Archer Community

Archer Products and Services Sub-Processors Last Updated: January 2024 Archer may contract with other companies to provide certain services on its behalf. Sub-processors that may process Customer Content (as defined in the Terms of Service) are itemized below. Archer affiliates may also process Customer Content. As agreed in the Data Processing Addendum, Archer has adequate data transfer mechanisms in place with each sub-processor. The lists below do not apply to pre-release versions. Summary of Sub-processors for Archer Products and Services Offering Sub-Processor Location Nature of Processing Archer Suite Hosted US Service Offering: Amazon Web Services US-WEST-2 (Oregon) US-EAST-1 (Northern VA) US primary and secondary (DR) regions EMEA Service Offering: Amazon Web Services EU-WEST-1 (Ireland) EU CENTRAL-1 (Frankfurt) EMEA primary and secondary (DR) regions Archer Suite SaaS US Service Offering: Amazon Web Services US-WEST-2 (Oregon) US-EAST-1 (Northern VA) US primary and secondary (DR) regions EMEA Service Offering: Amazon Web Services EU-WEST-1 (Ireland) EU CENTRAL-1 (Frankfurt) EMEA primary and secondary (DR) regions APJ Service Offering: Amazon Web Services AP-SOUTHEAST-2 (Sydney) APJ primary and secondary (DR) region CAN Service Offering: Amazon Web Services CA-CENTRAL-1 (Canada Central) CAN primary and secondary (DR) region UAE Service Offering: Amazon Web Services ME-CENTRAL-1 (UAE) UAE primary and secondary (DR) region India Service Offering: Amazon Web Services AP-SOUTH-1 (Mumbai) India primary and secondary (DR) region Archer Engage US Service Offering: Amazon Web Services US-WEST-2 (Oregon) US-EAST-1 (Northern VA) US primary and secondary (DR) regions EMEA Service Offering: Amazon Web Services EU-WEST-1 (Ireland) EU CENTRAL-1 (Frankfurt) EMEA primary and secondary (DR) regions APJ Service Offering: Amazon Web Services AP-SOUTHEAST-2 (Sydney) APJ primary and secondary (DR) region CAN Service Offering: Amazon Web Services CA-CENTRAL-1 (Canada Central) CAN primary and secondary (DR) region All Archer Engage Service Offerings: Okta, Inc. USA SSO functionality and User registration Archer Insight US Service Offering: Amazon Web Services US-WEST-2 (Oregon) US-EAST-1 (Northern VA) US primary and secondary (DR) regions EMEA Service Offering: Amazon Web Services EU-WEST-1 (Ireland) EU CENTRAL-1 (Frankfurt) EMEA primary and secondary (DR) regions Archer Document Governance US Service Offering: Amazon Web Services US-EAST-1 (Northern VA) US primary and secondary (DR) region All Archer Document Governance Service Offerings: Okta, Inc. USA SSO functionality and User registration   Educational Services Skytap, Saba, Credly United States* Provisioning training including virtual training labs; training content and surveys; certifications or completion. Customer Support/ Maintenance Services Archer Technologies Australia Pty. Ltd. Australia Provision of Customer Support Archer Canadian resources (GoGlobal GEO Canada Ltd.) Canada Provision of Customer Support Archer Technologies Egypt LLC Egypt Provision of Customer Support ArcherIRM Technologies India Private Limited India Provision of Customer Support Archer Philippines resources (GoGlobal Philippines, Inc.) Philippines Provision of Customer Support Archer Singapore resources (GoGlobal GEO Pte. Ltd.) Singapore Provision of Customer Support Archer Technologies UK Limited United Kingdom Provision of Customer Support Archer Technologies LLC USA Provision of Customer Support Atlassian (Jira) USA Provision of Customer Support – Management of customer support cases SFDC USA Provision of Customer Support – Intake of Customer Support queries Gearset Ltd USA Provision of Customer Support – Backup of SFDC data Intercom USA Provision of Customer Support – Chat messaging functionality * The country listed is the sub-processor’s primary location. Archer purchases the sub-processor’s standard offering and thus the sub-processor controls the country in which data is stored.

An inventory of Governance, Risk, Compliance, and Privacy documentation available for Archer service offerings. Archer SaaS SIG Package Standardized Information Gathering Doc (SIG) SSAE-18 SOC 2, Type II Audit Report Penetration Testing Executive Summaries (Archer SaaS & Archer GRC Platform) Diagram: Architectural How To: Obtain AWS Compliance Reports Archer Engage SIG Package Standardized Information Gathering Doc (SIG) SSAE-18 SOC 2, Type II Audit Report Penetration Testing Executive Summaries (Archer Engage for Business Users & Archer Engage for Vendors) Diagram: Architectural How To: Obtain AWS Compliance Reports Archer Insight Enterprise SIG Package Standardized Information Gathering Doc (SIG) Penetration Testing Executive Summary (Archer Insight Enterprise) Diagram: Architectural How To: Obtain AWS Compliance Reports Archer Hosting Services SIG Package Standardized Information Gathering Doc (SIG) SSAE-18 SOC 2, Type II Audit Report Penetration Testing Executive Summaries (Archer Hosting & Archer GRC Platform) Diagram: Architectural How To: Obtain AWS Compliance Reports General Archer Attestation of Secure Coding Practices Archer Code of Conduct Archer Partner and Supplier Code of Conduct Common Criteria Evaluation & Certification (MyCC) Privacy Statement Security Knowledge Base Standard Form Agreements Subprocessor List Supply Chain Security Documentation Vulnerability Response Policy AWS How To: Obtain AWS Compliance Documentation