Workday’s announcement is best understood as a platform strategy assembled over time, not one product launch. The company is combining conversational AI and task-running agents (Sana), a proposed control plane for agent fleets, a data-interoperability layer (Workday Data Cloud), and developer tools (Workday Build). Together, they are intended to move Workday from a system that records HR and finance activity toward a governed system that can help execute it.
The short version
| Product | What it does | Status to verify |
|---|---|---|
| Sana Core (Sana for Workday) | Conversational access to Workday HR and finance information, actions and workflows. | Workday announced general availability in March 2026; tenant entitlements still apply. |
| Sana Enterprise | Extends the Sana experience to selected third-party applications and cross-system workflows. | Announced as generally available, subject to a separate SKU, connectors and configuration. |
| Illuminate Agents | Role-based automation for payroll, recruiting, accounting, planning, contracts and other processes. | Availability varies by agent and release. |
| Agent System of Record | Registers, governs, monitors and helps discover Workday and third-party agents. | Strategic platform proposition; control over external agents depends on integrations and adoption. |
| Workday Data Cloud | Connects Workday people and financial data with external data platforms using live or zero-copy access. | Early-adopter availability was reported in 2026; broader availability was planned later in 2026, with no verified exact GA date. |
| Workday Build | Developer platform for applications, agents and orchestrations on Workday. | Expanded in June 2026 with additional agent tooling. |
| Developer Agent, Agent-Ready Tools and Agent Passport | Natural-language development, governed Workday tools for agents, and testing or verification. | Early access through Workday Extend Professional; Workday projected general availability in the second half of 2026. |
The central thesis is Workday’s own: domain data, permissions, business processes and audit controls can give enterprise agents a more controlled operating environment than a general-purpose model working without that context. That is a positioning claim, not independent proof of outcomes.
What Workday actually unveiled
Sana is more than a chatbot
Workday describes Sana as a conversational and agentic layer. Sana for Workday, also called Sana Core, is embedded in Workday and can answer questions or initiate Workday HR and finance tasks. The Sana Self-Service Agent targets employee and manager questions and actions. Sana Enterprise extends the experience to applications such as Gmail, Google Calendar, Google Drive, Jira, Microsoft Outlook, Salesforce, ServiceNow, SharePoint, Slack and Zoom, according to Workday’s announcement.
“Available worldwide” does not mean every connector or write action is enabled in every tenant. Subscription, identity configuration, security agreements, supported connectors and Workday’s release model determine what a customer can use.
Illuminate Agents are specialized workers
Workday’s role-based Illuminate Agents are designed around particular jobs rather than one universal assistant. Announced examples include payroll, contracts, financial auditing, policy, contingent-worker sourcing, document-driven accounting, frontline-worker support, supplier contracts, planning, deployment, business-process optimization and employee self-service. Workday’s May 2025 announcement gives the release context, but each agent can have a different early-access or general-availability date: Workday Illuminate Agents announcement.
These agents may be built by Workday, by a customer or by a partner. Workday also announced a partner network including Accenture, AWS, Google Cloud, Microsoft and PwC: AI Agent Partner Network announcement.
How the pieces fit together
This is a conceptual architecture, not a claim that every customer deploys one unified stack:
- Users and external applications: employees, managers and business systems initiate requests.
- Sana: provides a conversational entry point and can coordinate actions.
- Workday and partner agents: perform specialized HR, finance and cross-system work.
- Agent System of Record: supplies registration, ownership, permissions, monitoring and lifecycle controls.
- Workday Build and Extend: let developers create applications, tools and orchestrations.
- Workday applications and Data Cloud: provide business processes and access to internal and external data.
What the Agent System of Record is for
Enterprises can accumulate agents from Workday, Microsoft, Google, Salesforce, service-management products, integrators and internal teams. Each agent needs an owner, purpose, approved permissions, testing evidence, monitoring and a retirement process. Workday announced the Agent System of Record in February 2025 as a registry and control plane for Workday and third-party agents, with marketplace discovery.
Recommended Free Tools
It should not be read as an automatic enterprise-wide authority over every agent. Its reach depends on which agents are registered, which integrations exist and whether the customer adopts Workday’s governance model.
Why governance matters in practice
- An agent may be allowed to read payroll data but not approve a payment.
- A manager’s permissions may change after an agent is configured.
- Two agents may attempt conflicting updates.
- A connector may be read-only, rate-limited or temporarily unavailable.
- A multi-step workflow can fail after some actions have completed.
- Retiring an agent requires finding downstream workflows that still call it.
Organizations still need approval thresholds, separation of duties, human escalation, detailed logs, rollback procedures and production-like testing. Inheriting a user’s Workday permissions narrows access; it does not remove business-process or model risk.
Workday Data Cloud is a data layer, not a hyperscale cloud
Workday Data Cloud is positioned as an interoperability and access layer. Workday says it can connect people and money data with external platforms, including Snowflake, Salesforce, Google Cloud, Databricks and Google BigQuery, using capabilities such as zero-copy access and live queries.
The practical promise is less copying, fewer pipelines and fresher data when HR or financial information is used in analytics, applications or AI. It is not necessarily a replacement for a company’s warehouse or lakehouse. Buyers should verify, for each connector, query method, write support, governance control, workload and edition, what is actually available.
