Archer Audit Engagements & Workpapers

Archer Audit Engagements & Workpapers is software for tracking audit activity, documenting engagements, and recording workpaper testing and results. It links the audit universe to engagements and supports review and approval workflows for engagement and workpaper records. A centralized Audit Program Library and workpaper repository, plus audit report and planning memo templates, support documentation. Teams can manage findings and remediation plans, including comment review, and conduct audit engagements offline. The product shares data with Archer risk and compliance functions and can use existing risk and control data to help scope audits. Archer describes the broader Audit Management system as bringing planning, engagements, workpapers, and issues together for enterprise audit teams. Archer Issues Management is a prerequisite. It is a paid product; pricing is available on request. The listed platforms include Android, iOS, Linux, macOS, web, and Windows, as well as API, extension, and self-hosted options. Archer describes its SaaS security controls, certifications, AWS hosting, and 99.5% composite SLA.

Archer combines audit planning, engagements, workpapers, and issues with links to risk and compliance data. It is aimed at enterprise audit teams, and buyers need to account for the Issues Management prerequisite and request pricing.

It suits enterprise internal audit teams that need to track engagements, workpapers, findings, and remediation. Teams should note that Archer Issues Management is a prerequisite.

Archer Audit Engagements & Workpapers is an enterprise audit application for internal audit departments managing engagements, testing, workpapers, and results. It is most compelling for teams already using Archer’s risk and compliance functions; the Issues Management prerequisite and custom pricing make it a less straightforward choice for buyers seeking a standalone tool.

Overview

The product tracks an organization’s audit universe and connects it to engagements, workpaper documentation, testing, and audit results. Within Archer Audit Management, it can draw on existing risk and control data to help scope audits and share information with Archer’s risk and compliance functions. That connection supports risk-based planning, but its value depends on an organization’s use of the broader Archer environment.

Archer Issues Management is a prerequisite, so this is not an independent purchase for teams that lack that component. Archer describes Audit Management as purpose-built for enterprise audit teams, including heads of internal audit.

See our Internal Audit Software category for more options.

Key features

Engagements and workpapers

Review and approval workflows give audit teams a structured way to document engagements and workpapers. A centralized Audit Program Library and workpaper repository provide a shared home for programs and supporting records, while audit report and planning memo templates can help standardize recurring deliverables. These tools are useful for departments seeking consistency across engagements, though the product’s strongest case is as part of Archer rather than as a standalone repository.

Testing, findings, and remediation

The system supports controls testing, finding tracking, and remediation plan management, including comment review. This keeps audit follow-up connected to the engagement process instead of separating findings from their remediation work. Offline audit engagements are supported, which can help teams continue engagement work without a live connection.

Pricing

Archer uses a paid model with custom pricing. Buyers need to request pricing through their account manager, and should include the required Archer Issues Management component in their evaluation. No plan tiers, seat limits, trial terms, or renewal terms are stated, so a team cannot use a published price schedule to estimate its commitment.

Platforms

Archer lists Android, iOS, Linux, macOS, Windows, and web support, as well as API, extension, and self-hosted options. Its SaaS offering runs on AWS across global service regions and has a 99.5% composite SLA. Archer says SaaS security includes ISO 27001, ISO 27017, and ISO 27701 certifications, encryption at rest and in transit, and ongoing third-party penetration testing; SOC 2 Type 2 and ISO materials are available through its Trust Center. SaaS is most commonly multi-tenant, with dedicated database infrastructure and single-tenant environments available at additional cost.

Support includes a request portal, phone support, and a follow-the-sun model.

Who it's for

This is a strong fit for enterprise internal audit departments that need repeatable engagement documentation, connected controls testing and remediation, and audit scoping informed by Archer risk and control data. Smaller teams or buyers without Archer Issues Management should weigh the prerequisite and custom pricing against the benefit of an integrated Archer workflow.

Pros and cons

• Pro: Audit universe tracking connects to engagements and existing risk and control data, supporting risk-informed scoping.
• Pro: Review workflows, a shared program library, templates, and remediation tracking bring core engagement documentation and follow-up together.
• Pro: Offline engagements and broad platform options suit teams with varied deployment and working needs.
• Con: Archer Issues Management is required, limiting the product’s appeal as a standalone audit purchase.
• Con: Custom pricing requires a sales discussion and offers no published plan or seat-based estimate.

Alternatives

Workiva Audit Management is worth considering when an organization prefers customized packaging with unlimited seats or users.

PonoAudit may suit buyers seeking a paid audit product with a free trial and published monthly Essentials and Professional plans.

CORAA is an option for teams that want a trial and a 10-entity pack priced at ₹30,000, paid once, with unlimited users and all features included.

SmartSuite Enterprise Service Desk may appeal to buyers comparing a paid service desk with a free trial and published Team pricing, rather than an audit-specific Archer workflow.

Riskonnect is another paid option for teams considering web and mobile access.

Dimeri Internal Audits is worth a look for buyers who want a free web plan, though its free tier is capped at 10 AI messages per day and excludes exports, connectors, and custom dashboards.

Protecht may fit organizations seeking ERM software with annual licensing based on named active users; marketplace templates and the Operational Resilience module cost extra.

assureIQ is an alternative for teams considering evidence sprints or managed audit support.

Verdict

Choose Archer Audit Engagements & Workpapers if your enterprise audit team already relies on Archer and wants engagement documentation, testing, findings, and risk-informed scoping in a connected workflow. Look elsewhere if you need a standalone product, a purchase without the Issues Management prerequisite, or pricing you can compare before speaking with an account manager.