Vendor record · workday.com
What Workday promises about your data.
Where Workday publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
We watch www.workday.com/content/dam/web/en-us/documents/legal/workday-subprocessors.pdf for Workday's sub-processor list, but the site's robots.txt asks automated readers not to fetch this document, so we do not read it.
- What has changed
We can't read a sub-processor list or data processing agreement from Workday yet, so we can't record a change to either.
- Its window
We couldn't quote a notice window: we haven't found a data processing agreement from Workday anywhere we've looked.
- Window
- —
- Pages
- 2
- Copies
- 6
no window we can quote yet
pages we watch
dated copies of all its pages, since August 31, 2026
Workday DPA
We have not found a data processing agreement published by Workday anywhere we looked. There is no sub-processor notice window we can quote.
Workday sub-processors
We watch www.workday.com/content/dam/web/en-us/documents/legal/workday-subprocessors.pdf for Workday's sub-processor list, and the site's robots.txt asks automated readers not to fetch this document, so we do not read it.
Every public change we have recorded · Where vendors publish their lists
How long Workday keeps your data
We hold no statement about data retention from Workday's watched pages. The pages we watch: privacy policy www.workday.com/en-us/privacy.html; trust and security page compliance.workday.com/. On training with customer data, Workday's privacy policy (www.workday.com/en-us/privacy.html, in the copy read September 12, 2026) says: “We do not collect directly identifiable information unless you voluntarily provide it in the free-text comments. - Why we collect it: To improve our products and services, understand user needs and preferences, and enhance the overall user experience. - Legal basis: Our legitimate business interests. ### Information obtained from other sources.”
Training on customer data
“Workday may receive your personal information from your organization so we can provide you with services, such as giving you access to training materials your organization bought, granting you administrative access, or inviting you to participate in our research studies.”
www.workday.com/en-us/privacy.html · read 2026-09-12
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Certifications the trust page names · CSA STAR · Cyber Essentials · FedRAMP · IRAP · ISO 27001 · ISO 27017 · ISO 27018 · ISO 27701 · ISO 42001 · SOC 1 · SOC 2 · SOC 2 Type II · SOC 3 · TX-RAMP
Laws the trust page names · GDPR
The pages' own stamps: Effective 2026-02-27
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
Where we get nothing
What Workday does not publish where we can read it
Of the 2 public pages we watch for Workday, these give us nothing right now.
Sub-processor list
the site's robots.txt asks automated readers not to fetch this document, so we do not read it
www.workday.com/content/dam/web/en-us/documents/legal/workday-subprocessors.pdfData processing agreement
we have not found one published anywhere we looked
Before you conclude anything
This only means we couldn’t read it on a public page. Workday may share it in its agreement, a trust portal, or with any customer who asks.
So treat it as a question to ask them: “Can you send your sub-processor list, and tell us when it changes?”
What this page doesn’t tell you
No score.
Nothing here rates Workday. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at Workday? With an email at workday.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is Workday in your product? Hear the morning we read a change.
You get the lines that moved, in Workday’s own words, and the date any window closes. No card. Nothing to cancel.