← Free risk checker
Home → Tools & Software → Workday EU AI Act
⚠ HIGH-RISK (AI features) — Annex III, Category 4

Workday EU AI Act Compliance: Employer Guide 2026

Using Workday Recruiting, Skills Cloud, or HCM AI features? Workday's AI-driven hiring and performance tools are classified as high-risk under Annex III. Here is what you must do as the deployer.

Bottom line: Workday's AI recruiting and performance features are high-risk. Standard Workday HCM (payroll, scheduling, time tracking without AI scoring) is not. Check which Workday products you use and what AI features are active — obligations only apply where AI evaluates people.

Which Workday products are in scope?

Workday ProductEU AI Act StatusWhy
Workday Recruiting — AI candidate rankingHIGH-RISKFilters and ranks job applications
Workday Skills Cloud — AI skills inferenceHIGH-RISKInfers skills, used in promotion/allocation
Workday Career Hub — AI recommendationsHIGH-RISKAI-driven career path recommendations
Workday Talent & Performance — AI ratingsHIGH-RISKAI-assisted performance evaluation
Workday HCM — payroll, scheduling, timeNOT high-riskNo AI-driven evaluation of persons
Workday Adaptive PlanningNOT high-riskFinancial planning, not people evaluation

Your deployer obligations

Get the templates your HR team needs

Candidate disclosure notice, worker notification, human oversight policy, DPIA checklist — everything in one pack, ready to adapt to your company name and Workday configuration.

Get HR Compliance Kit — €99 →
Or use the free risk checker →

Workday and the EU AI Act: full analysis

How Workday Recruiting's AI ranking works

Workday Recruiting uses AI to score and rank candidates against job requirements. The system analyses application data — work history, skills, qualifications — and produces a match score. This score influences which candidates recruiters review first. Under Annex III Category 4, any AI system that "analyses and filters job applications" is high-risk, which covers this feature directly.

What "human oversight" means when using Workday

Article 26(2) requires that hiring decisions are not delegated entirely to the AI system. In practice:

Candidate disclosure: what to say

You must inform applicants before or during the recruitment process that AI is used to evaluate them. A compliant disclosure in a job application confirmation email:

"Your application will be reviewed using AI-assisted tools that help assess your qualifications against the role requirements. All AI assessments are reviewed by a human recruiter before any decision is made. You may request information about how automated tools were used in assessing your application."

Asking Workday for their compliance documentation

As the deployer, you have the right under Article 26(1) to verify that Workday, as the provider, has met its obligations. Request the following from your Workday account team:

If Workday cannot provide these by the compliance deadline, you should either disable the AI features or document your risk decision formally.

Frequently asked questions

We only use Workday for payroll and scheduling. Do we have any obligations?
No high-risk obligations apply if you are not using Workday's AI-driven candidate ranking, skills inference, or performance evaluation features. Basic HCM functions — payroll, time tracking, benefits administration — do not involve AI-based evaluation of persons and are not classified as high-risk. You should still ensure AI literacy training for any staff who use AI tools in their work (Article 4 is already in force).
We're a US company using Workday globally including for EU hiring. Does the Act apply?
Yes. The EU AI Act applies wherever AI outputs affect persons in the EU. Using Workday Recruiting to evaluate candidates for positions in EU member states makes you a deployer under the Act, regardless of your headquarters location. The obligations apply per role and per candidate location, not per company jurisdiction.
What happens if Workday has not completed its conformity assessment by August 2026?
As the deployer, you are responsible for verifying that the provider (Workday) has met its obligations before you use the system. If Workday cannot provide a Declaration of Conformity, you face a choice: disable the AI-driven features and use Workday as a standard ATS without AI scoring, or document your risk decision with legal counsel. Continuing to use unverified high-risk AI after the deadline creates regulatory exposure for your organisation.