Executive Summary
geneworks.ai is an agentic platform that runs the full ServiceNow delivery lifecycle, requirement to release, rather than assisting a person through it. That distinction is the whole proposition. A code assistant makes an individual developer faster. geneworks.ai executes the delivery cycle itself: it plans the work, produces a reviewable technical design, builds the configuration in dependency order, tests it autonomously against both ATF and the live user interface, captures the evidence as it runs, and hands back a scoped update set for the customer’s normal promotion path.
The platform runs 152 specialist agents inside an SDLC-governed loop with two mandatory human gates: design review before build, and evidence review before deploy. Neither gate is configurable. Nothing reaches a customer instance without a named human accountable for the decision and the evidence to support it.
The platform carries more than 500 encoded ServiceNow skills — delivery patterns, standards, controls and testing rules captured once and reusable across every engagement. This is the mechanism by which an integrator’s methodology stops being documentation and becomes executable.
geneworks.ai is built outside ServiceNow deliberately. That choice lets it scale past the platform’s own execution limits, adapt to the customer’s standards rather than impose ours, and stay model-agnostic across Claude, OpenAI, Gemini and successor frontier models. The customer keeps full control of how and where AI touches their instance. Nothing is installed into the customer’s ServiceNow environment. The platform is delivered as a managed subscription running on a dedicated, single-tenant environment for each customer; Section 3 sets out the deployment options.
Alongside those figures, modelled pending a named reference engagement: 50–60% faster build cycles, 25–40% lower managed-services run cost and approximately 35% fewer human hours per engagement. A CMDB assessment that conventionally takes four to five weeks is modelled to complete in under an hour, and upgrade cycles from months to weeks, at roughly one tenth the token cost of comparable agentic approaches.
Delivery stops being labor you buy by the hour and becomes execution you can prove.
1.1The problem it addresses
Every ServiceNow change runs the same cycle: plan it, build it, test it, sign it off, and find out later what broke. At enterprise scale, that cycle carries structural cost in five places. Each of the five is repetitive, rule-governed and verifiable, which is precisely what makes it automatable under governance.
| Where the cost sits | What it looks like today |
|---|---|
| Design and impact analysis | Requirements sit in queues. Nobody can see what a change will break until it breaks. Blast radius lives in the heads of a few senior people, and impact assessment is reconstructed by hand each time. |
| Build capacity | Senior platform engineers spend their days on routine configuration and release paperwork. Delivery throughput is capped by the availability of the most expensive people in the practice. |
| Testing and UAT | Manual UAT burns SME time. Regression coverage is inconsistent. Audit evidence is assembled retrospectively by hand, at the moment someone asks for it. |
| Platform state | Undocumented customizations, drifting CMDB, bloated catalogs. Nobody knows the real state of the instance, so upgrade effort is estimated rather than calculated. |
| Institutional knowledge | Answers live in a handful of people’s heads and take days to chase down. When those people move on, the knowledge leaves with them. |
For a systems integrator, the compounding problem is that all five costs scale linearly with client count. Every new account adds another instance to assess, another regression suite to run manually, another set of tribal knowledge to rebuild. Conventional tooling improves the unit cost of each task. It does not change the shape of the curve.
1.2What makes it unique
Six characteristics separate geneworks.ai from AI code editors, from AI software factories, and from conventional platform tooling.
Both halves of the AI delivery wave, on an estate that is already live
AI-native code editors made the individual engineer faster, one repository and one change at a time. AI software factories let a business leader commission software directly, but they build where nothing is running yet and nothing downstream depends on getting it right. geneworks.ai does both, inside an estate the business already depends on. That is why the evidence is the product rather than a feature.
Full-lifecycle execution, not assistance
The platform owns the loop from plain-language requirement through to verified deployment. It is not a prompt surface a developer works inside. It is an execution layer that produces a scoped update set and the evidence that supports it.
Governance designed in, not bolted on
The two human gates are architectural. So is the evidence trail. The SDLC-governed methodology means every agent action, approval and deployment is attributable and reviewable. That is the difference between AI-generated output and verified execution.
Built outside the platform, on purpose
Nothing is installed into the customer instance. The platform scales past ServiceNow’s own execution constraints, avoids upgrade entanglement, stays outside the customer’s ServiceNow licensing footprint, and is reviewable by a security team as a standard outbound integration.
