Data processing agreement (dpa) — Archie

Cited by

Facts read from this source

• Entity Report an error

  “9338-9666 Québec inc., operating as Archie (“Archie”)”

• GDPR article28 Report an error

  “The Addendum contains the mandatory clauses required by Article 28(3) of the retained EU law version of the General Data Protection Regulation ((EU) 2016/679)”

• UK GDPR Report an error

  “GDPR-specific provisions apply only to Subscribers to whom the GDPR (including the UK GDPR) applies.”

• Breach notification hours Report an error

  “notify the Subscriber without undue delay and in any event within twenty four (24) hours if Archie becomes aware of a personal data breach”

• Dsr redirect days Report an error

  “Archie will notify and redirect such requests to the Subscriber within seven (7) days from the receipt of the complaint, inquiry or request”

• Return deletion days Report an error

  “Within ninety (90) days of the date of cessation of any Services involving the processing of the Subscriber's Personal Data, Archie shall at the choice of the Subscriber and at Subscriber’s sole cost (i) return all copies of the Subscriber's Personal Data in the control or possession of Archie and its sub-processors; or (ii) to the extent reasonably possible delete and procure the deletion of all copies”

• Data importer country Report an error

  “Archie, as a data importer established in Canada”

• Canada adequacy Report an error

  “shall access and process the personal data of the Subscriber on the basis of the European Commission’s adequacy decision regarding Canada pursuant to Article 45 of Regulation (EU) 2016/679”

• Notice period business days Report an error

  “If, within ten (10) business days of receipt of that notice, the Subscriber notifies Archie in writing of any objections (on reasonable grounds) to the proposed appointment, Archie shall not appoint that proposed sub-processor”

• List URL Report an error

  “Archie discloses its sub-processors on its website: https://archieapp.co/agreements-and-terms/sub-processors”

• Governing law Report an error

  “This Addendum and all non-contractual or other obligations arising out of or in connection with it are governed by the laws of Ireland.”

• SOC 2 Report an error

  “The physical and environmental security controls are audited for compliance with the Trust Service Criteria (TSC) and have SOC 2 Type II report and EN ISO 27001 compliance, among other certifications.”

• Tls Report an error

  “Archie’s HTTPS implementation uses industry standard algorithms and certificates (TLS 1.2 or above).”

• Encryption at rest Report an error

  “Advanced Encryption Standard (AES)-256 encryption for all sensitive data at rest. Stored credentials are hashed and salted”

• Penetration testing Report an error

  “Annual penetration tests are conducted on the applications and the API.”

• Uptime Report an error

  “The infrastructure providers use commercially reasonable efforts to ensure a minimum of 99.95% uptime.”

• API access token Report an error

  “Public product APIs may be accessed using an access token.”

• Workspace management Report an error

  “Under the Principal Agreement, Archie provides certain workspace management services (the “Services”) to the Subscriber.”

• Background checks Report an error

  “All Archie employees undergo a background check prior to starting employment, in accordance with the applicable laws.”

• Access review frequency Report an error

  “Employees are granted access by role following the “least privileged” principle. Employee roles and access are reviewed on a quarterly basis.”

• Backup replication Report an error

  “Subscriber data is backed up to multiple durable data stores and replicated across multiple availability zones.”

• Payment processor pci Report an error

  “Payment card details are processed directly by our PCI-DSS compliant payment provider (e.g., Stripe, GoCardless, ect) and are not stored by Archie.”

• Special categories Report an error

  “No special categories of personal data are processed.”

2 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Microsoft 365 Administrator European sovereignty
• The Office Manager European sovereignty
• The People Lead Occupancy analytics & employee privacy
• The People Lead European sovereignty
• The Skeptic European sovereignty
• The Workplace Manager Occupancy analytics & employee privacy
• The Workplace Manager European sovereignty
• The Works Council Member Occupancy analytics & employee privacy
• The Works Council Member European sovereignty