Workday Launches Agent Passport to Verify Every AI Agent in the Enterprise

Workday has unveiled a set of agentic AI capabilities addressing a problem most enterprises now share: knowing whether an AI agent operating in your systems is actually safe to deploy. Agent Passport gives agents digital attestations from trusted security and compliance vendors, each tied to a recognized public standard.

What Agent Passport Actually Verifies

• Every attestation is tied to a public industry standard — OWASP's LLM Top 10, NIST's AI Risk Management Framework, and MITRE ATLAS — rather than a proprietary Workday-only checklist
• Agent Passport is designed to test, verify, and continuously monitor agents, not just certify them once at deployment
• It ships alongside Developer Agent, which lets developers build custom AI apps and agents in plain language, and Agent-Ready Tools, which provide controlled guardrails for agent access to HR and finance data over the Model Context Protocol (MCP)

Why This Is a Notable Shift for an ERP Vendor

Rather than asking customers to trust that Workday-built agents are safe by virtue of being first-party, Workday is building continuous, standards-based verification into the platform itself — a tacit acknowledgment that agent safety needs ongoing monitoring, not a one-time launch review. Developer Agent and Agent-Ready Tools are already available to early-access customers through Workday Extend Professional, with general availability for both projected in the second half of 2026.

For any organization evaluating ERP or HR platform vendors, Agent Passport's standards-based, continuously-monitored approach is a useful reference point for what to ask other vendors about their own agent governance — not just Workday's.