Enterprise memory that compounds
Agents retain engagement history from the first day of work. Dependency, impact and blast-radius analysis is calculated from the actual record of the environment rather than reconstructed on demand. Because every product draws on that same record, work done in one carries into the rest.
Model-agnostic and cost-efficient
No single-vendor dependency, and per-tenant model constraints where a customer requires them. Token cost is modelled at about a tenth of comparable agentic approaches. At that price, putting the platform in front of a whole practice stops being a per-deal exception.
Platform Architecture
The architecture is built around a single organizing principle: one isolated node per customer, outbound-only connectivity, and a control plane that never holds customer content. Everything below follows from that.
2.1Five isolation zones
Each zone has a distinct trust boundary. Customer content stays inside the dedicated environment.
Global Edge
CDN-delivered web application reached over HTTPS with SSO, connecting to the customer environment through a secure outbound-only tunnel.
Dedicated Customer Environment
One isolated node per customer running all application services and holding all customer data. No shared runtime with any other tenant.
Customer ServiceNow Instance
Dev, test and production instances accessed with customer-supplied credentials. Target of automated functional and acceptance testing.
AI Inference Layer
Managed AI service reached over a private, region-pinned network path. The provider is contractually barred from training on customer data.
Shared Control Plane
Accounts, entitlements, billing and usage metering. Holds identity metadata only, never customer project content.
2.2Inside the dedicated environment
Application services and customer data run within the customer’s own isolated node, encrypted at rest under customer-managed KMS keys.
| Application service | Role |
|---|---|
| Access & Identity Gateway | Authenticates every session and every request entering the environment. |
| ServiceNow Integration Service (MCP) | The governed bridge to customer instances, and the only path by which the platform reads from or writes to ServiceNow. |
| geneworks.ai Agent Services | AI build, configuration and delivery agents — 152 specialists across the platform. |
| Automated Verification Service | Functional and acceptance test execution with evidence capture. |
| Documentation Service | Generated specifications and delivery artifacts across DOCX, PDF, PPTX, XLSX and HTML. |
| Process Analyst Service | Requirement and process intelligence, including process transition and step-duration analysis. |
| Customer data store | Contents |
|---|---|
| Project Workspace | All project content and working state for the engagement. |
| Test Evidence & Audit Store | Immutable record of every verification run — screenshots, video, logs and approval records. |
Encryption. AES-256 at rest with keys held in a customer-managed KMS; TLS 1.2+ in transit. Because the keys are customer-managed, the customer retains the ability to render their data inaccessible independently of geneworks.ai.
2.3The delivery loop
The core operating pattern runs from a plain-language requirement through to a verified, deployed change. The two human gates are not configurable.
Requirement intake
A plain-text business requirement is decomposed into detailed, testable functional requirements.
Technical design
The platform produces a full technical design document, versioned and auto-updating as the work evolves.
Design reviewHuman gate 1
A named human reviewer approves the design before any build begins. Non-negotiable.
Task planning and execution
Work is planned and executed via the authenticated MCP connection, built in dependency order, returning a scoped ServiceNow update set.
Automated verification
ATF execution followed by browser-driven functional testing, with screenshot, video and log evidence captured throughout.
Evidence reviewHuman gate 2
A named human reviewer examines the evidence package and signs off before deployment. Non-negotiable.
Deploy and evolve
The change is promoted through the customer’s normal path, and the outcome is written back into enterprise memory so subsequent work inherits the context.
The commercial risk in AI-assisted delivery is not that a model produces something wrong. It is that no one can prove what changed, why, on whose authority, and whether it was tested. geneworks.ai is architected so a named human is accountable at design and again at deployment, and so the evidence supporting both decisions is retained, immutable and exportable. The automation is auditable by construction.
2.4The unit of intelligence
The platform’s reusable primitive is a Gene: the smallest reusable unit of executable enterprise intelligence. A Gene can be a policy, a delivery pattern, a control, a testing rule, a best practice or a decision standard. Genes move through a four-step cycle of encode, orchestrate, verify and evolve. In practice a standard encoded once for one engagement becomes executable across every subsequent engagement without re-teaching, and that is why the platform ships with more than 500 ServiceNow skills already encoded.
Cloud and Deployment Options
geneworks.ai is delivered as a subscription service on dedicated, single-tenant infrastructure. This section covers how a customer receives the platform, which deployment models are available, and what stays under the customer’s control.
