AI Vendor Directory · HR & recruiting AI
Does Workday AI train on your data?
Depends — varies by plan or setting. Vendor-stated default: configurable. Workday's Responsible AI page states: "We never share customer data to train third-party public models." Use of customer tenant data to train/improve Workday's own cross-customer ML is contractual and opt-in: customers sign the Innovation Services terms and enable per-feature, in-tenant opt-ins (data-selection toggles); tenants that do not opt in are not contributing training data. Applies to all subscription customers. Confirm your tenant's Innovation Services opt-in status when registering this system.
By the Shieldra Compliance Team · Last updated 2026-07-29
What is Workday AI (incl. HiredScore)?
AI/ML embedded across Workday HCM/Finance, including HiredScore AI for Recruiting (candidate grading/orchestration, acquired 2024) and now Paradox. Enterprise-grade governance posture: ISO 42001 certified plus NIST AI RMF third-party attestation.
Key facts
- Vendor: Workday, Inc. — https://www.workday.com
- Trains on customer data by default: configurable
- Source for the training answer: https://www.workday.com/en-us/artificial-intelligence/responsible-ai.html
- Last verified: 2026-07-29
What certifications does Workday AI hold?
- SOC 1 Type II
- SOC 2 Type II
- SOC 3
- ISO 27001
- ISO 27017
- ISO 27018
- ISO 27701
- ISO 42001
- NIST AI RMF attestation
- FedRAMP Moderate
- HIPAA
- CSA STAR Level 1
- TISAX
- IRAP (Protected)
Security, DPA, and subprocessor links
- Security / trust page: https://www.workday.com/en-us/why-workday/trust/compliance.html
- Subprocessor list: https://www.workday.com/en-us/legal/subprocessors.html
What is your EU AI Act role when you build on Workday AI?
Workday positions itself as provider of its AI tools; the employer deploying HiredScore-style candidate grading operates an Annex III (employment) high-risk system and carries deployer duties under Article 26 (human oversight, transparency to workers/candidates, monitoring).
HiredScore-style candidate scoring is a textbook AEDT under NYC LL144 — the employer must commission annual independent bias audits and post notices; Illinois HB 3773 (eff. Jan 1, 2026) requires notice and prohibits discriminatory AI use in employment decisions; Colorado's AI Act (eff. June 30, 2026) imposes deployer risk-management and impact-assessment duties for consequential employment decisions.
What to record in your AI registry
- Provider: Workday, Inc.
- Model type: in house
- Data typically flowing to the vendor: employee HR records, candidate PII and recruiting data, compensation/finance data
Sources
- https://www.workday.com/en-us/artificial-intelligence/responsible-ai.html
- https://www.workday.com/en-us/why-workday/trust/compliance.html
- https://www.workday.com/en-us/why-workday/trust/privacy.html
- https://www.workday.com/en-us/why-workday/trust/security.html
- https://www.workday.com/en-us/why-workday/trust.html
Disclaimer
Curated from vendor-published pages on the date above. Vendor terms change - verify against the cited sources before relying on a profile for a procurement decision. Last verified 2026-07-29.
Frequently asked questions
Does Workday AI train AI models on your data?
Depends — varies by plan or setting. Vendor-stated default: configurable. Workday's Responsible AI page states: "We never share customer data to train third-party public models." Use of customer tenant data to train/improve Workday's own cross-customer ML is contractual and opt-in: customers sign the Innovation Services terms and enable per-feature, in-tenant opt-ins (data-selection toggles); tenants that do not opt in are not contributing training data. Applies to all subscription customers. Confirm your tenant's Innovation Services opt-in status when registering this system.
What certifications does Workday AI hold?
Per the vendor's published pages as of 2026-07-29: SOC 1 Type II; SOC 2 Type II; SOC 3; ISO 27001; ISO 27017; ISO 27018; ISO 27701; ISO 42001; NIST AI RMF attestation; FedRAMP Moderate; HIPAA; CSA STAR Level 1; TISAX; IRAP (Protected).
What is your EU AI Act role when you build on Workday AI?
Workday positions itself as provider of its AI tools; the employer deploying HiredScore-style candidate grading operates an Annex III (employment) high-risk system and carries deployer duties under Article 26 (human oversight, transparency to workers/candidates, monitoring).
