Skip to content

Leadership Not yet confirmed elsewhere1 publisher 2 min read Published

Workday agrees to buy C1.ai so it can control what AI agents touch and when access ends

Workday has signed a deal to buy C1.ai, an identity governance firm that decides what people and AI agents can touch. Bhusri says Workday's agents run on one security model, so folding C1.ai into it is the first test.

The Board Room · Leadership desk

How we use AI Send a correction

Illustration accompanying Workday agrees to buy C1.ai so it can control what AI agents touch and when access ends
Generated illustration
Customers built more agents than Workday has live Agent counts: those early access customers built in four months, and Workday's own agents, live now and in development when Bhusri returned.

Early access customers built more than 500 agents in four months. Workday has 17 of its own agents live, cut down from about 50 that were in development when Bhusri returned.

Customers built more agents than Workday has live
FigureValueNoteClaim
Built by early access customers in four months500 agents, over12
Workday's own agents live17 agents9
Workday's own agents in development when Bhusri returned50 agents, aboutsince cut to the 17 now live9

What happened

  • Bhusri announced the C1.ai deal at the close of his first Rising keynote since returning as CEO, after eight other announcements.
  • His pitch is "deterministic rails": one data model, one security model and one version of the software across about 80 million users and 1.4 trillion transactions.
  • Workday has cut its own live agents to 17 from about 50 that were in development when Bhusri came back.
  • Fiscal 2027 second-quarter subscription revenue was US$2.471 billion, up 13.9%, and more than 5,500 customers used at least one Workday-built agent.

Why it matters

  • exposure Agents built by customers, not by Workday, are growing fast, and those are the ones whose access needs limits and an end date.
  • constraint A single security model is a promise that an acquired product must now satisfy, so the revocation claim is a roadmap item until C1.ai runs inside it.
  • decision Buyers of Workday agents will be asked to let one vendor grant and withdraw agent access. That puts the control in a single contract.

Bhusri's case for the purchase rests on a distinction between what an agent may do and whether that permission ever ends. His argument on stage was that AI is probabilistic and payroll is not. "You can't run a payroll or close your books at the end of a quarter based on probabilities. You can't be 90 percent accurate on the payroll," he said [5]. Workday's rails use the org chart, approval chains and business rules to tell an AI what it can do, what it can't, and who has to sign off [7]. In our view the purchase fills the revocation half of that design. In itwire's words, C1.ai "decides what people and AI agents are allowed to touch, then takes that access away when the job is done" [1].

The record here covers one vendor and one deal [1]. It shows how much weight Workday put on the theme. Workday wants its agents to be "lawful", a word itwire says was repeated so often it could have been printed on the lanyards [11]. Bhusri put the alternative bluntly: "An agent that's not grounded in business rules might move fast. But it is essentially lawless," he said [8].

The timing has an investor logic. On 9 February, Workday said Carl Eschenbach would step down and Bhusri, who had been executive chairman since 2024, would take back the CEO job permanently [3]. According to Bloomberg, the shares had "plummeted over the past year" as investors worried AI would chew through SaaS [4]. That worry is the skeptic's case: if agents take over tasks that software used to perform, the software vendor is less necessary. We think governance is the answer Bhusri is reaching for. An agent that must be authorized, scoped and revoked still needs a system of record to do it, and Workday is positioning itself as that system.

The itwire account does not disclose a price, a closing date or how C1.ai will be folded into the single security model Bhusri described [6]. Next quarter, customers will test whether revocation works inside that one model.

What to watch

  • Terms, price and closing date for the C1.ai purchase.
  • Whether Workday shows C1.ai access controls running inside its single security model, and when.
  • Oracle's AI World in Las Vegas, 26 to 29 October, where a reply to Bhusri's "dinosaurs" remark is expected.

Clarity's read

What the record supports and how the coverage leans. The claims behind it follow.

Reality

Evidence40
Adoption50
Hype gap+25
Incentives70
Confidence55
Why these scores

Claim ledger

Ranked by verification strength, evidence, and original report placement.

  1. [1]

    Workday has signed a deal to buy C1.ai, an identity governance company that decides what people and AI agents are allowed to touch, then takes that access away when the job is done.

    Reported Supported Source: itwire, reporting on Workday Rising 2026View cited source
  2. [2]

    Bhusri closed his first Rising keynote since returning as CEO, held in Las Vegas, with the C1.ai deal; eight more announcements came in between.

    Reported Supported Source: itwireView cited source
  3. [3]

    Workday announced on 9 February that Carl Eschenbach was stepping down and that Bhusri, executive chairman since 2024, would return as CEO permanently.

    Reported Supported Source: itwireView cited source

Get this ledger inside ChatGPT. Ask about any of our stories and the answer brings its figure, each claim’s verdict and the sources. Free, no account.

Add to ChatGPTAdd to Claude

Sources

1 independent publisher whose own reporting we read for this story.

  1. itwire.com

    1 article · October 13, 2026

    Workday Rising 2026: Bhusri buys C1.ai to govern AI agents as Sana takes over the home screen

Share your take

Let Clarity write the post for you.

Signed-in readers get a short post drafted on this story in the register they choose — narrative, analytical, or a direct position — editable to the last word before it goes anywhere. The share buttons at the top of this story work without an account.

Topics and entities

Follow any of these and your For You feed starts watching them — no settings page required.

Loading related stories