← All companies

WDAY · CIK 0001327811

What Workday, Inc. told the SEC could break it.

Workday's disclosures span governance, physical and macro exposures rather than one dominant theme. Its co-founders, Aneel Bhusri and Dave Duffield, control a substantial majority of voting power through Class B shares, giving them the ability to decide stockholder votes — including director elections and any merger or sale of the company. As a SaaS provider, it also faces catastrophe risk to its infrastructure: its Pleasanton, California headquarters sits in an active earthquake zone, and the third-party data centers that host its applications across the U.S., Europe, Canada and Asia-Pacific are exposed to hurricanes and extreme weather. Finally, it flags broad macroeconomic uncertainty — increased tariffs, elevated inflation, and fluctuating interest and foreign-currency rates — that creates market volatility it has already experienced.

3 self-disclosed vulnerabilities, pulled from its own filings — each in the company’s words, with the source. This is the risk register almost nobody reads.

In its own words

What could break it.

Key person

  • founder dual-class voting control (Duffield & Bhusri)medium

    Co-founders Aneel Bhusri and Dave Duffield control a substantial majority of Workday's voting power via Class B shares, giving them the ability to control stockholder votes including director elections and any merger or asset sale.

    Collectively, the shares described above represent a substantial majority of the voting power of our outstanding capital stock. As a result, Messrs. Duffield and Bhusri have the ability to control the outcome of matters submitted to our stockholders for approval, including the election of directors and any merger, consolidation, or sale of all or substantially all of our assets.

    SEC filing →As of 2026

Climate & physical

  • California earthquake zone (HQ) and catastrophic/climate events at data centerslow

    Workday's Pleasanton, California HQ sits in an active earthquake zone, and its third-party data centers face hurricanes/extreme weather; catastrophic or climate-related events could disrupt its applications and business.

    Our corporate headquarters are located in Pleasanton, California, and we host our applications in data centers operated by third parties located in the U.S., Europe, Canada, and the Asia-Pacific region. The west coast of the U.S. contains active earthquake zones and the southeast is subject to seasonal hurricanes or other extreme weather conditions.

    SEC filing →As of 2026

Regulatory & policy

  • macroeconomic uncertainty — tariffs, inflation, interest/FX rateslow

    Recent macroeconomic events including increased tariffs, elevated inflation, and fluctuating interest and foreign currency rates create market uncertainty and volatility that Workday has experienced and may continue to experience.

    Recent macroeconomic events including increased tariffs, elevated inflation, and fluctuating interest rates and foreign currency exchange rates, as well as geopolitical instability, continue to impact the global economy and create uncertainty, volatility, and disruption of financial markets.

The hidden graph

Who it depends on, and who depends on it.

Relationships surfaced from filings — including ones disclosed by the other side, which is how the non-obvious ones come to light.

Its suppliers

  • Google Cloud (Alphabet Inc.)

    In order to reduce the risk of disruption of our cloud applications, we host our applications in data centers operated by third parties located in the U.S., Europe, Canada, and the Asia-Pacific region. These data centers include third-party hosted infrastructure, including Amazon Web Services and Google Cloud, and co-location data centers.

    Cited →
  • Amazon Web Services (Amazon.com, Inc.)

    In order to reduce the risk of disruption of our cloud applications, we host our applications in data centers operated by third parties located in the U.S., Europe, Canada, and the Asia-Pacific region. These data centers include third-party hosted infrastructure, including Amazon Web Services and Google Cloud, and co-location data centers.

    Cited →

In the MyPRIA app, this is checked against the companies you actually own.

← World Watch