Not yet. Workday has not publicly announced post-quantum cryptography migration plans. The platform relies on classical TLS for all connections and handles highly sensitive HR and financial data.
Key Takeaway: Workday is NOT quantum safe. Scan your Workday integrations with QScout. Prioritize Workday due to the extreme sensitivity and decades-long confidentiality requirements of HR and financial data.
Workday is NOT quantum safe today. **Current State:** Workday uses TLS 1.2 for all tenant connections, integration APIs, and Workday Studio communications. X.509 certificates for mutual TLS integrations use RSA or ECDSA. **PQC Progress:** Workday has not publicly disclosed PQC plans: - **Data encryption**: AES-256 for data at rest (quantum-resistant). - **TLS connections**: Classical RSA/ECDSA certificates. - **Integrations**: Workday Integration Cloud uses classical TLS for all EIB, REST, and SOAP connections. **HNDL Risk:** Workday contains extremely sensitive data: employee compensation, social security numbers, bank account details, organizational structure, and financial records. This data has decades-long sensitivity, making HNDL risk particularly acute. **What Organizations Should Do:** Prioritize Workday in your PQC migration planning due to the extreme sensitivity and longevity of HR and financial data. Use QScout to audit all Workday integrations and data flows.
| Full Name | Workday HCM and Financial Management |
| Category | saas |
| Quantum Vulnerability | Workday TLS connections use classical key exchange (RSA/ECDH) vulnerable to quantum attack. The extreme sensitivity of HR/financial data makes HNDL risk critical. |
| NIST Status | Workday has not publicly announced alignment with NIST PQC standards. |
| Deprecation Timeline | Workday has not published PQC migration timelines. |
| Replaced By | Workday TLS will need to migrate to ML-KEM for key exchange when PQC support is deployed |
Scan your Workday integrations with QScout. Prioritize Workday due to the extreme sensitivity and decades-long confidentiality requirements of HR and financial data.
QScout discovers every instance of Workday across your infrastructure in 7 days — with zero operational disruption. 72-hour time to first findings.