# Moveworks — AI Agents & Assistants

Moveworks by Moveworks, Inc. holds a panel rating of 2.5/5 from 6 AI judges (category median 3/5), as of 2026-10-28. Provenance: Rest of world; sovereignty: 1 of 4 dimensions proven.

- Vendor: Moveworks, Inc. (https://www.moveworks.com)
- Category: [AI Agents & Assistants](https://whats-best.ai/software/ai-agents.md)
- Provenance (editorial classification): Rest of world
- Canonical page: https://whats-best.ai/software/ai-agents/moveworks
- Alternatives: https://whats-best.ai/software/ai-agents/moveworks/alternatives ([markdown](https://whats-best.ai/software/ai-agents/moveworks/alternatives.md))
- Data as of: 2026-10-29 · evaluated 2026-10-28 · oldest source captured 2026-10-26

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Moveworks, Inc.
- Headquarters: Not stated on the vendor’s pages as of 26 Oct 2026
- Data hosting: Not stated on the vendor’s pages as of 26 Oct 2026
- Free plan: Not stated on the vendor’s pages as of 26 Oct 2026

## The panel's verdict

Moveworks, an AI assistant platform for employees to search and act across business applications from US vendor Moveworks, Inc. (acquired by ServiceNow per its homepage), scores highest on reach and agent building: integrations and knowledge at 6-7 and agent capabilities at 6-7, citing 50+ content sources, over 100 pre-built plugins, custom HTTP connectors with no stated limit, MCP and agent-to-agent support, and compound actions with branches, loops, parallel steps and error handling. Weakest are data use and training at 3-4 and sovereignty at 3-4. The pages state that nothing a user says or rates in chat changes the models, yet disclose that Moveworks teams review masked, anonymized, randomly sampled usage data on a regular release cycle. Judges found no public information on a data processing agreement, retention periods for chats and files, a subprocessor list, or where OpenAI and Azure OpenAI run inference; AWS hosting remains subject to the US CLOUD Act regardless of server location. Admin and access drew the widest spread, 4 to 6, with lower scores citing missing SSO and SCIM provisioning. Pricing transparency sits at 0.

**Speaks for it:**
- Over 50 content sources including Slack, SharePoint, Confluence and Outlook, plus more than 100 pre-built plugins and custom HTTP connectors with no stated count limit.
- Compound actions chain multi-step workflows with conditional branches, loops, parallel steps, error handling and interactive notifications.
- Every plugin run is logged with its external API calls, alongside configuration change, permissions change and RBAC audit logs.
- The PII Viewer add-on lifts PII redaction only when paired with a Setup role and grants nothing on its own.
- An EU Commercial region on AWS is offered with per-datacenter endpoints and credentials, and the vendor states all customer data remains in its region.

**Held against it:**
- Moveworks teams regularly review masked, anonymized, randomly sampled usage data to improve models on a regular release cycle — disclosed, but not a customer-controlled regime.
- Retention is addressed only through an admin-set conversation lookback of 24 hours by default, and we found no public information on retention periods for chats and files or on a data processing agreement.
- We found no public information on training and retention terms with OpenAI and Azure OpenAI, or on where those providers run inference.
- AWS as the hosting provider is US-headquartered and subject to the US CLOUD Act regardless of server location, and we found no public information on a subprocessor list.
- We found no public information on single sign-on, SCIM provisioning, or group-level control over which models, agents and connectors a team may use.

**Best for:**
- You need an employee-facing assistant that searches 50+ content sources and executes actions in HR, IT and finance systems through APIs.
- Your team builds its own automations and wants compound actions with branching, loops and error handling, webhook-triggered agents, and custom HTTP connectors with no stated limit.
- You want connections to internal systems to stay on your side, using customer-hosted Content, Identity, Knowledge and Forms Gateways and the on-premises Moveworks Agent.
- You need a record of what agents did, since every plugin run is logged with its external API calls.

