Wayfinder — AI copilot for UKG Pro Workforce Management

Person #	Name	Hire Date	Primary Job
1001	Chen, Amy	2021-03-15	Customer Service / Rep
1002	Diaz, Marco	2019-11-02	Warehouse / Lead
1003	Ito, Kenji	2022-06-20	Store / Associate
1004	Novak, Lena	2018-01-08	Finance / Analyst

For HRIS & operations teams

The master-data problems UKG will not tell you about

Nothing in UKG warns you that fourteen active employees hold no product license, or that a leaver’s license is still switched on. You find out on payday, on go-live day, or when someone cannot clock in. Wayfinder reads your whole population overnight and hands your operations team a worklist.

14 checks, ranked by consequence — a leaver with an active license or an employee who cannot log in is a risk; a missing accrual profile or a duplicated email is next; a missing reporting manager is informational.
Click a finding, get the names. Every count drills straight through to the employees behind it — so it becomes work you can assign, not a number in a report.
Composition by location in the same view: pay rules, employment terms, licenses and profiles side by side, so an outlier site stands out before it becomes a ticket.
Read-only, and scheduled. The check never changes your data. It runs as a nightly snapshot because it reads every employee — so the dashboard opens instantly instead of making someone wait minutes for a live scan.

Findings are counts of your own records against explicit rules — no scoring, no model judgement, and every one of them names the field it looked at.

Employee master data 2,759 employees · snapshot 03:12

2 risk 4 watch 2 informational

Active employee with no product license (cannot log in) 14

Terminated / inactive but a license is still active 3

Active but no pay rule27

Active but no accrual profile (accrues no balances) 19

Email shared by more than one person6

Hire date looks wrong (before 1950)1

Active but no reporting manager42

Click any finding to list the employees behind it → · illustrative figures

Everything your team asks UKG for — answered in seconds

Wayfinder plans the right API calls, applies your permissions, and hands back data — not screenshots of menus.

Ask anything about your workforce

78 purpose-built operations across employees, timekeeping, scheduling, leave, history and system setup. No menus, no training — just ask, in your language.

From question to report in one step

Answers arrive as one wide, interactive table — click to sort, choose your columns, export to Excel. No copy-pasting out of screens.

Reports on autopilot

Save any query as a scheduled task. It runs unattended — read-only by design — and delivers results to your in-app inbox: daily headcount, weekly exceptions, month-end checks.

It learns how you work

Long-term memory keeps your defaults — language, locations, timeframes, favorite columns. Quick actions turn routine requests into one click.

Your permissions, enforced

Every user sees only what their UKG role allows — org sets, accessible employees, hyperfind profiles. Out-of-scope requests are refused, never silently widened.

The AI has no permissions of its own

It acts as the person who asked, inside the same group permissions and UKG access scope — re-checked against the database on every request, so revoking access takes effect at once rather than at their next sign-in. Unattended scheduled runs are stricter still: read-only, always.

Writes can wait for a human

Any change the AI proposes can be parked as an intent instead of executed. The approver sees the exact fields and the request that produced them; it then runs as the person who asked, released by someone else, with both people recorded.

Bring your own AI

Claude, Gemini, DeepSeek, Doubao or any OpenAI-compatible model — configured per tenant and per user group, with your own API keys.

Up and running in three steps

Connect your tenant

Add your UKG Pro WFM tenant with its API credentials. Secrets are encrypted at rest; every tenant is fully isolated with its own rate limits.

Invite your people

Sync users straight from UKG — licensed employees and managers become login users automatically, with SSO or email invites. Permissions follow their UKG roles.

Start asking

Type a question. Wayfinder plans the API calls, applies access scope, and returns live data — ready to refine, schedule, or export.

Enterprise guardrails, by default

Built for HR data from day one — not bolted on.

Per-user access scope — UKG org sets and manager roles decide what each person can see and touch.

SSO & 2FA — OIDC single sign-on (Auth0-brokered to Okta, Entra, Google) plus optional email-code 2FA.

Encrypted at rest — tenant credentials and AI keys are Fernet-encrypted; secrets never appear in logs.

Complete audit trail — every login, chat turn and UKG API call is recorded and reviewable.

Tenant isolation & rate limits — per-tenant clients, QPS and concurrency gates, employee-count caps.

Read-only automation — scheduled tasks can query but never write; write tools require a live, permissioned user.

Instructions hidden in data are ignored — employees can type into comments and custom fields. Text there that tells the AI to act is reported to you with the record and field it came from, never carried out.

Evidence for a security review — your administrators can pull a current, per-tenant data-flow statement themselves, including each AI provider's zero-retention and no-training terms, its named signatory and its review date. An expired attestation counts as none.

Backups that have been restored — every archive is re-read and checksummed after it is written, and restores are drilled without the production keys present.

Your workforce, one conversation away.