Workday Buys an ID Badge System for AI Agents
Workday has signed a definitive agreement to acquire C1.ai, a startup that manages system access for both human employees and AI agents, the company announced on October 13 at its Workday Rising 2026 conference in Las Vegas. The deal's financial terms were not disclosed, and it is expected to close in Workday's fiscal fourth quarter, which ends January 31, 2027, subject to customary closing conditions.
The acquisition is less about adding another AI feature to Workday's HR and finance suite than about plumbing: C1.ai connects people and agents to systems like email, CRM, code repositories, finance platforms, and cloud infrastructure, grants scoped and time-limited access, requires human sign-off where needed, logs every action, and revokes access automatically once it's no longer needed. It is, in effect, an identity and access management layer built for a workforce that now includes software agents alongside people.
The gap between deploying agents and controlling them
Workday's announcement leans on a stark pairing of statistics to make its case. Citing C1.ai's own research, the company says 95% of large U.S. companies are already running autonomous AI agents in some form. But separate research from Deloitte — its 2026 State of AI in the Enterprise survey of 3,235 IT and business leaders across 24 countries, published in April — found that only about 21% of organizations say they have a mature governance model for agentic AI in place. Roughly 80% lack basics like clear limits on what agents can decide without human approval, real-time anomaly monitoring, or reliable audit trails of agent actions.
That gap is the problem Workday is positioning C1.ai to close. Most companies still manage system access the way they always have — through IT service tickets, spreadsheets, and periodic manual reviews — a process that breaks down once agents are being spun up, reassigned, and retired on a much faster cycle than human hires and departures. Workday already runs what it calls an Agent System of Record, a registry for tracking which AI agents exist across an organization. C1.ai would extend that from simply registering agents to actively controlling what each one can touch, inside Workday and across other enterprise systems.
Why an HR and finance vendor is buying into agent security
The logic, according to Workday executives, is that access changes are already Workday events: a new hire, a role change, a termination. Folding agent identities into that same system lets access for both people and agents update automatically rather than through a separate, manual security process. Gerrit Kazmaier, Workday's president of product and technology, framed the rationale around the idea that companies now run on a combined workforce of people and AI agents, and that each needs the right access at the right moment to keep work both efficient and compliant. C1.ai co-founder and CEO Alex Bovee put the stakes more bluntly.
Alex Bovee, CEO and co-founder of C1.ai: "Enterprises can't secure the AI era using yesterday's IT tickets."
Workday says more than 11,500 organizations use its platform, including over 65% of the Fortune 500 — a customer base large enough that bundling agent-identity governance into existing HR and finance workflows could make it a default rather than an add-on for a sizable slice of corporate America. For enterprises still treating agent deployment and agent governance as separate problems, the deal is a signal that at least one major vendor is betting they won't stay separate for long.