Risk Sleuth
WDAY · 10-K filed 6 Mar 2026 · year to 31 Jan 2026

Workday

30 named things its latest annual report says its results depend on, each in the company's own words. 22 of them are also named by other companies we've read.

Customers

Fortune 500

earns from · more than 65% of the Fortune 500
We strive to reimagine how work gets done and hope to empower customers to do the same through an innovative suite of solutions with more than 75 million users under contract around the world and across industries – from emerging and medium-sized businesses to more than 65% of the Fortune 500.Business (Item 1)

U.S. federal government

earns fromnamed as a risk
For example, we have and continue to make significant targeted investments in entering the medium-enterprise and U.S. federal government markets and see our success in these markets as key contributors to our future growth.Risk factors (Item 1A)

Also named by ACN, ADSK, AKAM, AMRC, APG, CACI, CBRE, CI and 25 more

Suppliers

Amazon Web Services (AWS)

depends onnamed as a risk
For example, we leverage software and services for development tools and to deliver applications from many third-party suppliers including AWS and Google Cloud.Risk factors (Item 1A)

Also named by AAON, ABNB, ADSK, AIOT, BLK, CARR, CG, COF and 56 more

Google Cloud

depends onnamed as a risk
For example, we leverage software and services for development tools and to deliver applications from many third-party suppliers including AWS and Google Cloud.Risk factors (Item 1A)

Also named by AAON, CME, DGX, ETSY, FTNT, GTLB, LBTYA, MSTR and 4 more

Third-party data centers

depends onnamed as a risk
For example, we have experienced disruptions at certain of our co-location data centers in the U.S. due to high temperatures and power outages that resulted in a brief temporary outage of our services for a subset of our customers.Risk factors (Item 1A)

Also named by LSTR, ZETA

Partners and platforms

Third-party deployment partners

depends on · a majority of deployment servicesnamed as a risk
Third parties provide a majority of deployment services for our customers, but professional services may also be performed by our own staff or by a combination of the two.Risk factors (Item 1A)

Microsoft Corporation

For example, our partnership with Microsoft Corporation (“Microsoft”), announced in fiscal 2026, will enable customers to register and manage agents they build using Microsoft’s systems within the Workday Agent System of Record.Business (Item 1)

Also named by DDOG, GTLB, HPQ, PANW

Automatic Data Processing, Inc. (ADP)

depends on
Our global partnerships with payroll providers, including Automatic Data Processing, Inc. (“ADP”), Remote Technology, Inc., and Strada, enable integrated and streamlined payroll solutions across the world.Business (Item 1)

Also named by BBSI, PAYC

Other companies

Senior Notes

$3.0 billion aggregate principal amount of senior notesnamed as a risk
In fiscal 2023, we issued $3.0 billion aggregate principal amount of senior notes, consisting of $1.0 billion aggregate principal amount of 3.500% notes due April 1, 2027 (“2027 Notes”), $750 million aggregate principal amount of 3.700% notes due April 1, 2029 (“2029 Notes”), and $1.25 billion aggregate principal amount of 3.800% notes due April 1, 2032 (“2032 Notes,” and together with the 2027 Notes and the 2029 Notes, “Senior Notes”).Risk factors (Item 1A)

Also named by APP, LRCX, NTAP, NVR

Customer employee headcount

earns fromnamed as a risk
Prolonged decreases in our customers’ headcounts can materially impact our business and operating results in any given period.Risk factors (Item 1A)

Fourth fiscal quarter seasonality

concentrated innamed as a risk
Historically, we have signed a significantly higher percentage of agreements with new customers, as well as renewal agreements with existing customers, in the fourth quarter of each fiscal year due to customer buying patterns.Business (Item 1)

Competitors

Oracle Corporation

competes withnamed as a risk
Our primary competitors are Oracle and SAP, well-established providers of financial management and HCM applications, which have long-standing relationships with customers and partners.Risk factors (Item 1A)

Also named by TYL, VEEV

SAP SE

competes withnamed as a risk
Our primary competitors are Oracle and SAP, well-established providers of financial management and HCM applications, which have long-standing relationships with customers and partners.Risk factors (Item 1A)

Also named by ORCL, TYL

Anaplan, Inc.

competes withnamed as a risk
These vendors include, without limitation: Anaplan, Inc., ADP, Coupa Software Inc., Dayforce, Inc., Microsoft, ServiceNow, Inc., and UKG Inc.Risk factors (Item 1A)

UKG Inc.

competes withnamed as a risk
These vendors include, without limitation: Anaplan, Inc., ADP, Coupa Software Inc., Dayforce, Inc., Microsoft, ServiceNow, Inc., and UKG Inc.Risk factors (Item 1A)

Places

United States

operates in · approximately 58%
As of January 31, 2026, our global workforce consisted of over 21,000 employees in 36 countries, of which approximately 58% were located in the U.S. and 42% were located internationally.Business (Item 1)

