ServiceNow and Nvidia Launch Arc, an Enterprise AI Agent with Multi-Layer Real-Time Security
ServiceNow and Nvidia have officially released Arc, an enterprise AI agent designed to address security concerns through a multi-layered real-time control architecture involving the Super Intelligence Control Tower and Nvidia OpenShell.
Software company ServiceNow and chipmaker Nvidia announced on October 21, 2026, that their jointly developed enterprise AI agent, Arc, is now Generally Available. Originally introduced in May, the product aims to solve the primary barrier to adopting autonomous AI systems in enterprises: inadequate security controls, by implementing multiple layers of real-time security checks.
Arc is defined by the companies as “a personal long-running AI agent that can take on everyday work.” Built for Nvidia’s new RTX Spark devices, it is currently available on Mac, with Windows support forthcoming. Unlike traditional cloud-based AI, Arc can run locally on an employee’s desktop or independently on its own device within Nvidia OpenShell, building memory and skills over time to improve performance.
The core differentiator of the product lies in its security architecture. ServiceNow and Nvidia stated that Arc is governed and secured by ServiceNow’s Super Intelligence Control Tower and enforced with Nvidia OpenShell at runtime. The Control Tower monitors agent behavior, vets access permissions, and detects security risks such as prompt injection, while OpenShell, an open-source runtime control tool, restricts specific agent actions. This design moves security enforcement from the software layer down into the runtime and hardware layers.
Additionally, the companies introduced a security component called AI Passport. It holds the enterprise’s set of rules regarding risk tolerance and allowed service access, acting as a bridge between ServiceNow infrastructure and Nvidia checkpoints. If the Control Tower revokes an agent’s Passport, Nvidia BlueField hardware enforces the revocation at machine speed, containing the task in a sandbox for later audit while allowing other approved actions to continue. This mechanism attempts to prevent compromised software from overriding security policies without sacrificing efficiency.