENGTHENED — the Autonomous Security launch and AICT's 500-customer traction confirm ServiceNow is extending its workflow control plane into AI governance + security, which raises the number of domains a replacement must unwind and deepens the switching-cost moat.
STRENGTHENED (unchanged). Toll-road 7 STRONG PROXY = eligible for live capital at ≤10% max position (Tier 2), but the hyperscaler Q3 = PARTIAL means the moat is defensible-with-a-window, not unassailable.
INTACT (was STRENGTHENED on 08-22). The workflow-control-plane thesis is not broken — 98% renewal, +21% cRPO, 658 large estates, AI ACV >$1B. It is also not strengthening this pass: the omitted Moveworks $2.407B makes the moat more expensive (11.3× AI ACV, not 8.8×), GAAP capture deteriorated, and Q3 growth is guided down. Strengthening would require Q3 to hold ~20%+ sub growth and show Armis/Veza/Moveworks attaching into Otto ACV rather than sitting as amortization.
Sources
16 sources preserved from the latest qualified research update.
- sec.govsec.govOpen source ↗
- data.sec.govdata.sec.govOpen source ↗
- sec.govsec.govOpen source ↗
- sec.govsec.govOpen source ↗
- x.comx.comOpen source ↗
- x.comx.comOpen source ↗
- x.comx.comOpen source ↗
- x.comx.comOpen source ↗
- data.sec.govdata.sec.govOpen source ↗
- sec.govsec.govOpen source ↗
- newsroom.servicenow.comnewsroom.servicenow.comOpen source ↗
- sec.govsec.govOpen source ↗
- sec.govsec.govOpen source ↗
- sec.govsec.govOpen source ↗
- sec.govsec.govOpen source ↗
- bls.govbls.govOpen source ↗