Archer Community

Archer Products and Services Sub-Processors Last Updated: May 2024 Archer may contract with other companies to provide certain services on its behalf. Sub-processors that may process Customer Content (as defined in the Terms of Service) are itemized below. Archer affiliates may also process Customer Content. As agreed in the Data Processing Addendum, Archer has adequate data transfer mechanisms in place with each sub-processor. The lists below do not apply to pre-release versions. Summary of Sub-processors for Archer Products and Services Offering Sub-Processor Location Nature of Processing Archer Hosting Services US Service Offering: Amazon Web Services US-WEST-2 (Oregon) US-EAST-1 (Northern VA) US primary and secondary (DR) regions EMEA Service Offering: Amazon Web Services EU-WEST-1 (Ireland) EU CENTRAL-1 (Frankfurt) EMEA primary and secondary (DR) regions All Archer Hosting Services Offerings: Okta, Inc. USA SSO functionality and User registration Archer SaaS US Service Offering: Amazon Web Services US-WEST-2 (Oregon) US-EAST-1 (Northern VA) US primary and secondary (DR) regions EMEA Service Offering: Amazon Web Services EU-WEST-1 (Ireland) EU CENTRAL-1 (Frankfurt) EMEA primary and secondary (DR) regions APJ Service Offering: Amazon Web Services AP-SOUTHEAST-2 (Sydney) APJ primary and secondary (DR) region CAN Service Offering: Amazon Web Services CA-CENTRAL-1 (Canada Central) CAN primary and secondary (DR) region UAE Service Offering: Amazon Web Services ME-CENTRAL-1 (UAE) UAE primary and secondary (DR) region India Service Offering: Amazon Web Services AP-SOUTH-1 (Mumbai) India primary and secondary (DR) region All Archer SaaS Service Offerings: Okta, Inc. USA SSO functionality and User registration Archer Engage US Service Offering: Amazon Web Services US-WEST-2 (Oregon) US-EAST-1 (Northern VA) US primary and secondary (DR) regions EMEA Service Offering: Amazon Web Services EU-WEST-1 (Ireland) EU CENTRAL-1 (Frankfurt) EMEA primary and secondary (DR) regions APJ Service Offering: Amazon Web Services AP-SOUTHEAST-2 (Sydney) APJ primary and secondary (DR) region CAN Service Offering: Amazon Web Services CA-CENTRAL-1 (Canada Central) CAN primary and secondary (DR) region All Archer Engage Service Offerings: Okta, Inc. USA SSO functionality and User registration Archer Insight US Service Offering: Amazon Web Services US-WEST-2 (Oregon) US-EAST-1 (Northern VA) US primary and secondary (DR) regions EMEA Service Offering: Amazon Web Services EU-WEST-1 (Ireland) EU CENTRAL-1 (Frankfurt) EMEA primary and secondary (DR) regions Archer Document Governance US Service Offering: Amazon Web Services US-EAST-1 (Northern VA) US primary and secondary (DR) region All Archer Document Governance Service Offerings: Okta, Inc. USA SSO functionality and User registration Archer RMIS AI US Service Offering: Amazon Web Services US-EAST-2 (Ohio) US-EAST-1 (Northern VA) US primary and secondary (DR) regions All Archer RMIS AI Service Offerings: Metabase USA Business intelligence tool used to present dashboards to users OpenAI USA API AI functionality for summarizing raw text and notes Archer Compliance AI US Service Offering: Amazon Web Services US-WEST-2 (Oregon) US-WEST-1 (California) US-EAST-1 (Northern VA) US primary and secondary (DR) regions   Educational Services Skytap, Saba, Credly USA* Provisioning training including virtual training labs; training content and surveys; certifications or completion Customer Support/ Maintenance Services Archer Technologies Australia Pty. Ltd. Australia Provision of Customer Support Archer Canadian resources (GoGlobal GEO Canada Ltd.) Canada Provision of Customer Support Archer Technologies Egypt LLC Egypt Provision of Customer Support ArcherIRM Technologies India Private Limited India Provision of Customer Support Archer Philippines resources (GoGlobal Philippines, Inc.) Philippines Provision of Customer Support Archer Singapore resources (GoGlobal GEO Pte. Ltd.) Singapore Provision of Customer Support Archer Technologies UK Limited United Kingdom Provision of Customer Support Archer Technologies LLC USA Provision of Customer Support Atlassian (Jira) USA Provision of Customer Support – Management of customer support cases SFDC USA Provision of Customer Support – Intake of Customer Support queries Gearset Ltd USA Provision of Customer Support – Backup of SFDC data Intercom USA Provision of Customer Support – Chat messaging functionality * The country listed is the sub-processor’s primary location. Archer purchases the sub-processor’s standard offering and thus the sub-processor controls the country in which data is stored.

An inventory of Governance, Risk, Compliance, and Privacy documentation available for Archer service offerings. Archer SaaS SIG Package Standardized Information Gathering Doc (SIG) SSAE-18 SOC 2, Type II Audit Report Penetration Testing Executive Summaries (Archer SaaS & Archer GRC Platform) Diagram: Architectural How To: Obtain AWS Compliance Reports Archer Engage SIG Package Standardized Information Gathering Doc (SIG) SSAE-18 SOC 2, Type II Audit Report Penetration Testing Executive Summaries (Archer Engage for Business Users & Archer Engage for Vendors) Diagram: Architectural How To: Obtain AWS Compliance Reports Archer Insight Enterprise SIG Package Standardized Information Gathering Doc (SIG) Penetration Testing Executive Summary (Archer Insight Enterprise) Diagram: Architectural How To: Obtain AWS Compliance Reports Archer Hosting Services SIG Package Standardized Information Gathering Doc (SIG) SSAE-18 SOC 2, Type II Audit Report Penetration Testing Executive Summaries (Archer Hosting & Archer GRC Platform) Diagram: Architectural How To: Obtain AWS Compliance Reports Useful materials for more general security, compliance, and/or privacy needs: Archer Archer Attestation of Secure Coding Practices Archer Code of Conduct Archer Data Privacy Accountability Statement  Archer Data Protection Compliance Statement Archer Maintenance and Support Transfer Impact Assessment Archer Partner and Supplier Code of Conduct Archer Privacy Statement Archer SaaS Transfer Impact Assessment Archer Security Knowledge Base Archer Standard Form Agreements Archer Statement on Digital Operational Resilience Act  Archer Subprocessor List Archer Supply Chain Security Documentation Archer Vulnerability Response Policy Common Criteria Evaluation & Certification (MyCC) AWS How To: Obtain AWS Compliance Documentation