Workday

HR & People United States Website Reviewed Sept. 2, 2026

Enterprise HCM, payroll, financial management and workforce planning delivered as SaaS.

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO/IEC 27001:2022 Accredited third-party certification body Workday production services and supporting ISMS Current
ISO/IEC 27017:2015 and ISO/IEC 27018:2019 Accredited third-party certification body Cloud security controls and protection of PII in public cloud for Workday services Current
ISO 22301:2019 Accredited third-party certification body Business continuity management system covering Workday production services Current
ISO/IEC 27701:2019 Accredited third-party certification body Privacy information management system extension to the Workday ISMS Current
SOC 1, SOC 2 and SOC 3 Type II Independent third-party auditor Workday HCM, Payroll and Financial Management; SOC 1 and SOC 2 available to customers under NDA Current

Compliance Frameworks

ISO/IEC 27001:2022
Full
SOC 2 Type 2
Full
ISO 22301:2019
Full
ISO 22301 certified business continuity management system
GDPR 2016/679
Full
Workday acts as processor under its DPA; SCCs and UK IDTA available
Sarbanes-Oxley (SOX)
Partial
Workday SOC 1 supports customer SOX controls over payroll and financial reporting

Assess Workday in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.