Skip to content
Today
Sections

Build Independently confirmed2 publishers 2 min read Published

Workday agrees to buy C1.ai to govern AI agent access alongside employee access

Workday signed a definitive agreement to acquire C1.ai, an agentic identity platform, with closing expected in the quarter ending Jan. 31, 2027. With C1.ai, Workday says it will become the identity governance layer for people, money and agents.

The Engineer · Build desk

Send a correction

Illustration accompanying Workday agrees to buy C1.ai to govern AI agent access alongside employee access
Generated illustration
Agent use is widespread; mature governance is not Agent use at large U.S. companies (C1.ai) and mature governance among those companies (Deloitte), as Workday cites them; days to the deal's expected close.

Three figures: 95% of large U.S. companies already run autonomous agents, per C1.ai research; 21% of those companies report a mature way to govern agents, per Deloitte; the expected closing window ends Jan. 31, 2027, 110 days after the Oct. 13, 2026 announcement.

Agent use is widespread; mature governance is not
FigureValueNoteClaim
Large U.S. companies already running autonomous agents95% per C1.ai17
Of those companies, report a mature way to govern agents21% per Deloitteshare of companies already running agents18
Days from announcement to end of expected closing window110 daysOct. 13, 2026 to Jan. 31, 202716

What happened

  • The product connects to email, CRM, code repositories, finance systems and cloud infrastructure, and removes a person's or agent's access the moment it is no longer needed.
  • Workday says a registered agent can receive the access it needs and lose it immediately when its work or role ends.
  • A dev.to write-up says Workday also announced an Anthropic partnership the same day, in which Claude and Sana agents talk over MCP.

Why it matters

  • What it limits constraint Governed access starts at registration. An agent that never enters Workday's registry has no lifecycle event to trigger its removal.
  • Who's exposed exposure Revocation reaches only the systems C1.ai connects to. A credential issued directly inside an uncovered system would outlive the agent that holds it.
  • Who has to decide decision Workday customers will have to decide who owns agent registration and retirement, because the access controls hang on that record.

For employees, the trigger already exists. Workday's release says "Every new hire, job change, and exit is a Workday event" [6]. It describes today's baseline as manual service tickets, spreadsheets and periodic reviews across hundreds of applications [10]. C1.ai's job is to turn those events into grants and revocations. "Enterprises can't secure the AI era using yesterday's IT tickets," said Alex Bovee, CEO and co-founder of C1.ai [9].

Agents need a different trigger, and the release sorts them into two kinds. Some act on behalf of an employee and should reach only part of what that person can. Others work on their own, with broader access that needs close oversight [8]. The first kind has a ceiling set by a person's existing grants. The second needs its own grant set and its own review. In our view the two kinds need separate policies.

The adoption figures come from two places. The 95% of large U.S. companies running autonomous agents is C1.ai's own research, so it is the acquired company's number in the buyer's release [17]. The 21% with a mature way to govern agents is attributed to Deloitte's State of AI research [18]. For the 95% to transfer to your company, your definition of an autonomous agent and your size band would have to match C1.ai's sample. The two figures have different authors, so the distance between them is not a measurement.

Whether this is a platform trend is a separate question, and one deal does not settle it. Workday calls itself "the trusted agentic platform for HR, finance, and IT" [15] and says that with C1.ai it will become "the identity governance layer for people, money, and agents" [7]. That is a roadmap claim from the acquirer.

A dev.to post covering the deal reports two more announcements from the same day. Claude and Sana agents talk over MCP under the customer's existing permissions and audit controls [12]. Workday's Trusted Agent Platform went headless, and "Headless can't mean lawless," CTO Gabe Monroy said [11]. The post's author builds a TypeScript sketch of lifecycle-bound grants and says of it: "It is not how Workday or C1.ai work inside" [13].

The release does not disclose a price [14]. Workday expects the deal to close in the fourth quarter of its fiscal 2027, which ends January 31, 2027, subject to customary closing conditions [5]. That puts the outer edge of the expected window 110 days after the October 13 signing [16].

What to watch

  • Whether the deal closes by Jan. 31, 2027, and whether the closing notice discloses a price.
  • Workday documentation on how scope is enforced when an agent acts on behalf of an employee.
  • Whether other HR or IT platform vendors announce agent-access governance of their own, which would be the evidence for a platform trend.

