Workday
Security and trust center evidence
Experience a new way to work with Sana and agentic AI from
Summary
Workday has 3 registry-verified rows in the CertReports index, last verified 1 Nov 2026. The strongest row is FedRAMP: FedRAMP Authorized. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 19 Sep 2026, Workday is listed in the FedRAMP registry as Authorized. As of 19 Sep 2026, the FedRAMP registry shows Workday's authorization issued 11 Jul 2022 and assessed by Coalfire Systems, Inc. As of 17 Sep 2026, Workday is listed in the CSA STAR registry as a Trusted Cloud Provider with a Level 1 CAIQ self-assessment issued 26 Feb 2024. As of 17 Sep 2026, Workday is listed in the EU-US Data Privacy Framework registry as active across the Swiss-US, UK Extension, and EU-US certifications, issued 12 Aug 2016. As of 17 Sep 2026, the EU-US Data Privacy Framework registry shows Workday's certification expiring 28 May 2027.
- FedRAMP: Authorized, issued 11 Jul 2022, assessed by Coalfire Systems, Inc. (as of 19 Sep 2026)
- CSA STAR: Trusted Cloud Provider, Level 1 CAIQ self-assessment issued 26 Feb 2024 (as of 17 Sep 2026)
- EU-US Data Privacy Framework: active, issued 12 Aug 2016, expires 28 May 2027 (as of 17 Sep 2026)
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 19 Sep 2026; it is regenerated whenever a row changes.
Among hr and hris vendors
3verified rows
Category median 0, across 94 indexed hr and hris vendors. Workday has more verified rows than 96 percent of them.
employee datahr managementpayrollworkforce planning
Compare with similar vendors
Pick your own comparisonCompliance grid
FedRAMPVerifiedFedRAMP Authorized
as of 1 Nov 202646 sources · Coalfire Systems, Inc.
CSA STARVerifiedSTAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider
as of 26 Oct 20266 sources
EU-US Data Privacy FrameworkVerifiedActive: SW-US Certification, UK Extension Certification, EU-US Certification
as of 26 Oct 20261 source
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this. Check the vendor trust centre.
Subprocessors
No subprocessor list captured yet.
Change history
- 19 Sep 2026Trust centre movedTrust centre URL is now https://security.workday.com/.
Similar vendors with evidence
Related by product tags and the HR and HRIS category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Personio
HR and HRIS
Hibob
Finance and accounting
Streamline HR, Payroll & Finance with
Deel
HR and HRIS
The all-in-one HR and payroll platform for global teams
UKG
HR and HRIS
HR, Payroll, & Workforce Management
Evidence against regulations
All regulations for WorkdayHow much of each regulation’s vendor requirements Workday’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read