3.1How the platform is delivered
geneworks.ai is operated as a managed service. Nothing is installed into the customer’s ServiceNow instance, and the customer does not run the platform themselves. Each customer receives their own environment, provisioned and operated by geneworks.ai, reached over HTTPS with SSO through a multi-region delivery edge. Practitioners work in a browser; there is no desktop client and no infrastructure to stand up on the customer side.
The distinction that matters in an architecture review is that this is not conventional multi-tenant SaaS. There is no shared application runtime, and no shared database with row-level separation between customers. Each customer runs on a dedicated node with its own data stores, its own credentials and its own encryption keys. The only component shared across customers is the control plane, and it holds account, entitlement, billing and usage metadata alone.
Operated by geneworks
- Provisioning of the dedicated environment
- Platform operation, monitoring and security patching
- Product updates and new releases
- Model access and inference routing
Retained by the customer
- The ServiceNow instances and the data in them
- Encryption keys, held in a customer-managed KMS
- Integration credentials and the role set granted to them
- Promotion and change management
- The named reviewers at both human gates
3.2The deployment model
geneworks.ai is offered in one deployment model: a managed, single-tenant environment on AWS, provisioned and operated by geneworks.ai. There is one such environment per client instance environment, and the customer needs no infrastructure of their own.
Managed SaaS
geneworks.ai provisions, operates, monitors and patches the environment. The customer consumes it as a service.
Single tenant on AWS
Dedicated compute, storage and encryption boundaries per customer, using managed AWS services. No shared runtime with any other tenant.
On-premise. On-premise deployment is not part of the standard offering. Where a customer has a regulatory or deployment requirement that the managed model does not meet, a dedicated arrangement can be discussed case by case.
3.3Regions and data residency
Customer content is held inside the dedicated environment and does not leave it. The AI inference path is private and region-pinned rather than traversing the public internet, so prompt and response traffic stays within the nominated region alongside the data it draws on. Egress IP ranges are published for allow-listing where a customer restricts outbound access from ServiceNow.
Available hosting regions and the residency options attached to them: [TO CONFIRM]
3.4Environment provisioning
Each customer receives a dedicated environment provisioned as part of onboarding. Provisioning covers the isolated node, the customer-managed KMS key configuration, the outbound tunnel from the delivery edge and the private inference path. This is the work covered by the one-time setup fee described in Section 8. Most engagements are connected and scanning within a single working session once the environment is in place.
3.5Updates and release management
Because the platform runs outside ServiceNow, product updates are applied by geneworks.ai to the dedicated environment. They require no ServiceNow upgrade, no update set and no change window on the customer’s side, which is the practical reason the platform can move at a different cadence from the instance it works on. Release cadence and customer notification lead time are set out in the support model at 7.2.
Because each environment is separate, updates are applied per environment rather than to a shared estate, so a release can be staged across customers instead of landing everywhere at once.
Data Safeguarding and Security
This section is written for architecture and information security review. Where a control is in progress rather than complete, it is stated as such.
4.1The six commitments
Single tenant
Dedicated compute and storage per customer. No shared runtime with any other tenant, at any layer of the application stack.
No inbound ports
All connectivity is outbound-initiated from the customer environment. There is no listening service exposed to the internet on the customer side.
Encrypted end-to-end
TLS 1.2+ in transit; AES-256 at rest with customer-managed KMS keys.
No model training
The AI provider is contractually prohibited from training on customer data. geneworks.ai does not train, fine-tune or improve any model on customer content.
Content stays put
Project content never leaves the customer’s dedicated environment.
Metadata-only control plane
The shared control plane holds account, entitlement, billing and usage metadata only. No customer project content.
4.2Tenancy and isolation
Isolation is achieved at the infrastructure layer rather than the application layer. Each customer receives a dedicated AWS node running the full application service set with its own data stores, its own credentials and its own encryption keys. There is no multi-tenant database with row-level separation, and therefore no class of application-layer defect that could expose one customer’s content to another. Cross-tenant learning does not occur: one customer’s encoded intelligence is never applied to another customer’s environment.
4.3Network posture
- All connectivity into the customer environment is outbound-initiated. No inbound ports are opened.
- The web application is delivered over a multi-region CDN and reached over HTTPS with SSO.
- The tunnel from edge to dedicated environment is secure and outbound-only.
- The AI inference path is private and region-pinned rather than traversing the public internet.
- Egress IP ranges are available for allow-listing where the customer restricts outbound access from ServiceNow.
