Is Workday safe with your data?
Workday
Workday, Inc.
Partial disclosure · high confidence
Workday earns a C (61/100) because it discloses its data practices only in part.
#90
of 177 apps ranked
61
score · HR & recruiting avg 65
-4
vs category average
Workday's controller-context privacy statement covers data-subject rights, legal-basis mapping, and named international-transfer safeguards. It never says whether inputs are used to train AI models, and its retention language is vague, so it earns a mid C. The statement governs website visitors, event attendees, and customer or supplier representatives. When people use Workday's HR and finance applications through their employer, Workday acts as a processor and the employer is the controller, so that end-user data is out of scope here.
What Workday's privacy policy says about your data
Full rights menu
The statement grants access, correction, deletion, portability in a structured machine-readable format, objection, and restriction. It describes an online request form and identity verification.
Named transfer safeguards
International transfers from the EEA, UK, and Switzerland rely on standard contractual clauses approved by the European Commission and on the EU-U.S., UK, and Swiss Data Privacy Framework.
No data sale, advertising opt-out
The SaaS model statement says Workday does not sell or monetize users' data. For cookie-based targeted advertising that some laws treat as a sale or share, there is an opt-out via Your Privacy Choices and the Global Privacy Control.
Vague retention, silent on training
Retention is kept for as long as there is a legitimate business need, with no day count and no deletion timeline. The statement never says whether inputs are used to train AI models.
What the policy is silent or vague on
- Not stated: keeping user inputs out of model training
- Not stated: a way to opt out of training
- Not stated: whether training use differs by plan
- Not stated: your ownership of generated outputs
Workday privacy rating
Details
- Category
- HR & recruiting
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2026-02-27
- Region scored
- Global / US-default
- Assessed
- 2026-06-20
Other hr & recruiting apps
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.