Clarity's read

What the record supports and how the coverage leans. The claims behind it follow.

Reality

Evidence40
Adoption
Not scored
Hype gap+30
Incentives75
Confidence70
Why these scores

Claim ledger

Ranked by verification strength, evidence, and original report placement.

  1. [1]

    On Oct. 13, 2026, at Workday Rising 2026 in Las Vegas, Workday announced it had signed a definitive agreement to acquire C1.ai, an agentic identity platform for people and agents.

    Reported SupportedView cited source
  2. [2]

    C1.ai connects to the systems a business runs on, from email and CRM to code repositories, finance systems and cloud infrastructure, giving each person and agent the right access at the right time and removing it the moment it is no longer needed.

    Reported SupportedView cited source
  3. [3]

    The Workday Agent System of Record already gives companies one place to see and manage their agents; C1.ai will build on that, going beyond registering agents to also governing what they can access across Workday and other enterprise systems.

    Reported SupportedView cited source
  4. [4]

    Once registered, an agent can receive the access it needs, when it needs it, and lose that access immediately when its work or role ends.

    Reported SupportedView cited source
  5. [5]

    The transaction is expected to close in the fourth quarter of Workday's fiscal year 2027, ending January 31, 2027, subject to customary closing conditions.

    Reported SupportedView cited source
  6. [6]

    The release says: "Every new hire, job change, and exit is a Workday event."

    Reported Supported Source: Workday press releaseView cited source
  7. [7]

    Workday says that with C1.ai it will become "the identity governance layer for people, money, and agents."

    Reported Supported Source: Workday press releaseView cited source
  8. [8]

    Some agents act on behalf of an employee and should only reach part of what that person can, while others work on their own with broader access that needs close oversight.

    Reported SupportedView cited source
  9. [9]

    "Enterprises can't secure the AI era using yesterday's IT tickets," said Alex Bovee, CEO and co-founder, C1.ai.

    Reported Supported Source: Alex Bovee, CEO and co-founder, C1.aiView cited source
  10. [10]

    Most organizations manage employee access across hundreds of applications through manual service tickets, spreadsheets and periodic reviews as workers join, move and leave.

    Reported Supported Source: Workday press releaseView cited source
  11. [11]

    The same day, Workday made its Trusted Agent Platform headless; "Headless can't mean lawless," said CTO Gabe Monroy.

    Reported Supported Source: dev.to post by the author of the TypeScript sketchView cited source
  12. [12]

    Workday also announced a partnership with Anthropic in which Claude and Sana agents talk over MCP, and "every action follows the customer's existing permissions and audit controls in Workday."

    Reported Supported Source: dev.to postView cited source
  13. [13]

    The dev.to author's TypeScript access-grant sketch is his own small model of the idea; he writes: "It is not how Workday or C1.ai work inside."

    Reported Supported Source: dev.to post authorView cited source
  14. [14]

    The release's transaction details list the expected closing timing and the financial and legal advisers but do not state a purchase price.

    Reported SupportedView cited source
  15. [15]

    Workday describes itself as "the trusted agentic platform for HR, finance, and IT."

    Reported Supported Source: Workday press releaseView cited source
  16. [16]

    The end of the expected closing window, Jan. 31, 2027, is 110 days after the Oct. 13, 2026 announcement.

    Derived Supported
  17. [17]

    C1.ai's research shows that 95% of large U.S. companies already run autonomous agents.

    Reported Contested Source: Workday press release citing C1.ai researchView cited source
  18. [18]

    According to Deloitte's State of AI research, only 21% of those companies report having a mature way to govern agents.

    Reported Contested Source: Workday press release citing DeloitteView cited source

Sources

2 independent publishers whose own reporting we read for this story.

  1. dev.to

    1 article · October 13, 2026

    Workday Is Buying Identity for AI Agents. Let's Build a Tiny Access Grant in TypeScript.

  2. investor.workday.com

    1 article · October 14, 2026

    Workday to Acquire C1.ai, a Leading Agentic Identity Platform for People and Agents (3 minute read)

Topics and entities

Topics

Entities