Archer Community

An inventory of Governance, Risk, Compliance, and Privacy documentation relevant to Archer products. Archer SaaS SIG Package Standardized Information Gathering Doc (SIG) SSAE-18 SOC 2, Type II Audit Report Penetration Testing Executive Summaries (Archer SaaS & Archer GRC Platform) Diagram: Architectural How To: Obtain AWS Compliance Reports Archer Hosted SIG Package Standardized Information Gathering Doc (SIG) SSAE-18 SOC 2, Type II Audit Report Penetration Testing Executive Summaries (Archer Hosting & Archer GRC Platform) Diagram: Architectural How To: Obtain AWS Compliance Reports Archer Insight SIG Package Standardized Information Gathering Doc (SIG) Penetration Testing Executive Summaries (Insight & Authentication Bridge) Diagram: Architectural How To: Obtain AWS Compliance Reports General Archer Advisories & Service Notifications Product Advisories Security Advisories Service Notifications Technical Advisories Attestation of Secure Coding Practices Code of Business Conduct and Ethics Common Criteria Evaluation & Certification (MyCC) Privacy Statement Security Knowledge Base Standard Form Agreements Sub-Processor List Supply Chain Security Documentation Vulnerability Response Policy AWS How To: Obtain AWS Compliance Documentation

Archer Products and Services Sub-Processors Archer may contract with other companies to provide certain services on its behalf. Sub-processors that may process Customer Content (as defined in the Terms of Service) are itemized below. Archer affiliates may also process Customer Content. As agreed in the Data Processing Addendum, Archer has adequate data transfer mechanisms in place with each sub-processor. The lists below do not apply to pre-release versions. Offering Sub-Processor Location Nature of Processing Archer Suite Hosted   US Service Offering:     Amazon Web Services US-WEST-2 (OR) US-EAST-1 (Northern VA) US primary  and secondary (DR) region     EMEA Service Offering:     Amazon Web Services EU-WEST-1 (Ireland) EU CENTRAL-1 (Frankfurt) EMEA primary and secondary (DR) region Archer Suite SaaS   US Service Offering:     Amazon Web Services US-WEST-2 (OR) US-EAST-1 (Northern VA) US primary and secondary (DR) region   Workato, Inc. US-EAST-1 (Northern VA) Provision of Archer Connect functionality within Archer SaaS     APJ Service Offering:     Amazon Web Services AP-SOUTHEAST-2 (Sydney) APJ primary and secondary (DR) region     EMEA Service Offering:     Amazon Web Services EU-WEST-1 (Ireland) EU-CENTRAL-1 (Frankfurt) EMEA primary and secondary (DR) region   Workato, Inc. EU-CENTRAL-1 (Frankfurt) Provision of Archer Connect functionality within Archer SaaS Archer Engage for Vendors   US Service Offering:     Amazon Web Services US-WEST-2 (OR) US-EAST-1 (Northern VA) US primary and secondary (DR) region Archer Engage for Business Users   US Service Offering:     Amazon Web Services US-WEST-2 (OR) US-EAST-1 (Northern VA) US primary and secondary (DR) region     APJ Service Offering:     Amazon Web Services AP-SOUTHEAST-2 (Sydney) APJ primary and secondary (DR) region     EMEA Service Offering:     Amazon Web Services EU-WEST-1 (Ireland) EU-CENTRAL-1 (Frankfurt) EMEA primary and secondary (DR) region Archer Insight   US Service Offering:     Amazon Web Services US-WEST-2 (OR) US-EAST-1 (Northern VA) US primary and secondary (DR) region   Workato, Inc. US-EAST-1 (Northern VA) Provision of Archer Connect functionality within Archer Insight     EMEA Service Offering     Amazon Web Services EU-WEST-1 (Ireland) EU-CENTRAL-1 (Frankfurt) EMEA primary and secondary (DR) region   Workato, Inc. EU-CENTRAL-1 (Frankfurt) Provision of Archer Connect functionality within Archer Insight Educational Services Skytap, Saba, Credly United States* Provisioning training including virtual training labs; training content and surveys; certifications or completion. Customer Support / Maintenance Services RSA Security Australia Pty. Ltd. Australia Provision of Customer Support RSA Security Canada ULC Canada     RSA Security Egypt Limited Egypt     RSA Security Applications India Private Limited India     RSA Philippines Philippines     RSA Security Solutions (Singapore) Pte. Ltd. Singapore     RSA Security UK Ltd United Kingdom     RSA Security LLC USA       * The country listed is the sub-processor’s primary location. Archer purchases the sub-processor’s standard offering and thus the sub-processor controls the country in which data is stored.