4.4Authentication and platform access
geneworks.ai authenticates to ServiceNow using customer-supplied credentials via OAuth 2.0, operating as a dedicated integration user under a least-privilege, scoped role set. The admin role is not required for normal operation.
- Credentials are stored encrypted in the customer’s dedicated environment and are never exposed in logs or user interfaces.
- Each connected instance uses a distinct credential; credentials are never shared across tenants.
- The required role set is documented per product and supplied during onboarding.
- All platform actions are attributable to the integration user and appear in the customer’s own ServiceNow audit log.
- Customer-side access to geneworks.ai is authenticated through the Access & Identity Gateway with SSO and role-based access control. [TO CONFIRM: SAML / OIDC current state]
4.5Data handling and retention
The platform reads instance metadata, configuration records and, where required for testing, test data. Production business records are not required for the platform to operate and are not replicated wholesale.
| Category | Handling |
|---|---|
| Instance metadata and configuration | Read into the Project Workspace within the dedicated environment; retained to support dependency, impact and assessment analysis. |
| Evidence artifacts | Held in the Test Evidence & Audit Store as an immutable record; exportable at any time. |
| Credentials | Encrypted at rest in the dedicated environment; never logged, never in the control plane. |
| Production business data | Not required and not replicated in the ordinary course of operation. |
| Control plane data | Account, entitlement, billing and usage metadata only. |
| Deletion on termination | Full environment teardown and data deletion on request, with certification of destruction. |
4.6AI model providers and training posture
This is typically the first question an enterprise security team asks. The answer is unambiguous, and it is enforced contractually rather than by policy statement alone.
geneworks.ai reaches frontier models over a private, region-pinned path through a managed inference service whose commercial terms contractually prohibit the use of submitted data for model training. Customer Confidential Information is never used to train, fine-tune or improve any model, whether operated by geneworks.ai or by a third-party provider, and is never submitted to public or consumer AI interfaces.
- The platform is model-agnostic and operates across Claude, OpenAI, Gemini and successor frontier models.
- Model selection can be constrained per tenant where a customer requires a specific provider or excludes one.
- Prompt and response handling occurs within the tenant boundary and is subject to the same retention and deletion controls as all other tenant data.
4.7Audit logging and evidence integrity
Every agent action, human approval and deployment is logged with actor, timestamp and payload reference. Evidence packages are retained immutably against the run that produced them. Both human gates record the identity of the approving reviewer, which is what makes the delivery chain defensible under audit rather than merely well documented.
Product Overview and Capabilities
One engine, three products. Software factory, SDLC automation and Organizational Memory share the same memory, controls and evidence layer, so capability compounds rather than stacking as a separate suite. Plan, Build, Verify and Optimize remain how the workspace is organized; they are not a second product family.
software factory
From request to work order.
Command Center · Application Explorer · Artifacts. Intake, testable requirements, versioned technical design, Design Authority Review.
sdlc automation
Build, evidence, sign-off.
Full PDLC loop · Built-in IDE · Scoped update sets · ATF Test Center · Functional testing · Self-healing tests · Evidence store.
organizational memory
Filed. The next pass starts here.
CMDB Rapid Assessment · Catalog Center · Intelligent Normalizer · Upgrade Assist · AI Optimization Advisor.
A surface on every screen, not a fourth product. Inside every product · workspace memory · governed workflows. Read questions answer directly. Anything that would write becomes proposed work and still clears both human gates.
5.1Supported ServiceNow modules
geneworks.ai supports development, configuration and automation across the core ServiceNow platform.
Generally available
- ITSM
- ITAM
- CMDB and CSDM
- IRM and GRC
- Flow Designer
- Custom applications on App Engine
- Platform development and administration
Controlled beta
- CSM
- HRSD
Controlled beta means the capability is in use with selected customers while remaining product work completes. Where a module is in beta, that status is stated before it is included in any scope of work.
5.2Packaging and tiers
Commercially the platform is offered as two motions: Enterprise platform, and Professional services. Capability itself is packaged by depth. Each depth includes everything below it, so moving up adds capability rather than replacing it. Subscription is per named user. Term, seat minimums and rates are agreed jointly.
Where business intent becomes a plan.
- Ask Gene — conversational layer across the platform
- Plan — idea to requirements, technical design and Actions
- Application Explorer
- Artifacts — requirements, designs and generated documents
- CMDB Rapid Assessment
- Upgrade Assist — scan and findings
Everything in Depth 1, plus the execution engine.
