Archer Audit Engagements & Workpapers

Overview

Archer Audit Engagements & Workpapers is an audit-management application for internal audit departments handling recurring, risk-focused engagements. It suits enterprise teams already working with Archer’s risk, compliance, and Issues Management functions; the required Issues Management dependency and custom pricing make it a poor fit for buyers seeking a self-contained tool or a low-commitment purchase.

It connects the audit universe to engagements and brings planning, workpapers, testing, and results into the broader Archer Audit Management system. That shared context can help teams scope audits using existing risk and control data, but its value depends on an organization’s wider Archer setup.

See our Internal Audit Software category for more options.

Key features

Engagements and workpapers

Review and approval workflows support engagement and workpaper documentation, while a centralized Audit Program Library and repository give teams a common place for programs and supporting records. Audit report and planning memo templates can help standardize recurring documentation. This is useful for departments seeking consistent processes, though it is less compelling for teams that do not need a shared enterprise workflow.

Testing, findings, and remediation

Controls testing, finding tracking, and remediation workflows cover the path from audit work to follow-up. Teams can manage findings and remediation plans with comment review capabilities. Offline audit engagements are supported, which can help auditors continue engagement work away from a connection.

Platform and operations

Archer names Android, iOS, Linux, macOS, Windows, web, API, extension, and self-hosted platforms. Its SaaS runs on AWS across global service regions and carries a 99.5% composite SLA. Archer says SaaS security includes ISO 27001, ISO 27017, and ISO 27701 certifications, encryption at rest and in transit, and ongoing third-party penetration testing; its Trust Center also provides SOC 2 Type 2 and ISO certification materials. Multi-tenant SaaS is most common, with dedicated database infrastructure and single-tenant environments available at additional cost. Support includes a request portal, phone support, and follow-the-sun coverage.

Pricing

Archer Audit Engagements & Workpapers is paid, with custom pricing. Archer directs licensing questions to account managers, so organizations should request a quote and account for the required Archer Issues Management prerequisite before comparing total cost. There is no stated trial or free plan to lower the barrier for evaluating it.

Platforms

The named platform coverage spans Android, iOS, Linux, macOS, Windows, web, API, extension, and self-hosted deployment. The breadth makes it relevant to organizations with varied deployment or integration needs, while the distinction between commonly multi-tenant SaaS and higher-cost dedicated or single-tenant environments matters to buyers with specific hosting requirements.

Who it's for

This is aimed at enterprise internal audit teams, including heads of internal audit, that want to coordinate the audit universe, engagement records, testing, workpapers, findings, and remediation within Archer. It is strongest where Archer risk and compliance data already helps shape audit scope. Teams without Archer Issues Management, or those wanting a standalone system with a straightforward published price, should look elsewhere.

Pros and cons

• Pro: Linking the audit universe to engagements and reusing Archer risk and control data can support risk-based scoping without separating audit work from related governance functions.
• Pro: Workpaper review and approval, a shared library, templates, offline engagements, and finding follow-up support a connected audit workflow.
• Pro: SaaS security certifications, encryption, penetration testing, a stated SLA, and broad support channels provide concrete operational assurances for enterprise buyers.
• Con: Archer Issues Management is a prerequisite, limiting suitability for organizations seeking an independent audit purchase.
• Con: Custom pricing requires a quote, and dedicated database or single-tenant SaaS environments cost extra, making budgeting less direct.

Alternatives

• Dimeri Internal Audits is worth considering for a web-based, freemium option; its free plan includes 10 AI messages per day and basic GRC research and drafting, but has no export, connectors, or custom dashboards.
• Protecht may suit buyers looking for an API- and web-based ERM product with annual licensing based on named active users; marketplace templates and its Operational Resilience module cost extra.
• Workiva Audit Management is a web, Android, iOS, and API alternative with customized packaging and unlimited seats or users.
• A4DAInsight is another web-based paid option with pricing on request.
• assureIQ is a paid alternative offering an evidence sprint, a managed audit pod, and a subscription.
• Audit Out uses custom pricing that varies with team size, deployment, modules, client structure, and support needs.
• AuditBoard (now Optro) offers API and web access, flexible plans, unlimited stakeholder licenses, and Optro Success and Services.
• ControlVista may be relevant for buyers seeking web or self-hosted deployment; its on-premise plan has a fixed annual deployment fee quoted during procurement, includes four modules and VistaAssist AI, and has an implementation fee fixed at signature.

Verdict

Choose Archer Audit Engagements & Workpapers if your enterprise audit team already relies on Archer and needs workpapers, engagement workflows, and finding follow-up connected to risk and compliance data. Its integrated workflow and offline engagement support are the main reasons to choose it; the Issues Management prerequisite and custom pricing are the clearest reasons to look elsewhere.