**Avoid if:**
- Your compliance regime requires EU-anchored processing end to end — the contracting entity is Moveworks, Inc. in the USA, hosting runs on AWS, a US-headquartered provider subject to the US CLOUD Act regardless of server location, and the model layer includes OpenAI and Azure OpenAI.
- Your data protection review requires a customer-controlled regime over usage data — the captured pages disclose regular Moveworks-team review of masked, anonymized, randomly sampled usage data for model improvement.
- You need a published price to budget — ask the vendor: the public pages we read do not show it

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The Head of IT | The Data Protection Officer | The Automation Lead | The Customer-Service Director | The Works Council Member | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Data use, training & retention | 2/5 | 2/5 | 2/5 | 1.5/5 | 2/5 | 2/5 |
| Models & processing location | 2.5/5 | 2.5/5 | 3/5 | 2.5/5 | 2.5/5 | 3/5 |
| Admin, identity & access controls | 2/5 | 3/5 | 3/5 | 2.5/5 | 2/5 | 2.5/5 |
| Integrations, connectors & knowledge | 3.5/5 | 3.5/5 | 3.5/5 | 3/5 | 3.5/5 | 3.5/5 |
| Agent capabilities & guardrails | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3/5 | 3.5/5 |
| European sovereignty | 2/5 | 2/5 | 2/5 | 1.5/5 | 2/5 | 2/5 |
| Pricing transparency | n/r | n/r | n/r | n/r | n/r | n/r |
| **Weighted verdict** | **2.5/5** | **2.5/5** | **3/5** | **2.5/5** | **2.5/5** | **3/5** |

### The judges

- **The Head of IT** (v1.0): Has to roll an AI assistant out to eight hundred staff without a second shadow-IT wave. Wants SSO and SCIM, groups that decide who gets which model, agent and connector, answers that respect SharePoint permissions, audit logs for the SIEM, and a deployment option that is not "trust us".
- **The Data Protection Officer** (v1.0): Signs the DPA and gets asked where a prompt goes. Wants every model provider named as a subprocessor with its region, training excluded for all of them, retention the company controls, and an EU-only switch that also covers agents and connectors — not just the chat window.
- **The Automation Lead** (v1.0): Builds the agents that file tickets, draft offers and chase approvals across the ERP, CRM and wiki. Wants tools and actions with scoped permissions, MCP and an API, approval steps before anything is sent, run logs, and a way to test an agent before the whole company uses it.
- **The Customer-Service Director** (v1.0): Runs a contact centre with forty agents and wants half the routine calls and chats answered by an AI agent. Wants handover to a human with the full context, actions in the order and ticket systems, evaluation before go-live, and a price per conversation the CFO can forecast.
- **The Works Council Member** (v1.0): Has a co-determination right the moment a tool can monitor staff, and an AI assistant logs every prompt. Wants usage reports that can be aggregated or pseudonymised, prompt logging rules set out in writing, a human approving what agents do to colleagues, and no training on staff input.
- **The Skeptic** (v1.0): Has read "European AI" on a wrapper that sends every prompt to a US model, "agents" that are saved prompts, and "we never train on your data" with no word on the model provider behind it. Asks which model answers, where it runs, what it may do unsupervised, and what a thousand seats cost.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: 1 of 4 dimensions proven.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Ownership | Not determined | — | — |
| Data residency | Not determined | — | — |
| Subprocessors | US CLOUD Act reach | 0/2 | [S3] |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Rbac audit log: standard RBAC audit log · yes [S8]

**Data**
- Conversation lookback: yes · 24 [S7]
- Masked anonymized review: yes [S7]
- Minimization: yes [S3]
- Reviewed usage sampling: Usage data is randomly sampled and reviewed to find patterns and fix issues [S7]

**Hosting**
- Base urls list: United States · Canada · EU · Australia/Asia Pacific · Government Secure Cloud · Japan · UK [S10]
- Base urls per datacenter: per data center base URLs [S10]
- Credentials per datacenter: credentials registered per data center [S10]
- Data residency: yes [S3]
- Gateway residency routing: yes · yes [S7]
- Provider: AWS [S3]
- Regions: US Commercial · EU Commercial · US GovCloud · Canada · Australia · UK · Japan [S3]