- SDLC Configure loop — Action to update set
- Built-in IDE
- Scoped update sets and deployment
- ATF Test Center
- Command Center
- Catalog Center and Process Analyst — Catalog
- Upgrade Assist — Fix with Gene
Everything in Depth 2, plus validation and evidence.
- Validation Center — functional and UAT testing
- Self-healing tests
- Evidence and audit store for SOX-type controls
- Process Analyst — Generalist
- Normalize
- Tech Debt Assessment
| Capability | Depth 1 | Depth 2 | Depth 3 |
|---|---|---|---|
| Included in every depth | |||
| Ask GeneQ&A, impact analysis, task assignment, workspace memory | Included | Included | Included |
| Application ExplorerData model, analytics, logic and security views | Included | Included | Included |
| PlanRough idea to detailed requirements, technical design and Actions | Included | Included | Included |
| ArtifactsFRDs, versioned auto-updating TDDs, and generated DOCX / PDF / PPTX / XLSX | Included | Included | Included |
| CMDB Rapid Assessment | Included | Included | Included |
| Upgrade Assist — scan and findings | Included | Included | Included |
| Added in Depth 2 | |||
| SDLC Configure loopAction to update set over the governed MCP connection | — | Included | Included |
| Built-in IDE | — | Included | Included |
| Scoped update sets and deployment | — | Included | Included |
| ATF Test Center | — | Included | Included |
| Upgrade Assist — Fix with GeneAuto-remediate and deploy, then re-scan to verify closure | — | Included | Included |
| Command CenterInstance map, collisions, dead weight, tech debt calculator | — | Included | Included |
| Catalog CenterCatalog health scoring, with fixes routed through Gene | — | Included | Included |
| Process Analyst — Catalog | — | Included | Included |
| Exclusive to Depth 3 | |||
| Validation CenterFunctional and UAT testing with screenshot and video evidence | — | — | Included |
| Self-healing tests | — | — | Included |
| Evidence and audit storeBuilt for SOX-type controls | — | — | Included |
| Process Analyst — Generalist | — | — | Included |
| NormalizeCMDB and SAM normalization from a nightly-refreshed database | — | — | Included |
| Tech Debt AssessmentAI Optimization Advisor | — | — | Included |
5.3Product to value
The mapping from each product — and from Ask Gene as a surface — to the specific cost it removes. Outcome ranges below are modelled.
| Product | The problem today | What geneworks.ai does | The value |
|---|---|---|---|
| Software factory | Requirements sit in queues, and nobody can see what a change will break until it breaks. | Maps the instance, x-rays the application, turns a plain requirement into a reviewable technical design. | Design in hours, not weeks. Blast radius known before a line is built. |
| SDLC automation | Senior platform engineers spend their days on routine configuration and release paperwork. Manual UAT burns SME time, and audit evidence is assembled by hand at the end of the cycle. | Approved design becomes real ServiceNow configuration, built in dependency order, handed over as a scoped update set. Autonomous ATF and browser-driven functional testing, capturing screenshots, video and logs as it runs. | Modelled 50–60% faster builds. Modelled 70–90% less testing and UAT effort. Audit-ready evidence by default, including SOX controls. |
| Organizational Memory | Undocumented customizations, drifting CMDB, bloated catalogs. Nobody knows the real state. | Scores CMDB, catalog, reference data and upgrade readiness; every finding becomes a workable change. | A four-to-five week assessment in under an hour. Upgrade cycles compressed from months to weeks. |
| Ask Gene surface, not a product | Answers live in a handful of people’s heads and take days to chase down. | Ask the instance anything in plain English; Gene routes to the right specialists and can act on the answer. | Answers in seconds, and the knowledge stays behind when people move on. |
5.4Verify — SDLC automation
Verify is the evidence half of SDLC automation. It executes functional, regression, UAT and process testing autonomously, and produces an audit-ready evidence package for every run. Coverage spans both ServiceNow ATF, for platform-layer assertions, and browser-driven functional testing that exercises the actual user interface and user journey. Self-healing tests absorb routine UI change without manual maintenance, which is what keeps a large regression estate viable across many client instances.
| Evidence artifact | Purpose |
|---|---|
| Step-level screenshots | Visual proof of each action and its result. |
| Session video | Continuous record of the full execution for audit walkthrough and dispute resolution. |
| Execution logs | Machine-readable record of actions, assertions and outcomes. |
| Approval record | Identity and timestamp of the human reviewer at each gate. |
| Exportable package | Delivered in a format suitable for internal audit and SOX-type control testing. |
Conventional delivery produces evidence retrospectively, assembled by hand, at the point someone asks for it. geneworks.ai produces evidence as a by-product of execution, at the moment of execution, tied to the named human who approved it and stored immutably. On a regulated account, that is the difference between an audit finding and a clean walkthrough.
