Workday AI Footnotes
What Workday's AI features do with your data, as Workday publishes it. Checked October 31, 2026. Workday in the Directory.
Agent access
Workday's MCP server (for example https://us.agent.workday.com/mcp) gives registered external agents Agent-Ready MCP tools; Workday documents this setup as for Extend Professionals only, and MSA customers enable it through Innovation Services. The Agent Gateway also accepts A2A calls, for example from Google Gemini Enterprise to the Self-Service Agent. All agents reach Workday through the Agent Gateway's regional endpoint. source, source 2, source 3, source 4, source 5, source 6 · checked October 31, 2026
Workday AI features and data contributions
Workday HCM, Financials, Payroll, Spend Management, Adaptive Planning and other product lines
| On by default? | On the Universal Main Subscription Agreement (UMSA), Workday turns on AI features and their data contributions for purchased SKUs automatically. On the Main Service Agreement (MSA), these features are only available through Innovation Services, which the customer opts into. source, source 2, source 3 · checked October 31, 2026 |
|---|---|
| How an admin turns it off | Data Contribution for Workday AI report (Manage: Data for ML Features domain): select Disallow Data Contribution per product line or AI feature, and exclude countries by end-user location. For Enhanced Features not in the report, opt out through a Workday support request. source, source 2 · checked October 31, 2026 |
| Trains on customer data? | UMSA: yes unless disallowed; Workday may use contributed data to train or enhance the associated AI feature. MSA: only the data the customer selects in Innovation Services. Workday does not share customer data to train third-party public models. source, source 2, source 3 · checked October 31, 2026 |
| Retention | When a customer disables data contributions for a feature or product line, Workday deletes past contributions within 30 days. No retention period is published for contributions that stay enabled. source · checked October 31, 2026 |
| Where data is processed | Not published as of October 31, 2026 |
| Model providers | Workday's subprocessor list (updated October 9, 2026) names Google LLC, Amazon Web Services and TypeSafe AI for natural language processing across product lines. It does not say which AI features use each one. source, source 2, source 3 · checked October 31, 2026 |
| Price | Not published as of October 31, 2026 |
Workday-built agents
Workday Agent System of Record (agents such as Case, Payroll, BP Optimize, Core Reporting and Financial Audit)
| On by default? | An administrator registers each agent, turns on its skills and activates it before users can interact with it. Workday-built agents require the UMSA. source, source 2 · checked October 31, 2026 |
|---|---|
| How an admin turns it off | Agent Management Hub: Configure Agent to turn each skill on or off and set the Available To security groups, then Activate. Deactivate hides the agent from users. source, source 2 · checked October 31, 2026 |
| Trains on customer data? | Workday-built agents require the UMSA, under which data contributions are on by default and may train or enhance the associated feature; Workday asks customers to keep them on for full agent function. For the Planning Agent and Decision Intelligence, Workday collects agent traces but does not use them to retrain or fine-tune the foundation model. Workday does not share customer data to train third-party public models. source, source 2, source 3 · checked October 31, 2026 |
| Retention | Not published as of October 31, 2026 |
| Where data is processed | Not published as of October 31, 2026 |
| Model providers | Not published as of October 31, 2026 |
| Price | Agents consume Workday Flex Credits in production tenants; Agent System of Record is included in the core subscription. Customers on Flex Credits get complimentary credits to try agents in production and can test free in non-production. No Flex Credit list price is published. source, source 2, source 3 · checked October 31, 2026 |
Sana for Workday (Sana Core, Sana Enterprise and the Self-Service Agent)
Sana Core with Core HCM or Core Financials; Sana Enterprise SKU
| On by default? | Not published as of October 31, 2026 |
|---|---|
| How an admin turns it off | Sana Enterprise administrators enable and manage third-party connectors, with connector controls that limit user access. Sana Core has no third-party connectors. source · checked October 31, 2026 |
| Trains on customer data? | No for third-party models only: Sana's sub-processor list says no LLM training is allowed on Sana's or Sana customers' data (OpenAI entry), and Workday says it never shares customer data to train third-party public models. Neither page says whether Workday or Sana trains its own models on Sana data. source, source 2 · checked October 31, 2026 |
| Retention | Anthropic, Mistral AI and OpenAI run under zero data retention configurations; OpenAI is used through an enterprise API in a private instance. source, source 2 · checked October 31, 2026 |
| Where data is processed | OpenAI routing is worldwide by default; routing within the EEA, EU and Switzerland is an option for EU customers only. Mistral AI processes in Sweden; Anthropic in the USA. source · checked October 31, 2026 |
| Model providers | Sana's sub-processor list (updated October 8, 2026) names OpenAI and Mistral AI for search infrastructure and content generation, and Anthropic for search and model infrastructure, in Sana Agents, Sana Core and Sana Enterprise. source, source 2, source 3 · checked October 31, 2026 |
| Price | Sana Core: complimentary Flex Credits when the customer signs the UMSA, then the Flex Credits and Platform Entitlement Policy; requires Core HCM or Core Financials. Sana Enterprise: a separate SKU plus the Flex Credits policy. No list price is published. source, source 2 · checked October 31, 2026 |
Connections to outside MCP servers
Sana Enterprise supports custom MCP connectors that administrators add with OAuth to reach internal or long-tail systems; Sana Core does not. No release stage is published. source, source 2 · checked October 31, 2026
Compliance
- ISO/IEC 42001: Workday's AI management system is certified to ISO/IEC 42001, with a third-party attestation of alignment to the NIST AI Risk Management Framework. source · checked October 31, 2026
EU AI Act
Workday states it complies with all EU AI Act provider obligations in effect for its products, aligns its Responsible AI program to later deadlines, and is an active member of the EU AI Pact. It publishes AI Fact Sheets for each feature. source, source 2 · checked October 31, 2026
Not published by Workday as of October 31, 2026
- Flex Credit list prices and per-agent rates (Workday points to a Community page that requires sign-in)
- Retention period for Workday-built agent conversations, except the Deployment Agent's 14-day chat history
- Model providers behind Workday-built agents outside Sana
- Whether Workday or Sana trains its own models on Sana conversations
- Region where Workday-built agents run LLM inference
- Release stage of the Workday MCP server and the Agent Gateway A2A endpoint
- Whether Workday AI features and agents are covered by Workday's HIPAA or FedRAMP offerings
Changes
No changes recorded since the first check on October 31, 2026.
How this page is made, and how to send a correction: method.