Security summary
kiweely on your Workday tenants: what IT needs to know
kiweely is a desktop app a Workday consultant or admin runs on their own computer. An AI agent in it works in your tenants through the consultant’s own Workday sign-in, in a browser they can watch, and asks before anything changes.
Where everything goes
| Where | What |
|---|---|
| Stays on the consultant’s computer | Workday sign-ins (kept where the computer keeps its other passwords), the ChatGPT or Claude sign-in or OpenRouter key, files, documents and conversation history. |
| Goes to the consultant’s AI provider | What they ask, and what the agent reads from Workday to answer. OpenAI, Anthropic or OpenRouter, on the consultant’s own account and terms, never through kiweely. |
| Reaches kiweely | Only your email, your connected computers, and crash reports you choose to send. Nothing from your work. |
Changes in Workday
- kiweely signs in with your own Workday account. Workday’s security decides what it can see and change, so it can never reach anything you can’t. Its changes show in Workday under your name, like any change you make.
- Every change waits for the consultant’s approval, on a card that names the tenant and the change.
- A Production tenant connects only after a confirmed warning. There, each change (or the full list) is shown first, made one at a time and read back. Full Access stays off.
- It never installs an Extend app in a tenant for the first time, never promotes anything to Production, never promotes a change to an app’s data model without the consultant’s approval once the app is in Implementation or above, and never turns on Full Access by itself.
Visibility
- Sign-in and work in a tenant happen in a browser window the consultant can see and stop.
- Validation and deploy results are Workday’s own, shown as Workday gave them.
- Each conversation uses one client’s sign-ins and cannot sign in to another client’s tenants.
Team & Enterprise
The above describes Kiweely Personal, where the AI is the consultant’s own account. A firm on a Team & Enterprise licence can instead run kiweely on its own AI endpoint, or on AI hosted by kiweely with the data retention the firm sets and no training on its data. The firm manages who has a seat and on which computers, and signs people out when they leave.