5.5Plan — Software factory
Command Center
A mission-control view of an entire instance in three layers: applications, connected ServiceNow components such as notifications and reports, and the metadata layer covering sys metadata, micro components, sys logs and sys audits. The map is spatial, zoomable and filterable per application. Functional tabs include Collisions (ask a natural-language question, receive blast radius and impacted applications), Activity (live tracker of in-progress work), Dead Weight (findings such as business rules never invoked by any active process), Tech Debt Calculator (the cost of maintaining customizations against the savings from returning to baseline, framed for an executive audience) and Who Can Do What (role and access analysis across tables).
Application Explorer
Each ServiceNow application is modeled as its own workspace with dedicated agents. Tabs are Overview (data model, analytics, business logic, UI, security and access, process automation), Ask Gene, Plan (high-level requirement through to full technical design document), Configure (the delivery loop), Testing (ATF and functional), Troubleshoot (root-cause agents) and Artifacts (functional requirements plus a versioned, auto-updating technical design document).
Artifacts
Generates delivery documentation directly from the work performed: functional requirement documents, technical design documents, test evidence reports and assessment readouts, across DOCX, PDF, PPTX, XLSX and HTML from a maintained template library. Technical design documents are versioned and update automatically as the underlying work changes, which removes the familiar problem of design documentation drifting out of sync with what was actually built.
5.6Build — SDLC automation
The full PDLC loop runs from approved design to scoped update set, building in dependency order via the governed MCP connection. A built-in IDE supports direct inspection and intervention where a practitioner wants it. Because the output is an ordinary ServiceNow update set, the customer’s promotion and change management process applies to it unchanged.
Where automation is authored as code, geneworks.ai uses the ServiceNow Fluent SDK to express Flow Designer automation as TypeScript, producing artifacts that are version-controllable, reviewable in a standard code review process and diffable across releases. For a practice managing many client environments, that diffability is what makes it possible to demonstrate exactly what changed between them.
5.7Optimize — Organizational Memory
CMDB Rapid Assessment
The customer connects an instance and runs a scan; there is no consultant-led discovery workshop. Output includes an overall assessment score with health trending; scoring across completeness, correctness and compliance; analysis of mandatory against recommended and discoverable against non-discoverable attributes; CI inventory by class, data source analysis, IRE review and top findings; a health dashboard with table selection and prompt-generated compliance conditions; CSDM alignment maturity scored on a CMMI 1–5 scale with a phased remediation roadmap; prioritized remediation handed directly to Gene as workable tickets; plus scan history and PDF export. An Executive Readout presents a single score and maturity band where every figure drills through to its underlying measurement.
Catalog Center
Every catalog item is scored 0–100 across four equally weighted pillars — Build Quality, Experience, Governance and Workflow — with the composite shown as a scoring badge. Bands are 85+ Excellent, 70–84 Good, 50–69 Needs Attention, and below 50 Critical. Two views are provided: a builder-facing fix-it queue and a leadership-facing portfolio rollup. Item pages expose the score, the underlying assessment, an edit surface and recommended fixes actionable through Gene.
Upgrade Assist
Select a target release; the platform detects current version and patch level and scans the instance against the release documentation, a document set routinely exceeding two thousand pages. Findings are grouped as blockers, affected items, could-not-verify, manual review and informational. Coverage spans 900+ plugins, 200+ applications and 300+ tables. A consolidated Findings and Fixes view offers a Fix with Gene action that routes each item into the delivery loop and deploys, after which a re-scan verifies closure. Analysis history logs completed and failed runs.
