Workday Sana and AI Agents in 2026: ASOR, Security, Use Cases and Skills

By ZaranTech Workday Practice Team. A practical guide to Sana from Workday, AI agents, Agent System of Record, enterprise use cases, security and the skills Workday teams need in 2026.

Sana from Workday is changing Workday from a system people navigate into an AI experience that can find answers, take action and coordinate work. For HR, finance and IT teams, the key question is not whether AI appears in Workday. It is how agents use Workday data, permissions and business processes, and how organizations govern the resulting digital workforce.

This guide explains Sana, Workday AI agents and Workday Agent System of Record in practical terms, with implementation questions and a skills roadmap for 2026.

What is Sana from Workday?

Sana is Workday's AI platform and experience layer. Workday describes it as a place to find enterprise knowledge, act across applications, build content and analyses, and automate workflows. Sana for Workday operates within Workday's security, permissions and audit framework. Sana Enterprise extends the experience across other enterprise applications.

Sana is not only a chatbot. It can interpret user intent and coordinate specialized agents and tools to complete multi-step work, subject to permissions, approvals and product availability.

What are Workday AI agents?

Workday AI agents are role-focused capabilities designed for HR, finance, IT and employee services. Examples described by Workday include self-service, recruiting, payroll, workforce management, accounting, financial audit, revenue contracts and developer use cases.

An agent may answer a policy question, initiate a time-off request, investigate a payroll exception, prepare audit evidence or support financial close activity. The value comes from combining AI with Workday's business context rather than placing a general assistant above disconnected data.

What is Workday Agent System of Record?

Workday Agent System of Record, often shortened to ASOR, is the governance layer for managing AI agents alongside people. Workday positions it as a central system for agent identity, roles, permissions, activity and value.

  • Universal identity: each agent can have a distinct identity and security profile.
  • Inherited permissions: agents operate within approved security groups and organizational structures.
  • Unified visibility: organizations can track agent actions and human interactions.
  • Lifecycle management: teams can govern agents from registration through monitoring and retirement.
  • Value tracking: analytics can help compare adoption, activity and outcomes.
  • High-value use cases

    Employee and manager self-service

    Sana Self-Service Agent can answer questions grounded in company policies and Workday data, then help complete tasks. Good candidates include time off, pay information, benefits questions and common manager actions.

    Recruiting and talent

    Agents can support candidate discovery, scheduling, interview preparation and recruiting administration. Human accountability is essential for consequential employment decisions.

    Payroll and workforce management

    Agents can help detect exceptions, explain issues and coordinate corrective work. Teams must preserve controls, approvals and traceability.

    Finance and accounting

    Workday describes agents for audit, contracts, accounts payable and close. These scenarios can reduce repetitive evidence collection and exception review while keeping finance professionals responsible for material judgments.

    IT and development

    Workday Build and Developer Agent are designed to help teams create apps, agent skills and integrations. Agent-ready tools can expose controlled actions to Workday-native or third-party agents.

    Security and governance questions

  • Which identity and security group does the agent use?
  • What data can it read, and what transactions can it initiate or complete?
  • Which actions require employee, manager or control-owner approval?
  • How are prompts, tool calls, outputs and overrides logged?
  • How are third-party agents registered, verified and monitored?
  • What happens when data is missing or an integration is unavailable?
  • How will the organization measure quality, risk, adoption and value?
  • A practical adoption roadmap

    1. Inventory current capabilities

    Confirm which Sana and agent features are licensed, generally available or in early access for the organization's Workday products and regions.

    2. Select one bounded workflow

    Choose a high-volume process with a clear owner and baseline. Map the existing steps, exceptions, data and controls.

    3. Configure governance first

    Define identity, permissions, human checkpoints, audit evidence and escalation before expanding autonomy.

    4. Train by role

    Employees need safe and effective use. Functional teams need process and data judgment. Security and audit teams need monitoring and assurance skills. Leaders need portfolio and value oversight.

    5. Measure and expand

    Track completion, quality, cycle time, user adoption, overrides and incidents. Expand only after the first workflow is useful, safe and supportable.

    Skills Workday professionals need next

  • Workday business-process and security fundamentals;
  • data quality, business objects and reporting;
  • agent use-case design and human oversight;
  • integration and Workday Orchestrate concepts;
  • evaluation, auditability and responsible AI;
  • change management and user adoption.
  • Organizations can build these capabilities through Workday learning paths and customized corporate Workday training aligned to real roles and workflows.

    Frequently asked questions

    Is Sana the same as Workday Illuminate?

    Workday previously used Illuminate for its AI capabilities. In 2026, Workday introduced Sana as the new AI experience and platform bringing knowledge, action and workflow automation together.

    Can Workday agents act without a person?

    Agents can automate approved steps, but the appropriate autonomy depends on permissions, risk and configured oversight. Material decisions should retain clear human accountability.

    Can ASOR manage third-party agents?

    Workday positions Agent System of Record as a governance system for Workday and external agents, providing centralized identity, permissions and visibility.

    Are all Sana agents generally available?

    No. Availability, licensing and regional support vary by capability. Confirm current Workday product documentation and commercial terms.

    Official sources

  • Workday: Sana platform
  • Workday: AI agents
  • Workday: Introducing Sana, March 2026
  • Workday product capabilities, availability and commercial terms change. Verify current documentation for your tenant and region.