TL;DR
- Workday (NASDAQ: WDAY) signed a definitive agreement on 13 October 2026 to acquire C1.ai, “a leading agentic identity platform for people and agents.” Terms were not disclosed.
- C1.ai grants and removes access across email, CRM, code repositories, finance and cloud infrastructure — for employees and agents alike.
- The split matters: the Agent System of Record shows which agents exist; C1.ai would govern what they reach. Inventory is not governance.
- Closing is expected in fiscal Q4 2027, which ends 31 January 2027. Integration claims are forward-looking.
- Workday serves more than 11,500 organisations, over 65% of the Fortune 500.
Workday already sells a way to inventory enterprise agents. This deal is about the harder half: deciding what those agents may touch, and taking that permission away. The price is undisclosed and the deal has not closed.
The deal Workday did not price
The agreement was announced at Workday Rising 2026 in Las Vegas. The release names the advisers but not the price: BofA Securities advised Workday (counsel Orrick), Qatalyst advised C1.ai (counsel Ashurst Perkins Coie). Without a figure there is no way to test whether Workday is buying revenue, technology, or a defensive position against identity vendors entering the same territory. Closing is expected in Workday’s fiscal Q4 2027, ending 31 January 2027, subject to customary conditions; until then the companies remain separate, and every integration claim is forward-looking. (Source : Workday — Workday to Acquire C1.ai, a Leading Agentic Identity Platform for People and Agents)
The lifecycle that got faster
The problem in the release is the oldest routine in IT: employee access across hundreds of applications, managed through tickets, spreadsheets and periodic reviews as workers join, move and leave. HR records the event; IT reconciles it afterwards, by ticket. (Source : Workday — Workday to Acquire C1.ai)
Agents collapse that lag. One can be created, scoped, delegated a task and abandoned inside an afternoon, while the access it was granted outlives the work. The joiner-mover-leaver cycle does not disappear for non-human identities; it outruns manual review.
The adoption figures should be read for provenance. C1.ai’s own research puts autonomous agents inside 95% of large US companies; Deloitte’s State of AI 2026 finds only 21% reporting a mature way to govern them. (Source : C1.ai — Future of Identity Security 2026) (Source : Deloitte — State of AI 2026) One figure comes from the company being acquired, the other from a consultancy selling governance work; the direction of the gap holds.
Alex Bovee, C1.ai’s chief executive and co-founder, makes the case against the ticket queue: “Enterprises can’t secure the AI era using yesterday’s IT tickets. Workday is the operational heart of the enterprise, and by bringing C1.ai’s identity governance directly into that core, we’ll be able to manage access for every human and agent in real time – making work faster without making it less secure.” (Source : PR Newswire — Workday to Acquire C1.ai)
Registration is not authorisation
The Agent System of Record already lets customers see and manage their agents: a register of what exists, who owns it, what it is for. That solves enumeration. It does not establish what an agent can reach, under whose authority, for how long, or what happens when the task ends.
C1.ai extends provisioning-to-deprovisioning control across Workday and other systems. Two cases in the release show where the model strains. An agent acting for an employee should reach only part of what that employee can — a subset, not a copy. An autonomous agent with wider access needs oversight of a different kind, because it inherits limits from no one.
The third case decides whether any of it works: a retired agent should not still be able to get in. Decommissioned agents leave credentials behind — tokens in a repository, an OAuth grant nobody revoked. Killing the agent is easy. Killing its access is not, which is why buyers should test for it first.
Gerrit Kazmaier, Workday’s president for product and technology, on the goal: “Today’s companies run on a combined workforce of people and AI agents. With C1.ai, we’ll help secure that workforce by managing and enforcing exactly who – and what – has access to connected apps and systems, giving each person and agent the right access at the right moment to make work easier, safer, and more compliant.” (Source : Workday — Workday to Acquire C1.ai)
What buyers should demand, whoever wins
Workday’s bet is that identity is where agent governance gets enforced. An agent acts through API calls, and every call is an authorisation decision taken on behalf of something. Made centrally against a policy that knows the agent, its owner and its purpose, that decision is governance. Made nowhere, it is a log entry about what already happened.
Identity vendors, cloud IAM teams and agent platforms are all converging on this layer, because whoever holds authorisation holds the audit trail. No vendor has a default yet, so buyers should not wait for one. Five requirements belong in any agent identity contract:
- SCIM-style provisioning for agents, so identities are created and revoked by machine, not by ticket.
- Short-lived, narrowly scoped tokens by default; standing credentials become a justified exception.
- A defined attestation cadence: each agent’s access re-certified on a schedule, result recorded.
- Human approval for privilege escalation, so an agent cannot widen its scope alone.
- A kill switch that revokes access rather than flipping a status flag, tested before it is needed.
A merger is when that list gets deferred: integration absorbs the engineering capacity revocation semantics require. The logic is legible: agents need identities, identities need an owner, and HR is the only system that already knows when someone’s relationship with the company changes. Whether C1.ai’s enforcement engine arrives intact inside Workday is a question the announcement cannot answer.
FAQ
How much is Workday paying for C1.ai? Undisclosed. The release gives no purchase price, revenue or valuation. Any figure in circulation is not from the announcement.
When is the deal expected to close? In Workday’s fiscal Q4 2027, the quarter ending 31 January 2027, subject to customary conditions.
How is this different from the Agent System of Record? The Agent System of Record registers agents — an inventory. C1.ai would govern what they can access across connected systems, from provisioning to deprovisioning.
What happens to a retired agent? It should lose access immediately. That is the failure mode the release highlights, because decommissioned agents often keep live credentials after the work stops.
Further Reading
- Workday — Workday to Acquire C1.ai, a Leading Agentic Identity Platform for People and Agents
- PR Newswire — Workday to Acquire C1.ai, a Leading Agentic Identity Platform for People and Agents
- C1.ai — Future of Identity Security 2026
- Deloitte — State of AI 2026
— The Agent Report