Intelligent Normalizer
External normalization for CMDB and SAM, communicating with ServiceNow exclusively via REST API across four table domains: companies and vendors, software installs, locations and departments. It is backed by geneworks.ai’ own publisher and product database, refreshed nightly by a dedicated agent set, so no third-party normalization data subscription and no SAM Pro dependency is required. High-confidence matches auto-accept; low-confidence matches route to a review queue with accept, reject and escalate actions. Custom rules are supported. The platform reports total records, unique variants, canonical records and match rate, supports blanket-run deployment back to ServiceNow, exposes the publisher and product catalog including lifecycle data, and maintains run and audit history with schedulable jobs.
AI Optimization Advisor
A technical debt assessment surface producing a debt index, annual maintenance cost exposure, upgrade readiness percentage and modeled savings, supported by a debt breakdown, AI findings with severity and confidence ratings, business impact statistics, an ROI waterfall and a remediation roadmap timeline. It is built for the executive conversation: it quantifies the cost of the current state rather than describing it qualitatively.
5.8Ask Gene — surface
The conversational layer across every product. It is a surface, not a fourth product. Ask the instance anything in plain English and Gene routes the question to the right specialist agents, answering, assigning tasks, brainstorming or running impact analysis, and acting on the answer where action is warranted. Because it draws on workspace memory and operates through governed workflows, the answers reflect the actual state of the environment and the actions remain inside the same control regime as everything else on the platform.
Integration and Technical Requirements
One integration path, a short onboarding checklist, and no installed components inside the customer instance.
6.1Integration boundary
All communication with ServiceNow occurs over authenticated REST APIs through the ServiceNow Integration Service using the Model Context Protocol. This is the only path by which the platform reads from or writes to a customer instance. Changes are delivered as standard scoped update sets, so they follow the customer’s existing promotion path and change management process without exception. Nothing is installed into the customer instance, and nothing is deployed outside the customer’s established governance.
6.2Platform compatibility
| Item | Requirement |
|---|---|
| ServiceNow release | Supported from [TO CONFIRM: baseline release] forward, including current release families. |
| Instance types | Production, sub-production and personal developer instances. |
| Fluent SDK | Version 4.3+ where Flow Designer artifacts are authored as TypeScript. |
| Plugin dependencies | None required for core operation; product-specific dependencies documented at onboarding. |
| SAM Pro | Not required. Intelligent Normalizer operates on geneworks.ai’ own publisher and product database. |
| Network | Outbound HTTPS only; geneworks.ai egress IP ranges available for allow-listing on request. |
| Browser | Current versions of Chrome, Edge, Safari and Firefox for the web application. |
6.3What geneworks needs from the customer
The onboarding checklist is deliberately short. Most engagements are connected and scanning within a single working session.
- An integration user on each target instance with the documented least-privilege role set.
- OAuth client credentials for that integration user.
- Network allow-listing of geneworks.ai egress ranges where the instance restricts access.
- Confirmation of which instances are in scope and their promotion order.
- Named human reviewers for the design review and evidence review gates.
- SSO configuration details for customer-side access to the platform.
- Any customer-specific standards, naming conventions or delivery policies to be encoded as Genes.
Scalability and Operating Model
How the platform behaves across many client environments at once, and what geneworks.ai provides around it.
7.1Multi-instance and multi-client operation
The platform is designed for a practice operating across many client environments simultaneously. Each connected instance is an isolated workspace with its own credentials, memory and evidence store. Encoded standards can be scoped to a single client or promoted to a practice-wide library where the standard is the practice’s own rather than the client’s. That promotion path is how a delivery method moves out of the handbook and into every engagement the practice runs.
Because each customer runs on a dedicated node, capacity scales horizontally by environment rather than contending for shared resources. One client’s heavy regression run does not affect another’s delivery throughput.
Concurrent instance limits, throughput per scan type and per-environment rate limits: [TO CONFIRM: current tested figures]
7.2Support model
| Element | Provision |
|---|---|
| Support hours | [TO CONFIRM: business hours standard, 24×7 for a partner tier] |
| Response targets | [TO CONFIRM: severity-based SLA table] |
| Escalation path | Named technical contact escalating to engineering leadership. |
| Onboarding | Environment provisioning, guided connection, role configuration and an initial Gene encoding session. |
| Release cadence | [TO CONFIRM: cadence and customer notification lead time] |
| Uptime commitment | [TO CONFIRM: required for any enterprise agreement] |
7.3Partner enablement
For a systems integrator relationship, enablement is delivered as practitioner training on the delivery loop and the gate model, Gene encoding workshops that capture the organization’s own delivery standards into the platform, and access to the workshop material set covering CMDB, HAM and SAM. The intent is that the customer’s own practitioners operate the platform independently rather than depending on geneworks.ai for delivery execution.