Also named by ABBV, ADP, AJG, AMGN, APA, AXGN, AXP, BALL and 139 more

Pleasanton, California

operates innamed as a risk
Our corporate headquarters are located in Pleasanton, California, and we host our applications in data centers operated by third parties located in the U.S., Europe, Canada, and the Asia-Pacific region.Risk factors (Item 1A)

Also named by VEEV

Hazards

U.S. West Coast earthquakes

operates innamed as a risk
The west coast of the U.S. contains active earthquake zones and the southeast is subject to seasonal hurricanes or other extreme weather conditions.Risk factors (Item 1A)

Commodities and inputs

Euro

exposed to its pricenamed as a risk
As of January 31, 2026, our most significant currency exposures were the euro, British pound, Canadian dollar, and Australian dollar.Market risk (Item 7A)

Also named by ABBV, ABNB, ABT, ADBE, ADI, AME, AMG, AMGN and 186 more

Canadian dollar

exposed to its pricenamed as a risk
As of January 31, 2026, our most significant currency exposures were the euro, British pound, Canadian dollar, and Australian dollar.Market risk (Item 7A)

Also named by ABBV, ADBE, AMG, AYI, BBY, BWXT, CBRE, CDRE and 67 more

British pound

exposed to its pricenamed as a risk
As of January 31, 2026, our most significant currency exposures were the euro, British pound, Canadian dollar, and Australian dollar.Market risk (Item 7A)

Also named by ABBV, ADBE, AJG, AME, AMP, APA, BF/B, BRO and 39 more

Australian dollar

exposed to its pricenamed as a risk
As of January 31, 2026, our most significant currency exposures were the euro, British pound, Canadian dollar, and Australian dollar.Market risk (Item 7A)

Also named by ADBE, BEN, BF/B, BTU, CSGP, EEFT, EZPW, GPC and 13 more

Regulators

U.S. Federal Trade Commission

subject tonamed as a risk
Furthermore, the U.S. Congress is considering numerous privacy bills, and the U.S. Federal Trade Commission continues to bring enforcement actions for unfair or deceptive data protection practices and may undertake its own privacy-related rulemaking.Risk factors (Item 1A)

Also named by AMZN, AN, AVGO, BJ, CART, CELH, CHD, CHE and 56 more

Laws and programs

General Data Protection Regulation (GDPR)

subject to · up to 4% of worldwide revenuenamed as a risk
Failure to comply with the GDPR data processing requirements by either ourselves or our subprocessors could lead to regulatory enforcement actions, which can result in monetary penalties of up to 4% of worldwide revenue, private lawsuits, reputational damage, and loss of customers.Risk factors (Item 1A)

Also named by A, AB, ABNB, ADBE, ADP, AGX, AIOT, AJG and 100 more

EU AI Act

subject tonamed as a risk
For example, the European Union’s (“EU”) AI Act (“EU AI Act”) puts new requirements on providers and deployers of AI technologies and we are currently working to ensure compliance with corresponding deadlines.Risk factors (Item 1A)

Also named by ACN, ADBE, AMD, AXON, CGNX, CRM, CRWD, CTSH and 36 more

EU-U.S. Data Privacy Framework

subject tonamed as a risk
As legal challenges to the DPF remain unresolved, uncertainty may continue regarding the legal requirements for transferring personal data from Europe, an integral aspect of our business that remains governed by, and subject to, General Data Protection Regulation (“GDPR”) requirements.Risk factors (Item 1A)

Also named by ADBE, APP, CRM, CRWD, DDOG, DOCN, GTLB, IDXX and 12 more

FedRAMP

subject tonamed as a risk
If we fail to maintain FedRAMP authorization, we may fail to retain existing customers or attract new customers that rely on our authorization under FedRAMP, which could subject us to liability, result in reputational harm, and adversely impact our financial condition or operating results.Risk factors (Item 1A)

Also named by ADSK, CRWD, DDOG, DOCU, FTNT, GTLB, MSTR, NET and 9 more

EU Data Act

subject tonamed as a risk
Other new EU laws, including the EU Data Act, which primarily governs access to and use of non-personal data generated by digital services, have been, and may continue to be implemented, interpreted, and enforced in ways that impose additional rules and restrictions on the deployment, operation, or use of our products and services and may require us to adapt our business practices or contractual arrangements to comply with such requirements.Risk factors (Item 1A)

Also named by ADBE, CSGP, DDOG, IOT, KVYO, MSFT, NET, NOW and 6 more

California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA)

subject tonamed as a risk
The CCPA and CPRA give California consumers, including employees, certain rights similar to those provided by the GDPR, and also provide for statutory damages or fines on a per violation basis that could be very large depending on the severity of the violation.Risk factors (Item 1A)

Also named by ADSK, PSA, SLM, WSM

U.S. Department of Justice Data Security Program

subject tonamed as a risk
The rule imposes certain diligence, security, audit and record-keeping requirements, and may adversely impact certain of our global business operations, including by restricting or conditioning certain data access or transfers involving subsidiaries, affiliates, and vendors.Risk factors (Item 1A)