Workday to Acquire C1.ai for Human and AI Agent Access

An access review asks a manager to explain why somebody still needs a permission. C1.ai made access reviews its first generally available product in 2022, building around a decision that can become harder as people move between teams and applications accumulate around them.

Workday signed a definitive agreement to acquire the San Francisco identity-security company on October 13, 2026. The proposed combination would connect workforce and agent records with access controls across enterprise systems, putting the reason somebody should have a permission closer to the machinery that grants and removes it.

The companies have not disclosed the purchase price. Workday expects closing in its fiscal fourth quarter ending January 31, 2027, subject to customary conditions. For enterprise buyers, the agreement places identity governance inside a wider conversation about who can act across HR, finance, IT and the applications around them.

What Workday Has Agreed to Acquire

The acquisition announcement describes an intended connection between Workday's workforce context and C1.ai's cross-system permissions. Workday's Agent System of Record already provides a place to manage agents; C1.ai would extend that relationship into access governance. The agreement remains pending, and the combined capabilities are forward-looking plans.

Workday's argument is rooted in the ordinary changes an employer already records: a new hire, a move to another job and an exit. Each event can alter the business justification for access to another system. The acquisition would give Workday a larger role in carrying that justification into the surrounding application environment, where a personnel record alone cannot complete the job.

Gerrit Kazmaier, Workday's president, product and technology, is the executive explaining the combined workforce rationale in the release. His current responsibilities include the company's platform, security, solutions and AI agents. That scope makes the proposed acquisition legible as a product and operating decision across the suite.

The closing window is a fiscal quarter, rather than a promise to close on January 31. Specific consideration, valuation and regulatory clearances remain undisclosed in the announcements reviewed. A buyer evaluating the eventual combination will also need delivery and commercial details that the signed agreement does not yet provide.

From Access Reviews to a Broader Identity Business

CEO Alex Bovee and CTO Paul Querna met while building Zero Trust products at Okta. They started the company in 2020, bringing experience in identity to the daily work of requesting, reviewing and removing access. The business was previously known as ConductorOne and now operates as C1.ai.

Its June 2022 announcement paired the general availability of an access-review product with a $15M Series A led by Accel. Security, IT and governance teams were the intended buyers. That original product put managers and control owners inside the permission decision, giving the company a starting point in the review work that surrounds an enterprise's existing applications.

In August 2023, Felicis led another $12M, expanding the same Series A to $27M. The distinction matters: $27M was the enlarged round's total. In October 2025, C1.ai announced a Greycroft-led $79M Series B, with CrowdStrike Falcon Fund, Accel, Felicis and others participating. C1.ai reported more than $100M in total capital raised at that point.

Those investments financed an independent identity-security company before the Workday agreement. They provide a history of the business and its backers, while revealing nothing about the undisclosed acquisition price or investor returns. The progression gives the transaction a longer operating history than the current enthusiasm for AI agents alone would suggest.

How Workforce Changes Become Permission Changes

C1.ai's current identity-governance product describes a chain running from authoritative identity events through policy, provisioning, review and remediation. HR systems and directories supply changes; connected applications receive the resulting access decisions. The product also addresses temporary privileges and separation-of-duties conflicts, where a combination of permissions can create a control problem across systems.

Its joiner, mover and leaver workflow makes that chain concrete. A department or manager change can prompt removal of access tied to an old role and provisioning of a new baseline. Employment-status changes can trigger account suspension and entitlement removal. These are company-described capabilities across connected systems, rather than evidence that every application in a customer's environment is automatically covered.

The commercial implication is that HR data becomes useful to people making decisions outside HR. An application owner still knows the resource being protected; a manager understands the employee's responsibilities; a security team understands the policy. A closer connection between their records can reduce the distance a business decision must travel before it reaches a permission.

That distance also contains exceptions. A person changing departments may still need to complete a project for the previous team, for example. Such a case would require a scoped decision and a record of who approved it. Connecting the systems makes that conversation easier to organize, while leaving the institution responsible for deciding what access the work deserves.

The Agent Record Adds Another Kind of Responsibility

In Alex Bovee's account of the agreement, C1.ai's identity mission is moving alongside the system that records the workforce. Agents complicate that relationship because they can act for an employee or operate independently. Their access must follow their purpose, ownership and scope, including when an assignment changes or ends.

For a security buyer, an agent entry in a register is a useful starting point for asking who owns the software and what it is meant to do. The surrounding systems still need permissions that correspond to that answer. Workday's proposed combination reaches into that second piece of work, where a record must become a decision another application can enforce.

DevCuration's coverage of Freshworks and Torii examines an adjacent connection between service requests and AI spend governance. Harbor's agent-risk financing follows the evidence toward insurance. Together, the records show several commercial conversations forming around the work delegated to agents.

This interpretation also puts a different set of people into the purchase conversation. HR and finance leaders may already have a relationship with Workday, while security and application owners carry responsibility for access elsewhere. The acquisition gives those groups a reason to examine the same workforce event together, with consequences beyond the employee directory.

The eventual integration will need to show how that shared account survives a change in role, an exception or an agent's retirement. Application owners will need evidence that the requested change reached their system, and reviewers will need enough context to understand what remains. The resulting audit trail will have to make sense to the next manager who inherits the team, long after the acquisition announcement has disappeared from the inbox.