At Workday’s customer conference in Las Vegas this week, executives spent much of their time describing a workforce that includes software agents doing work on their own. The purchase the company announced on the last full day of the event addresses the question that follows: who decides what those agents are allowed to touch.
Workday said Oct. 13 that it had signed a definitive agreement to acquire C1.ai, an identity platform whose parent company is ConductorOne. The agreement was recorded in a regulatory filing dated Oct. 12, and Workday expects the deal to close in the fourth quarter of its fiscal year 2027, which ends Jan. 31. The company did not disclose what it agreed to pay, and the filing lists no purchase price or consideration for the transaction.
C1.ai sits in a branch of security software known as identity governance. Its product connects to the systems a business runs on, from email, customer relationship management and code repositories to finance systems and cloud infrastructure, and decides which of them a given person or agent can open. It also removes that access when the work or the role ends.
Most large employers still do that job by hand. New hires file tickets for the tools they need, permission changes move through spreadsheets and approvals, and periodic reviews arrive long after a contractor has left. The job has grown harder as companies deploy software that acts without anyone driving it. Research published by C1.ai found that 95% of large U.S. companies already run autonomous agents. A survey by Deloitte put the share that report a mature way to govern them at 21%.
Workday’s argument is that the events that matter are already recorded in its own system. The company counts more than 11,500 organizations as customers, including more than 65% of the Fortune 500, and its software tracks hiring, job changes and departures. An existing product, the Agent System of Record, keeps a register of the agents a customer has deployed. C1.ai would extend that register into enforcement, granting an agent the reach it needs for a task and cutting it off when the task is finished.
“Today’s companies run on a combined workforce of people and AI agents,” said Gerrit Kazmaier, Workday’s president of product and technology. He said the acquisition would let the company manage and enforce exactly who, and what, has access to connected applications and systems.
Alex Bovee, chief executive and co-founder of C1.ai, said enterprises cannot secure artificial intelligence with the tools of the previous generation. “Enterprises can’t secure the AI era using yesterday’s IT tickets,” he said in a statement. The platform, he added, would manage access for every person and agent in real time.
The hardest part of the problem is granularity. An agent acting on behalf of an employee should reach only part of what that employee can; an agent working on its own may need broader reach and closer supervision. A company that retired an agent last quarter ought to be certain that the agent cannot still sign in. Few buyers have tools that operate at that level of detail, which is why identity vendors have spent the past two years rebuilding their products around agents.
Ownership of the category is contested. Identity governance has long been sold by specialists as software that sits beside the systems of record it protects, connected through integrations that customers maintain. Workday is betting that the record of who works where, and in what role, is the better place to decide access, particularly when the subjects of those decisions include software rather than people.
Regulators and auditors give the argument weight. Access reviews are a standing requirement for companies subject to financial reporting rules, and credentials that outlive their purpose are the kind of finding that draws attention. Corporate buyers who spent the past year piloting agents have begun asking who can prove which of them touched what.
Workday declined to say how the capability would be priced or whether it would be sold as a separate product or folded into existing subscriptions. BofA Securities advised Workday on the transaction, and Qatalyst advised C1.ai. The deal remains subject to customary closing conditions, including regulatory review.
The shares gave little away. Workday stock closed at $186.02 on Oct. 13, down 1.2%, and the absence of a disclosed price left investors without a way to judge whether the company overpaid. The average price target among the 41 analysts who cover the stock is about $208, a gap that suggests the market is waiting for evidence rather than announcements.
For Workday, the acquisition is a wager on where the next budget line appears. Software that merely lists the agents a company runs is a convenience. Software that can say which of them touched a payroll record, and prove it to an auditor, is a control, and controls are what enterprises pay for when a technology moves from experiment into production.
Whether buyers want that control from their human resources vendor is unresolved. The companies most exposed to agent sprawl are often the least willing to give one supplier the keys to every system they run, and the integration work that follows a deal of this kind has undone larger acquisitions. Workday has not said how many of its 11,500 customers run agents at all, which leaves the size of the opportunity, like the price it paid, a matter of inference.
