“When you use a Workday enterprise cloud application provided by your employer or another organization, that organization is the controller of your personal information. In these cases, Workday acts as a processor on their behalf.”
This analysis describes what Workday's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The controller/processor distinction determines who bears primary legal responsibility for data protection decisions and to whom individuals must direct rights requests.
If your employer provides your access to Workday, your employer—not Workday—is the legal controller of your personal information, and Workday processes that data only on your employer's behalf.
How other platforms handle this
Where we process your personal data, personal information, or personally identifiable information in the provision of Services to you, you acknowledge that Zoom is acting on your behalf and you determine the means and purposes of the processing.
We process your data for necessary purposes as described in the main Policy, and for secondary purposes. We use both human and automated means to process your data.
Comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities
"When you use a Workday enterprise cloud application provided by your employer or another organization, that organization is the controller of your personal information. In these cases, Workday acts as a processor on their behalf.Excerpt from Workday's Privacy Statement
We read the privacy policies and terms of service of 38 AI platforms. Here is what they say about training, retention, arbitration, and liability.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The controller/processor distinction determines who bears primary legal responsibility for data protection decisions and to whom individuals must direct rights requests.
If your employer provides your access to Workday, your employer—not Workday—is the legal controller of your personal information, and Workday processes that data only on your employer's behalf.
ConductAtlas has identified this type of provision across 273 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Workday.