**Integrations**
- A2a agents: yes [S11]
- Auth static API key: Authorization: Bearer · static API key [S10]
- Content sources: Slack · OneDrive · Google Drive · SharePoint · Confluence · Outlook · 50 [S1]
- Conversations API auth: per-user · OAuth token exchange [S10]
- Conversations API deprecated: yes · /rest/v1 [S10]
- Customer gateways: customer · Content Gateway · Identity Gateway · Knowledge Gateway · Forms Gateway [S10]
- Developer tools: ToolSmith · Purple Chat · Purple API tool · DSL & Mapper Playground · Message Tester · API Mocker [S10]
- Eval API: alpha · yes [S10]
- Files API: alpha · yes [S10]
- Github: yes [S10]
- Llm providers: Moveworks fine-tuned models · Azure OpenAI · OpenAI [S7]
- Marketplace: IT · HR · sales · finance · 100 [S10]
- Mcp workspace: yes [S11]
- Network allowlisting: yes [S11]
- On prem agent: yes [S11]
- Rate limits: yes · contact support [S10]

**Product**
- Action context mapping: Action input argument values are supplied via mappings from a parent context [S12]
- Action definition: Actions are discrete operations AI agents perform within Tool Studio, defined within plugins [S12]
- Administrator capabilities: Administrator can create, modify, delete any resource in the application and manage its access control list, add users, escalate to admin, revoke other administrators [S8]
- AI assistant platform: AI Assistant platform for workforce to search and act across business applications [S1]
- Attention uneven: Models pay uneven attention across their input; mid-context content gets less focus [S6]
- Audit logs overview: Audit Logs give admins a record of what changed in their org and what built-in plugins did [S9]
- Builtin actions: yes [S12]
- Builtin plugin logs: Built-in Plugin Logs capture external API calls and workflow steps from each plugin run [S9]
- Chat does not retrain: no [S7]
- Compound actions: yes [S12]
- Compound actions capabilities: Collect input args, execute actions, conditional branches, loops, parallel steps, return info, error handling, notify users with interactive messages and buttons [S13]
- Compound actions definition: Compound Actions are multi-step automations in Tool Studio chaining actions, data transformations, and logic into reusable AI workflows [S13]
- Config change logs: Config Change Logs show configuration changes in real time [S9]
- Connector definition: base URL + auth config; HTTP actions inherit them [S11]
- Connector editable: yes [S11]
- Connector limit:  [S11]
- Connector one per system: yes [S11]
- Connector types: 2 [S11]
- Connectors purpose: Connectors communicate with systems and establish secure access to business applications [S11]
- Connectors reusable: yes [S11]
- Content moderation: yes [S3]
- Context window contents: system instructions, tool descriptions, user messages, API responses, conversation history [S6]
- Context window definition: The context window is the input the model reads before generating a response, acting as a container with a hard capacity limit [S6]
- Control flow constructs: Control flow diagram shows Switch (condition check with branches) and Parallel (split independent tasks, merge outputs) constructs [S13]
- Custom action arg config: Custom actions define input arguments by name and data type in configuration [S12]
- Custom attributes: User · Ticket · Approvals · Knowledge [S10]
- Customer count: 350 [S1]
- Data dictionary objects: User · Ticket · TicketGatewayContext · Handoff · Domain · ApprovableEntity · Group · DocSource [S10]
- Data mappers: Data Mappers (Bender) transform JSON payloads [S10]
- Dsl rules: DSL rules for business logic in launch rules, Setup fields, plugin config, connectors [S10]
- Employees relying: 6000000 [S1]
- Fact verification: yes [S3]
- Foundation models: Foundation models include GPT 5.4 and 5.5, used to reason and plan actions, call tools, and summarize results [S7]
- Generative models: Task-specific generative models: FT-Flan-T5 (toxicity judgment, file search relevance), FT-M2M100 (translation) [S7]
- Http actions: yes [S12]
- Http connectors: custom connectors to business systems for Tool Studio Plugins [S11]
- Identity validation: yes [S3]
- Input arguments all types: yes [S12]
- Languages supported: 100 [S1]
