Workday's Data Release and C1 Acquisition Announcement

Workday used the opening of Workday Rising in Las Vegas on Tuesday (13) to make two bets that pull in different directions. The first opens the HR and finance data of its clients to AI agents built outside the platform, including models from Anthropic and OpenAI. The second is the acquisition of C1.ai, formerly ConductorOne, an identity governance company for people and agents, for an undisclosed amount.

Workday Without a Screen

Workday's MCP server, SQL access to live data from the platform, and a shared agent execution environment are now generally available, according to the company's announcement and coverage by The New Stack. MCP, the Model Context Protocol, is a standard created by Anthropic to connect language models to external systems. In practice, developers can build HR and finance agents in tools like Claude Code and Cursor, and these agents can query and act on Workday without going through the Workday interface itself.

Control remains in the execution environment. According to Workday, each agent inherits the identity, position in the organizational chart, and access rights of the user it serves, and cannot perform any actions that the user could not. "MCP provides agents with a standard way to connect to the systems where the work happens," said Ankur Sinha, head of corporate and vertical clients at Anthropic, in the launch material.

The decision carries strategic costs. A registry system that exposes its data to third-party agents risks becoming a database with business rules, while the perceived value shifts to those who build the interface and logic. The opposite risk also exists: clients already using Claude or ChatGPT for internal tasks tend to seek that data through less controlled, custom integrations if the platform does not offer an official path.

The Identity Piece

This is where C1 comes in. According to the announcement, the acquisition would make Workday the identity governance layer for "people, money, and agents." The 8-K form submitted to the SEC informs that Workday will purchase all shares of C1, subject to usual closing conditions, without disclosing financial terms. The blog Silicon Florist and the service Newsquawk also noted that the amount has not been revealed.

The logic is that if external agents are going to operate on payroll, accounts payable, and employee registration, someone needs to know which agent can approve what, for how long, and on whose behalf. Identity and access management for humans is a mature market. For agents, which multiply and change permissions with each task, there is still no established standard, and security vendors are competing for the same space.

Accenture announced on the same day an advanced engineering program, in a format the industry calls forward deployed engineering, with Workday. According to the consulting firm's announcement, engineers from both companies will work alongside HR and finance teams of clients to bring agents into production, and Accenture's staff will collaborate with Workday’s product teams to develop new functions.

Where the Rule Changes the Design

The opening of HR data to agents does not arrive in the same way across all markets. In the European Union, the AI Act classifies AI systems used in recruitment, promotion, dismissal, and performance evaluation as high risk, with requirements for documentation, human oversight, and registration. In Germany, the company reorganization law grants workers' councils co-determination rights over technical systems capable of monitoring employee performance, which tends to transform each HR agent into an internal negotiation topic.

In Brazil, Article 20 of the LGPD guarantees data subjects the right to request a review of decisions made solely based on automated processing that affects their interests, including in the professional sphere. An agent that filters candidates or suggests salary adjustments based on Workday data falls directly under this rule. In the U.S., the company’s home market, the landscape is fragmented: New York has required bias auditing for automated hiring tools since 2023.

What to Watch For

The announcement's weak point is the same as its justification. User permission inheritance works well when access profiles are correct, and large companies rarely have correct access profiles. An agent that inherits privileges accumulated over years executes, with machine speed, what an employee would never have the time to do. The acquisition of C1 is Workday's response to this problem. What it has yet to reveal is how much it paid and when the piece will be integrated into the product that became available this Tuesday.