The Pulse
Workday to Acquire C1.ai to Govern AI-Agent Access
Workday signed an agreement on October 13, 2026, to acquire C1.ai, whose identity platform manages access for people and AI agents. The companies say the planned integration will extend Workday’s Agent System of Record to control agents’ pe
AI.info Team · Written with AI ·
“Enterprises can't secure the AI era using yesterday's IT tickets.”
Alex Bovee, CEO and co-founder, C1.ai
Workday signed a definitive agreement on October 13, 2026, to acquire C1.ai, adding identity and access controls for AI agents to its enterprise software business. The companies say C1.ai’s platform can govern what people and agents reach across systems including email, customer-management software, code repositories, finance applications and cloud infrastructure. The deal has not closed, and Workday did not disclose a purchase price.
From agent registry to access control
Workday already offers an Agent System of Record, which gives companies a place to register and manage AI agents. The planned addition of C1.ai would extend that inventory into permissions: Workday says agents could receive access when needed and lose it when their work or role ends. The distinction matters because knowing that an agent exists does not, by itself, establish what it can access.
The proposed system also addresses employees’ changing access. Workday says a new hire could receive permissions tied to their role, while a transfer or departure could trigger corresponding access changes across connected applications. Today, the company says, many organizations rely on service tickets, spreadsheets and periodic reviews to manage those changes.
Governance trails agent adoption
The announcement points to a mismatch between agent use and companies’ ability to oversee it. C1.ai’s March survey of 508 IT and security leaders at U.S. organizations with more than 1,000 employees found that 95% said their organizations ran agents autonomously on IT or security tasks. Deloitte’s separate survey of 3,235 business and technology leaders across 24 countries found that 21% of respondents said their organizations had a mature governance model for autonomous agents.
The figures come from different surveys with different populations, but both frame the problem Workday is pitching C1.ai to address: autonomous software can act across business systems while permission reviews remain built around people and slower administrative processes. C1.ai’s platform is designed to assign scoped access, enforce policies, support human approval and keep a record of actions, according to Workday’s description.
Closing is expected by January 31, 2027
Workday expects the acquisition to close in the fourth quarter of its fiscal 2027 year, which ends January 31, 2027, subject to customary closing conditions. The company identified BofA Securities and Orrick as its financial and legal advisers; C1.ai named Qatalyst and Ashurst Perkins Coie. The announcement did not specify how the product will be packaged or when customers will receive the combined capabilities.
The deal’s practical test will be whether C1.ai can govern permissions across the many systems Workday does not itself operate, while tying those permissions to workforce changes and agent records inside Workday. Workday’s announcement describes that cross-system control as the intended reach of the acquisition; completion and delivery remain subject to closing conditions and product development.