Skip to content

WorkdayCompliance, certifications and attestations

Certifications held, by family20 held
Status
Public
Founded
2005
Trust center Company profile
20
Certifications held
5
Backed by a registry
22
Pieces of evidence
Sep 24, 2026
Last captured
Across fru.devAcquisitionsEarningsPaydays

SOC reports

ISO standards

AI governance

US government

Health

Payments

Privacy

Cloud security

Regional

From public trust centers and registries on the date shown. Confirm scope with the vendor. Logos via logo.dev; trademarks belong to their owners.

History

Added or renewedUpgradedIn process or ReadyLapsed or removed
  1. AddedCSA STARFirst listed in the CSA STAR Registry
  2. AddedFedRAMP ModerateWorkday Government Cloud (WGC)
  3. ReadyFedRAMP ModerateWorkday Government Cloud (WGC)
  4. AddedData Privacy FrameworkWorkday, Inc.

Evidence

Every source, what it says and when it was read.

SOC 11 source

Held · Type IIVendor compliance page
...or data breaches, and prevent unauthorized access to your data. Our compliance resources. SOC 1 Applies to: Workday Enterprise Products, Workday Adaptive Planning, Workday VNDLY Service Organization Controls...
Captured Sep 24, 2026Open source

SOC 21 source

Held · Type IIVendor compliance page
...and operating effectiveness of controls relevant to Workday enterprise cloud applications. SOC 2 Applies to: Workday Enterprise Products, Workday Adaptive Planning, Workday Strategic Sourcing, Workday Peakon...
Captured Sep 24, 2026Open source

SOC 31 source

HeldVendor compliance page
...process, which includes an audited mapping of Workday controls against these frameworks. SOC 3 Applies to: Workday Enterprise Products, Workday Adaptive Planning, Workday Peakon Employee Voice, Workday Strategic...
Captured Sep 24, 2026Open source

ISO/IEC 270011 source

HeldVendor compliance page
...SOC 3 report for Workday Contract Intelligence and Contract Lifecycle Management (Evisort). ISO 27001, 27017, 27018, 27701 Workday maintains a comprehensive, integrated Information Security and Privacy Management...
Captured Sep 24, 2026Open source

ISO/IEC 270171 source

HeldVendor compliance page
...certificate covers: ISO/IEC 27001:2022 – Core Information Security Management Systems (ISMS) ISO/IEC 27017:2015 – Security Controls for Cloud Services ISO/IEC 27018:2019 – Protection of Personally Identifiable Information...
Captured Sep 24, 2026Open source

ISO/IEC 270181 source

HeldVendor compliance page
...Security Management Systems (ISMS) ISO/IEC 27017:2015 – Security Controls for Cloud Services ISO/IEC 27018:2019 – Protection of Personally Identifiable Information (PII) in Public Clouds ISO/IEC 27701:2019 – Privacy Information...
Captured Sep 24, 2026Open source

ISO/IEC 277011 source

HeldVendor compliance page
...ISO/IEC 27018:2019 – Protection of Personally Identifiable Information (PII) in Public Clouds ISO/IEC 27701:2019 – Privacy Information Management Systems (PIMS) Scope of In-Scope Products Because our integrated management...
Captured Sep 24, 2026Open source

ISO/IEC 420012 sources

HeldCSA STAR Registry

Partner entry in the STAR Registry

Listed as Workday Inc. since 2024-02-26; ISO/IEC 42001 entry
Captured Sep 23, 2026Since Feb 26, 2024Open source
HeldVendor compliance page
...27001/27017/27018/27701 certificate here. Access our ISO 27001 certificate for VNDLY here. ISO 42001 ISO 42001 is an international standard that specifies requirements for establishing, implementing, maintaining,...
Captured Sep 24, 2026Open source

FedRAMP1 source

Held · ModerateFedRAMP Marketplace

Workday Government Cloud (WGC)

FedRAMP Authorized, Moderate impact; authorized 2022-07-11 (Agency); assessor Coalfire Systems, Inc.; 5 agency authorizations
Captured Sep 23, 2026Since Jul 11, 2022Open source

HIPAA (BAA)1 source

HeldVendor compliance page
...Protection Regulation (GDPR), the U.S. Health Insurance Portability and Accountability Act (HIPAA), APEC Privacy Framework, ISO 27001 International Standard for Information Security Management Systems, and other...
Captured Sep 24, 2026Open source

Data Privacy Framework1 source

HeldData Privacy Framework List

EU-US, UK extension, Swiss-US; non-HR data and HR data. Workday, Inc.

EU-US status: Active; certified since 2016-08-12; recertification due 2027-05-28; verification: Outside Compliance Review
Captured Sep 23, 2026Since Aug 12, 2016Renewal due May 28, 2027Open source

EU Cloud Code of Conduct2 sources

HeldCSA STAR Registry

Partner entry in the STAR Registry

Listed as Workday Inc. since 2024-02-26; EU Cloud Code of Conduct entry
Captured Sep 23, 2026Since Feb 26, 2024Open source
HeldVendor compliance page
...processing under the Global CBPR System. Access our certifications on the Global CBPR Forum. EU Cloud Code of Conduct Applies to: Workday Enterprise Products, Workday Adaptive Planning The EU Cloud Code of Conduct (CCoC) consists...
Captured Sep 24, 2026Open source

CSA STAR1 source

Held · Level 1CSA STAR Registry

CAIQ

Listed as Workday Inc. since 2024-02-26; Level 1 (self-assessment)
Captured Sep 23, 2026Since Feb 26, 2024Open source

IRAP1 source

HeldVendor compliance page
...out baseline technical controls. Access our Cyber Essentials Plus certificate. Australian IRAP Applies to: Workday Enterprise Products, Workday Adaptive Planning The Australian Government maintains security...
Captured Sep 24, 2026Open source

TISAX1 source

HeldVendor compliance page
...Level 1 Certified on the CSA STAR Registry. Access the Workday listing on the STAR Registry. TISAX Applies to: Workday Enterprise Products, Workday Adaptive Planning, Workday Strategic Sourcing The Trusted Information...
Captured Sep 24, 2026Open source

Compare with

Weekly: vendors that gained or lost a certification, Wednesdays.