7.4How capacity changes shape
The economic point of the architecture is that delivery capacity stops being a function of headcount. A practice adds throughput by connecting environments and encoding standards, not by recruiting. The 500+ skills that ship with the platform are the starting position; every engagement adds to the encoded library, and that library is reusable across every subsequent account.
Commercial and Licensing Model
The platform is licensed per named user under one of two commercial motions — Enterprise platform, or Professional services — plus a one-time setup fee. Rates and the final commercial structure are set jointly rather than presented as a fixed card.
| Component | Basis | What it covers |
|---|---|---|
| Platform subscription | Per named user, per month, by motion | Enterprise platform, or Professional services. Capability depth is set out in 5.2. |
| AI usage | Unlimited under Fair Use on Professional services | No per-token metering, no consumption billing and no usage true-up. No iteration limits are imposed per ServiceNow module during normal implementation activity. |
| Environment provisioning | One-time, per client instance environment | Dedicated single-tenant environment, secure connection establishment and initial configuration. |
| Engagement models | By agreement | Direct enterprise subscription, or a partner model covering reseller, white-label delivery, co-sell and internal use. |
| Term, minimums and rates | Agreed jointly | Seat minimums, term length, payment terms and the rate card are settled as part of the partnership structure. |
8.1Why the pricing is structured this way
Consumption-based AI pricing makes delivery cost unpredictable, which in turn makes practitioners ration their use of the tool — exactly the opposite of what an organization wants once the platform is embedded in the delivery method. A flat per-user subscription, with unlimited AI usage under Fair Use on Professional services, removes that friction entirely. The cost of an engagement becomes a function of team size and duration, which is something a practice already knows how to price and forecast.
The one-time setup fee reflects the single-tenant architecture. Each client environment is a dedicated, isolated node with its own keys and its own connection path: real provisioning work, performed once per client instance environment, rather than a tenant record in a shared system.
The subscription is a fixed, forecastable cost per practitioner. The delivery hours it displaces are a variable cost that scales with client count. At practice scale, the relevant comparison is not license cost against a software budget. It is subscription cost against the marginal cost of the delivery capacity it replaces, across every account the practice runs.
8.2Agreeing the commercial structure
Rather than present a fixed rate card, we would prefer to settle the licensing and commercial approach together. The right structure depends on the engagement model — internal use, reseller, or a broader strategic partnership — and on how many client instance environments are in scope. Section 5.2 defines what is included at each depth of capability; the rate card, seat minimums and term are the part we would work through jointly. There is no public rate card.
Product Roadmap and Direction
Where the product is going, and what that means for a relationship established on ServiceNow delivery.
9.1Product system
The product architecture is three products: Software factory, SDLC automation and Organizational Memory, with Ask Gene as the conversational layer across all of them. Plan, Build, Verify and Optimize remain the workspace headings underneath. Govern is the family under active expansion, extending the standards, controls, risk checks and approval logic that already run inside the delivery loop into a first-class surface of its own. Govern is roadmap, not shipped.
9.2Near-term direction
- Deepening the Govern family: control libraries, risk scoring and approval policy as configurable practice-level assets rather than embedded loop behavior.
- Extending self-healing test coverage and cross-instance regression orchestration for multi-client operation.
- Broadening the encoded skill library beyond the current 500+ as engagements contribute new patterns.
- Process Analyst expansion: process transition analysis and step-duration intelligence feeding directly into optimization recommendations.
9.3Beyond ServiceNow
geneworks.ai was born in ServiceNow because that is where the delivery economics are most acute and most measurable. The architecture — encoded intelligence, agent orchestration, mandatory human gates, immutable evidence capture, single-tenant isolation — is deliberately stack-agnostic. The stated direction is to become the operating system for autonomous enterprise delivery across any enterprise platform, with ServiceNow as the proving ground rather than the boundary. The named targets beyond ServiceNow are Salesforce, AWS, Java, Angular and .NET applications.
The strategic read is that a relationship established on ServiceNow delivery extends naturally into the rest of the estate as the platform expands, rather than requiring a fresh evaluation for each stack.
9.4Intellectual property
A provisional patent application titled “Artificial Intelligence System for Continuous Enterprise Software Development and Governance” has been filed, covering the continuous delivery and governance architecture described in Section 2. Further detail is available under separate discussion.