Workday agrees to buy C1.ai so it can control what AI agents touch and when access ends
Workday has signed a deal to buy C1.ai, an identity governance firm that decides what people and AI agents can touch. Bhusri says Workday's agents run on one security model, so folding C1.ai into it is the first test.
The Board Room · Leadership desk

Early access customers built more than 500 agents in four months. Workday has 17 of its own agents live, cut down from about 50 that were in development when Bhusri returned.
| Figure | Value | Note | Claim |
|---|---|---|---|
| Built by early access customers in four months | 500 agents, over | 12 | |
| Workday's own agents live | 17 agents | 9 | |
| Workday's own agents in development when Bhusri returned | 50 agents, about | since cut to the 17 now live | 9 |
What happened
- Bhusri announced the C1.ai deal at the close of his first Rising keynote since returning as CEO, after eight other announcements.
- His pitch is "deterministic rails": one data model, one security model and one version of the software across about 80 million users and 1.4 trillion transactions.
- Workday has cut its own live agents to 17 from about 50 that were in development when Bhusri came back.
- Fiscal 2027 second-quarter subscription revenue was US$2.471 billion, up 13.9%, and more than 5,500 customers used at least one Workday-built agent.
Why it matters
- exposure Agents built by customers, not by Workday, are growing fast, and those are the ones whose access needs limits and an end date.
- constraint A single security model is a promise that an acquired product must now satisfy, so the revocation claim is a roadmap item until C1.ai runs inside it.
- decision Buyers of Workday agents will be asked to let one vendor grant and withdraw agent access. That puts the control in a single contract.
Bhusri's case for the purchase rests on a distinction between what an agent may do and whether that permission ever ends. His argument on stage was that AI is probabilistic and payroll is not. "You can't run a payroll or close your books at the end of a quarter based on probabilities. You can't be 90 percent accurate on the payroll," he said [5]. Workday's rails use the org chart, approval chains and business rules to tell an AI what it can do, what it can't, and who has to sign off [7]. In our view the purchase fills the revocation half of that design. In itwire's words, C1.ai "decides what people and AI agents are allowed to touch, then takes that access away when the job is done" [1].
The record here covers one vendor and one deal [1]. It shows how much weight Workday put on the theme. Workday wants its agents to be "lawful", a word itwire says was repeated so often it could have been printed on the lanyards [11]. Bhusri put the alternative bluntly: "An agent that's not grounded in business rules might move fast. But it is essentially lawless," he said [8].
The timing has an investor logic. On 9 February, Workday said Carl Eschenbach would step down and Bhusri, who had been executive chairman since 2024, would take back the CEO job permanently [3]. According to Bloomberg, the shares had "plummeted over the past year" as investors worried AI would chew through SaaS [4]. That worry is the skeptic's case: if agents take over tasks that software used to perform, the software vendor is less necessary. We think governance is the answer Bhusri is reaching for. An agent that must be authorized, scoped and revoked still needs a system of record to do it, and Workday is positioning itself as that system.
The itwire account does not disclose a price, a closing date or how C1.ai will be folded into the single security model Bhusri described [6]. Next quarter, customers will test whether revocation works inside that one model.
What to watch
- Terms, price and closing date for the C1.ai purchase.
- Whether Workday shows C1.ai access controls running inside its single security model, and when.
- Oracle's AI World in Las Vegas, 26 to 29 October, where a reply to Bhusri's "dinosaurs" remark is expected.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence40
- Adoption50
- Hype gap+25
- Incentives70
- Confidence55
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
Workday has signed a deal to buy C1.ai, an identity governance company that decides what people and AI agents are allowed to touch, then takes that access away when the job is done.
- [2]
Bhusri closed his first Rising keynote since returning as CEO, held in Las Vegas, with the C1.ai deal; eight more announcements came in between.
- [3]
Workday announced on 9 February that Carl Eschenbach was stepping down and that Bhusri, executive chairman since 2024, would return as CEO permanently.
- [4]
Bloomberg noted Workday's shares had "plummeted over the past year" as investors worried AI would chew through SaaS.
- [5]
"You can't run a payroll or close your books at the end of a quarter based on probabilities. You can't be 90 percent accurate on the payroll," Bhusri said.
- [6]
Bhusri calls Workday's approach "deterministic rails": one data model, one security model and one version of the software, covering about 80 million users and roughly 1.4 trillion transactions last year.
- [7]
In Workday's design the org chart, approval chains and business rules tell the AI what it can do, what it can't, and who has to sign off.
- [8]
"An agent that's not grounded in business rules might move fast. But it is essentially lawless," Bhusri said.
- [9]
Workday now has 17 of its own agents live, cut down from about 50 that were in development when Bhusri returned.
- [10]
Workday's fiscal 2027 second quarter showed subscription revenue of US$2.471 billion, up 13.9%; AI made up more than 25% of new annual contract value, and more than 5,500 customers used at least one Workday-built agent.
- [11]
One word was repeated so often at Rising it could have been printed on the lanyards: Workday wants its agents to be "lawful".
- [12]
Early access customers built more than 500 agents and 6,000 apps in four months.
- [13]
Oracle holds its own AI World in Las Vegas from 26 to 29 October; Bhusri said of big rivals, "I still think they're dinosaurs."
Get this ledger inside ChatGPT. Ask about any of our stories and the answer brings its figure, each claim’s verdict and the sources. Free, no account.
Sources
1 independent publisher whose own reporting we read for this story.
- itwire.comWorkday Rising 2026: Bhusri buys C1.ai to govern AI agents as Sana takes over the home screen
1 article · October 13, 2026
Topics and entities
Follow any of these and your For You feed starts watching them — no settings page required.
Topics
- AI agent governanceFollow
- HR and finance softwareFollow
- Enterprise Software AcquisitionsFollow