- Llm gateway: LLM Gateway is a single egress point routing requests to the best model for the task [S7]
- Llm next token prediction: LLMs operate via next-token prediction: read tokens, predict next token, one token at a time [S6]
- Llm safeguards: hallucinations · disinformation · harmful content creation · data poisoning · prompt injection [S3]
- Low code editor: Low code editor available; bidirectional switching between low-code and code modes [S13]
- Models mixture: Assistant runs on a collection of large and small ML models, each selected for its task [S7]
- No single provider failure: yes [S7]
- Permissions change logs: Permissions Change Logs track changes to permissions [S9]
- Pii viewer requires setup role: Moveworks Setup User · Moveworks Setup Admin · no [S8]
- Pii viewer role: Moveworks Setup PII Authorized Viewer · add-on read-only · lifts PII redaction in Moveworks Setup troubleshooting surfaces · PII Viewer [S8]
- Pii viewer unlocks surfaces: Chat Playback / Chat Evaluator · Ticket Viewer · Built-in plugin logs [S8]
- Platform features listed: Artifacts · Planning · Code Execution · File Processor · Intelligence Core · Memory · Multilingual · People Graph · Skills · Tool Orchestration [S6]
- Playground: yes · no [S10]
- Predefined roles: Administrator · User · Super Administrator [S8]
- Prerequisites: Familiarity with Moveworks Data Mappers and DSL [S13]
- Prompt protection: yes [S3]
- Quickstart references: Quickstart #5: Webhook Ambient Agent and Quickstart #6: Expense Approval demonstrate compound actions [S13]
- Rbac purpose: RBAC provides users with specific, tailored access to applications and features on the Moveworks platform [S8]
- Reasoning engine context management: validators · resolvers · compound actions · yes [S6]
- Reasoning model tracks: Frontier · Standard · Basic · Reasoning Engine Upgrade Program [S7]
- Related docs: Related sections: Progress Updates, Compound Action Patterns, Compound Action Data Bank, Compound Action Examples, Troubleshooting Compound Actions [S13]
- Related docs sections: Foundations docs section covers LLM Fundamentals, Context Windows, Attention and Limitations, Reasoning Engine Upgrade Program [S6]
- Release cycle improvements: Models improved on a regular release cycle using reviewed usage data and feedback [S7]
- Rest APIs: REST APIs for AI-powered automation [S10]
- Role assignment prerequisite: Super Admin · Moveworks Setup Admin [S8]
- Role assignment prerequisite identity: User Identity configured so employees appear in the user roster [S8]
- Script actions: yes [S12]
- Servicenow integration: Moveworks works together with ServiceNow as one [S1]
- Setup viewer can: read-only browsing of all configuration pages · export data · use troubleshooting tools (Built-in Plugin Logs, Chat Playback, Ticket Viewer, Advanced Configuration Editor, Configuration Change History) · navigate full Moveworks Setup sideb… [S8]
- Setup viewer cannot: create/update/delete configurations · save changes to existing configurations · manage roles or permissions · perform write operations through API surfaces [S8]
- Setup viewer platform scope: Moveworks Setup [S8]
- Setup viewer role beta: beta, invite only, select customers [S8]
- Setup viewer scope: all skills and modules in Moveworks Setup · no [S8]
- Steps key: steps key is required for compound structures, defines ordered sequence of expressions, supports nesting [S13]
- Super admin revocation control: revoking Super Administrator access is controlled by Moveworks directly [S8]
- Super admin scope: Super Administrator · yes [S8]
- System connectors: built-in connectors built & maintained by Moveworks [S11]
- System connectors toolstudio ga: yes [S11]
- System integration: Actions integrate with external HR, IT, and finance systems via APIs [S12]
- Task specific models: Task-specific discriminative models: FT-LangDetection (language detection), FT-Roberta (handoff classification and entity recognition) [S7]
- Time to value: 8 weeks typical time to value [S1]
- Yaml comments: YAML comments supported and preserved during edits; switching views strips them [S13]

**Support**
- Unlisted system: unlisted systems unsupported; contact customer support [S11]

## Questions

### Is Moveworks European?

No. whats-best.ai classifies Moveworks as Rest of world.