On May 28, 2026, Workday and Google Cloud said Data Cloud was available to early adopters and planned for general availability later in 2026: partnership announcement. That wording does not establish an exact GA date.
Workday Build opens the platform to developers
Workday introduced Workday Build in September 2025 as an umbrella for creating applications, agents and orchestrations, connecting external agents to Workday, and sharing solutions through its ecosystem. The initial announcement referenced Agent Builder, Developer Copilot, Agent Gateway, Workday Extend and a developer community: Workday Build announcement.
The June 2026 additions
- Developer Agent: helps create AI applications and agents from natural-language instructions in tools including Claude Code, Cline, Codex, Cursor and Google Antigravity.
- Agent-Ready Tools: exposes controlled Workday data and actions through guardrails and the Model Context Protocol (MCP).
- Agent Passport: supports testing, verification and monitoring against frameworks including the OWASP LLM Top 10, NIST AI Risk Management Framework and MITRE ATLAS.
Workday described these as early-access capabilities through Workday Extend Professional and projected general availability for the second half of 2026: June 2026 developer announcement. A natural-language coding assistant accelerates development; it does not replace specialists responsible for security, data modeling, testing and deployment.
What MCP does—and does not—solve
MCP can standardize how an agent calls an exposed tool. It does not make every Workday function portable or universally interoperable. Authentication, scopes, connector behavior, rate limits, error handling and the specific tools a customer exposes remain decisive.
Availability, entitlements and cost
Workday’s public material supports different labels for different products:
- Sana Core and Sana Enterprise: announced as generally available in March 2026. Sana Core requires the relevant Core HCM or Core Financials entitlement. Sana Enterprise requires the Sana Enterprise SKU.
- Sana Core and the Self-Service Agent: Workday said they could be accessed through Flex Credits without an extra license or separate paywall, while administrator documentation identifies subscription-agreement and entitlement requirements.
- Workday-built agents: generally require the Universal Main Subscription Agreement in production and non-production tenants; self-built agents have different non-production requirements.
- Data Cloud: early-adopter availability and planned later-2026 GA were reported; exact timing was not verified.
- Developer Agent, Agent-Ready Tools and Agent Passport: early access through Workday Extend Professional, with projected second-half-2026 GA.
Relevant administrator requirements are documented by Workday at Sana security and permissions and Sana setup steps. Workday does not publish simple list prices in the cited material. Flex Credit consumption, additional terms and implementation work can make costs harder to forecast than a per-seat model.
Why this matters to technology and finance leaders
Potential advantages
- Deep access to Workday’s HR and finance data model.
- Existing identity, role, permission and audit infrastructure.
- A central place to register and monitor agents.
- Lower integration friction for Workday-native workflows.
- Potentially less data duplication through live or zero-copy approaches.
- A path from employee self-service to multi-step automation.
Trade-offs and failure modes
- Vendor concentration: Build, Sana, Data Cloud and the Agent System of Record increase dependence on Workday’s APIs, release cadence and commercial model.
- Data quality: inconsistent organizations, incorrect financial dimensions, stale content and ambiguous policies can produce unreliable results.
- Cross-system fragility: transaction integrity is harder when a workflow spans Workday and unavailable, read-only or differently authenticated systems.
- Permission design: a permitted action can still be inappropriate without approval limits or separation of duties.
- Model error: a plausible explanation of a payroll or accounting result may still be wrong and require human review.
- Availability gaps: an announced feature may not be enabled in a particular tenant, geography, release or contract.
Who should consider it—and who should not
Likely fit
- Organizations already running Workday HCM or Financial Management.
- HR and finance leaders who need tightly governed automation.
- Architects seeking Workday-native extensions rather than a separate authorization layer.
- Companies prepared to operate an agent inventory with owners, tests and retirement controls.
Possible poor fit
- Organizations that do not use Workday HCM or Financial Management.
- Businesses whose main automation needs sit outside HR and finance.
- Buyers requiring transparent public pricing or a cloud-neutral control plane.
- Customers unwilling to purchase additional SKUs, sign subscription terms or manage Flex Credit consumption.
- Teams without the data quality and process ownership needed for write-capable agents.
What to ask before committing
- Which Sana, Illuminate Agent, Data Cloud or Build capabilities are generally available in our tenant and geography?
- Which actions are read-only, which can write data, and what approval or rollback controls exist?
- Which connectors support our required systems, identities, rate limits and failure handling?
- What SKU, Universal Main Subscription Agreement, Flex Credit and Extend entitlement applies to each workload?
- How are agents registered, tested, monitored, versioned and retired?
- Who owns data quality, model evaluation, human escalation and incident response?
- Can we export agent definitions, logs and policies if our architecture changes?
Bottom line
Workday is assembling an enterprise AI platform around its authority over HR and finance data and business processes. Sana supplies the user and orchestration layer; Illuminate Agents provide specialized automation; Data Cloud connects Workday information to external data environments; Workday Build supplies development tools; and the Agent System of Record addresses identity and lifecycle governance.
The strategic shift is credible as a product direction, but it is not one simultaneous launch and not proof of autonomous, cross-enterprise work. Customers must distinguish general availability from early access, confirm entitlements and connector behavior, and treat permissions, data quality, human review and operating controls as part of the implementation—not as features an agent can supply automatically.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesQuick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
