Workday agrees to buy C1.ai to govern AI agent access alongside employee access
Workday signed a definitive agreement to acquire C1.ai, an agentic identity platform, with closing expected in the quarter ending Jan. 31, 2027. With C1.ai, Workday says it will become the identity governance layer for people, money and agents.
The Engineer · Build desk
Three figures: 95% of large U.S. companies already run autonomous agents, per C1.ai research; 21% of those companies report a mature way to govern agents, per Deloitte; the expected closing window ends Jan. 31, 2027, 110 days after the Oct. 13, 2026 announcement.
- 95% per C1.ai Large U.S. companies already running autonomous agents, claim 17
- 21% per Deloitte Of those companies, report a mature way to govern agents, claim 18 share of companies already running agents
- 110 days Days from announcement to end of expected closing window, claim 16 Oct. 13, 2026 to Jan. 31, 2027
| Figure | Value | Note | Claim |
|---|---|---|---|
| Large U.S. companies already running autonomous agents | 95% per C1.ai | 17 | |
| Of those companies, report a mature way to govern agents | 21% per Deloitte | share of companies already running agents | 18 |
| Days from announcement to end of expected closing window | 110 days | Oct. 13, 2026 to Jan. 31, 2027 | 16 |
What happened
- The product connects to email, CRM, code repositories, finance systems and cloud infrastructure, and removes a person's or agent's access the moment it is no longer needed.
- Workday says a registered agent can receive the access it needs and lose it immediately when its work or role ends.
- A dev.to write-up says Workday also announced an Anthropic partnership the same day, in which Claude and Sana agents talk over MCP.
Why it matters
- constraint Governed access starts at registration. An agent that never enters Workday's registry has no lifecycle event to trigger its removal.
- exposure Revocation reaches only the systems C1.ai connects to. A credential issued directly inside an uncovered system would outlive the agent that holds it.
- decision Workday customers will have to decide who owns agent registration and retirement, because the access controls hang on that record.
For employees, the trigger already exists. Workday's release says "Every new hire, job change, and exit is a Workday event" [6]. It describes today's baseline as manual service tickets, spreadsheets and periodic reviews across hundreds of applications [10]. C1.ai's job is to turn those events into grants and revocations. "Enterprises can't secure the AI era using yesterday's IT tickets," said Alex Bovee, CEO and co-founder of C1.ai [9].
Agents need a different trigger, and the release sorts them into two kinds. Some act on behalf of an employee and should reach only part of what that person can. Others work on their own, with broader access that needs close oversight [8]. The first kind has a ceiling set by a person's existing grants. The second needs its own grant set and its own review. In our view the two kinds need separate policies.
The adoption figures come from two places. The 95% of large U.S. companies running autonomous agents is C1.ai's own research, so it is the acquired company's number in the buyer's release [17]. The 21% with a mature way to govern agents is attributed to Deloitte's State of AI research [18]. For the 95% to transfer to your company, your definition of an autonomous agent and your size band would have to match C1.ai's sample. The two figures have different authors, so the distance between them is not a measurement.
Whether this is a platform trend is a separate question, and one deal does not settle it. Workday calls itself "the trusted agentic platform for HR, finance, and IT" [15] and says that with C1.ai it will become "the identity governance layer for people, money, and agents" [7]. That is a roadmap claim from the acquirer.
A dev.to post covering the deal reports two more announcements from the same day. Claude and Sana agents talk over MCP under the customer's existing permissions and audit controls [12]. Workday's Trusted Agent Platform went headless, and "Headless can't mean lawless," CTO Gabe Monroy said [11]. The post's author builds a TypeScript sketch of lifecycle-bound grants and says of it: "It is not how Workday or C1.ai work inside" [13].
The release does not disclose a price [14]. Workday expects the deal to close in the fourth quarter of its fiscal 2027, which ends January 31, 2027, subject to customary closing conditions [5]. That puts the outer edge of the expected window 110 days after the October 13 signing [16].
What to watch
- Whether the deal closes by Jan. 31, 2027, and whether the closing notice discloses a price.
- Workday documentation on how scope is enforced when an agent acts on behalf of an employee.
- Whether other HR or IT platform vendors announce agent-access governance of their own, which would be the evidence for a platform trend.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence40
- Adoption
- Insufficient
- Hype gap+30
- Incentives75
- Confidence70
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
On Oct. 13, 2026, at Workday Rising 2026 in Las Vegas, Workday announced it had signed a definitive agreement to acquire C1.ai, an agentic identity platform for people and agents.
- [2]
C1.ai connects to the systems a business runs on, from email and CRM to code repositories, finance systems and cloud infrastructure, giving each person and agent the right access at the right time and removing it the moment it is no longer needed.
- [3]
The Workday Agent System of Record already gives companies one place to see and manage their agents; C1.ai will build on that, going beyond registering agents to also governing what they can access across Workday and other enterprise systems.
- [4]
Once registered, an agent can receive the access it needs, when it needs it, and lose that access immediately when its work or role ends.
- [5]
The transaction is expected to close in the fourth quarter of Workday's fiscal year 2027, ending January 31, 2027, subject to customary closing conditions.
- [6]
The release says: "Every new hire, job change, and exit is a Workday event."
- [7]
Workday says that with C1.ai it will become "the identity governance layer for people, money, and agents."
- [8]
Some agents act on behalf of an employee and should only reach part of what that person can, while others work on their own with broader access that needs close oversight.
- [9]
"Enterprises can't secure the AI era using yesterday's IT tickets," said Alex Bovee, CEO and co-founder, C1.ai.
- [10]
Most organizations manage employee access across hundreds of applications through manual service tickets, spreadsheets and periodic reviews as workers join, move and leave.
- [11]
The same day, Workday made its Trusted Agent Platform headless; "Headless can't mean lawless," said CTO Gabe Monroy.
- [12]
Workday also announced a partnership with Anthropic in which Claude and Sana agents talk over MCP, and "every action follows the customer's existing permissions and audit controls in Workday."
- [13]
The dev.to author's TypeScript access-grant sketch is his own small model of the idea; he writes: "It is not how Workday or C1.ai work inside."
- [14]
The release's transaction details list the expected closing timing and the financial and legal advisers but do not state a purchase price.
- [15]
Workday describes itself as "the trusted agentic platform for HR, finance, and IT."
- [16]
The end of the expected closing window, Jan. 31, 2027, is 110 days after the Oct. 13, 2026 announcement.
- [17]
C1.ai's research shows that 95% of large U.S. companies already run autonomous agents.
- [18]
According to Deloitte's State of AI research, only 21% of those companies report having a mature way to govern agents.
Get this ledger inside ChatGPT. Ask about any of our stories and the answer brings its figure, each claim’s verdict and the sources. Free, no account.
Sources
2 independent publishers whose own reporting we read for this story.
- dev.toWorkday Is Buying Identity for AI Agents. Let's Build a Tiny Access Grant in TypeScript.
1 article · October 13, 2026
- Workday to Acquire C1.ai, a Leading Agentic Identity Platform for People and Agents (3 minute read)
investor.workday.com
1 article · October 14, 2026
Topics and entities
Follow any of these and your For You feed starts watching them — no settings page required.