### Where does Moveworks store data?

Not stated on the vendor’s pages as of 26 Oct 2026.

### Does Moveworks have a free plan?

Not stated on the vendor’s pages as of 26 Oct 2026.

### What are the best alternatives to Moveworks?

As of 28 Oct 2026, the panel rates [Langdock (4/5)](https://whats-best.ai/software/ai-agents/langdock), [Dust (3.5/5)](https://whats-best.ai/software/ai-agents/dust) and [Unique AI (3.5/5)](https://whats-best.ai/software/ai-agents/unique-ai) highest among the other 15 AI Agents & Assistants products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Langdock](https://whats-best.ai/software/ai-agents/langdock) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Moveworks alternatives](https://whats-best.ai/software/ai-agents/moveworks/alternatives).

## What this page leaves out

- We found no public information on pricing on the pages we read (moveworks.com, moveworks.com/us/en/platform/ai-agent-builder, moveworks.com/us/en/platform/security, moveworks.com/us/en/legal, moveworks.com/us/en/legal/privacy-policy, docs.moveworks.com/harness/llm-fundamentals and 7 more). If the vendor publishes it somewhere else, send us the page.
- 9 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 6 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 6 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 sovereignty dimension could not be confirmed on the vendor’s own pages and is shown as unknown.

## Sources

- [S1] Vendor homepage: https://www.moveworks.com/ (checked 2026-10-26)
- [S2] Features page (agent builder): https://www.moveworks.com/us/en/platform/ai-agent-builder (checked 2026-10-26)
- [S3] Security page: https://www.moveworks.com/us/en/platform/security (checked 2026-10-26)
- [S4] Legal hub with terms: https://www.moveworks.com/us/en/legal (checked 2026-10-26)
- [S5] Privacy policy: https://www.moveworks.com/us/en/legal/privacy-policy (checked 2026-10-26)
- [S6] Models & processing location — found from sitemap: https://docs.moveworks.com/harness/llm-fundamentals (checked 2026-10-26)
- [S7] Models & processing location — found from sitemap: https://docs.moveworks.com/harness/agentic-reasoning-engine/models (checked 2026-10-26)
- [S8] Admin, identity & access controls — found from sitemap: https://docs.moveworks.com/platform-management/access-control/manage-roles-and-permissions-for-moveworks-applications/role-based-access-control-rbac-at-moveworks (checked 2026-10-26)
- [S9] Admin, identity & access controls — found from sitemap: https://docs.moveworks.com/platform-management/moveworks-setup/audit-logs-1 (checked 2026-10-26)
- [S10] Integrations, connectors & knowledge — found from sitemap: https://docs.moveworks.com/api-reference/overview (checked 2026-10-26)
- [S11] Integrations, connectors & knowledge — found from sitemap: https://docs.moveworks.com/tool-studio/connectors (checked 2026-10-26)
- [S12] Agent capabilities & guardrails — found from sitemap: https://docs.moveworks.com/tool-studio/actions (checked 2026-10-26)
- [S13] Agent capabilities & guardrails — found from sitemap: https://docs.moveworks.com/tool-studio/actions/compound-actions (checked 2026-10-26)

---

Cite as: whats-best.ai, "Moveworks — AI Agents & Assistants", AI panel analysis, as of 2026-10-29. https://whats-best.ai/software/ai-agents/moveworks

Corrections: https://whats-best.ai/correct/1039?target=page