Archer Community

An inventory of Governance, Risk, Compliance, and Privacy documentation relevant to Archer products. Archer SaaS SIG Package Standardized Information Gathering Doc (SIG) SSAE-18 SOC 2, Type II Audit Report Penetration Testing Executive Summaries (Archer SaaS & Archer GRC Platform) Diagram: Architectural How To: Obtain AWS Compliance Reports Archer Hosted SIG Package Standardized Information Gathering Doc (SIG) SSAE-18 SOC 2, Type II Audit Report Penetration Testing Executive Summaries (Archer Hosting & Archer GRC Platform) Diagram: Architectural How To: Obtain AWS Compliance Reports General Archer Advisories & Service Notifications Product Advisories Security Advisories Service Notifications Technical Advisories Attestation of Secure Coding Practices Archer Code of Conduct Archer Partner and Supplier Code of Conduct Common Criteria Evaluation & Certification (MyCC) Privacy Statement Security Knowledge Base Standard Form Agreements Sub-Processor List Supply Chain Security Documentation Vulnerability Response Policy AWS How To: Obtain AWS Compliance Documentation

Archer Products and Services Sub-Processors Archer may contract with other companies to provide certain services on its behalf. Sub-processors that may process Customer Content (as defined in the Terms of Service) are itemized below. Archer affiliates may also process Customer Content. As agreed in the Data Processing Addendum, Archer has adequate data transfer mechanisms in place with each sub-processor. The lists below do not apply to pre-release versions. Offering Sub-Processor Location Nature of Processing Archer Suite Hosted   US Service Offering:     Amazon Web Services US-WEST-2 (Oregon) US-EAST-1 (Northern VA) US primary  and secondary (DR) region     EMEA Service Offering:     Amazon Web Services EU-WEST-1 (Ireland) EU CENTRAL-1 (Frankfurt) EMEA primary and secondary (DR) region Archer Suite SaaS   US Service Offering:     Amazon Web Services US-WEST-2 (Oregon) US-EAST-1 (Northern VA) US primary and secondary (DR) region     EMEA Service Offering:     Amazon Web Services EU-WEST-1 (Ireland) EU-CENTRAL-1 (Frankfurt) EMEA primary and secondary (DR) region     APJ Service Offering:     Amazon Web Services AP-SOUTHEAST-2 (Sydney) APJ primary and secondary (DR) region     CAN Service Offering     Amazon Web Services CA-CENTRAL-1 (Montreal) CAN primary and secondary (DR) region     UAE Service Offering:     Amazon Web Services ME-CENTRAL-1 (UAE) UAE primary and secondary (DR) region Archer Engage for Vendors   US Service Offering:     Amazon Web Services US-WEST-2 (OR) US-EAST-1 (Northern VA) US primary and secondary (DR) region Archer Engage for Business Users   US Service Offering:     Amazon Web Services US-WEST-2 (OR) US-EAST-1 (Northern VA) US primary and secondary (DR) region     EMEA Service Offering:     Amazon Web Services EU-WEST-1 (Ireland) EU-CENTRAL-1 (Frankfurt) EMEA primary and secondary (DR) region     APJ Service Offering:     Amazon Web Services AP-SOUTHEAST-2 (Sydney) APJ primary and secondary (DR) region Archer Insight   US Service Offering:     Amazon Web Services US-WEST-2 (Oregon) US-EAST-1 (Northern VA) US primary and secondary (DR) region     EMEA Service Offering     Amazon Web Services EU-WEST-1 (Ireland) EU-CENTRAL-1 (Frankfurt) EMEA primary and secondary (DR) region Educational Services Skytap, Saba, Credly United States* Provisioning training including virtual training labs; training content and surveys; certifications or completion. Customer Support / Maintenance Services RSA Security Australia Pty. Ltd. Australia Provision of Customer Support   RSA Security Canada ULC or Archer Canadian resources Canada Provision of Customer Support   RSA Security Egypt Limited or Archer Technologies Egypt LLC  Egypt Provision of Customer Support   RSA Security Applications India Private Limited or ArcherIRM Technologies India Private Limited India Provision of Customer Support   RSA Philippines or Archer Philippines resources  or Archer Singapore resources  Philippines Provision of Customer Support   RSA Security Solutions (Singapore) Pte. Ltd. Singapore Provision of Customer Support   RSA Security UK Ltd. or Archer Technologies UK Limited United Kingdom Provision of Customer Support   RSA Security LLC or Archer Technologies LLC United States Provision of Customer Support   Atlassian (Jira) United States Provision of Customer Support – Management of customer support cases   SFDC United States Provision of Customer Support – Intake of Customer Support queries   Gearset Ltd. United States Provision of Customer Support – Backup of SFDC data * The country listed is the sub-processor’s primary location. Archer purchases the sub-processor’s standard offering and thus the sub-processor controls the country in which data is stored.

Download attachment below.

Download attachment below.

Download attachment below.