Archer today launched Archer Evolv Foundation and Archer Evolv Workplace, putting a governed digital workforce to work inside the GRC system of record enterprises already trust. Archer Evolv Foundation is the shared AI intelligence layer beneath that workforce, holding every Operator inside the controls and permissions already in place. Archer Evolv Workplace is the marketplace through which customers select governed AI Operators and assign them to their own teams. Both are in production with customers today. Dozens of Operators are already at work across Foundation, Audit, Third-Party Risk, IT Risk and Operational Risk, growing to more than 200 by the end of 2026 and more than 500 by the end of 2027.
Archer launches Archer Evolv Foundation and Archer Evolv Workplace
Governed digital workforce inside the GRC system of record
492 purpose-built models trained since 2017
Dozens of Operators in production growing to 500+ by end of 2027
22 million regulatory documents and 250 million GRC records
80% of Fortune 500 running AI agents, only 14% have full security approval
Eighty percent of Fortune 500 companies are running active AI agents, yet only 14% have full security approval for them. This week, leaders of frontier AI labs publicly weighed slowing development over safety concerns. The question for every board is no longer whether AI will act on the company's behalf. It is whether anyone can verify if the action was allowed. When decisions carry no assurance, AI risk rises. That question now lands on three desks: the CRO needs to know which risks changed before the board inquires; the CCO needs to trace regulation to obligation, control, and evidence before an examiner does; the CISO needs visibility into what AI is running, what agents can touch, and what evidence exists when they act, consistent with guidance from CISA and NSA. Those were three questions for three functions. One AI action now answers to all of them at once.
Archer Evolv is built around three connected systems:
System of Record, Archer GRC: The trusted enterprise environment connecting risks, controls, regulations, audits, third parties, evidence, workflows and other critical GRC context.
System of Intelligence, Archer Evolv Foundation: Foundation is what every Operator draws on, and it is four things. Access to Archer's 492 purpose-built models. Connections into the system of record wherever it runs, SaaS or on-premise. A prompt experience where anyone with permission asks any record, application or relationship a direct question in plain language and receives an answer in seconds with the source record cited. And the harness, the runtime that constrains and governs every Operator.
System of Outcomes, Archer Evolv Workplace: Archer Evolv Workplace is a marketplace of purpose-built AI Operators that function as digital full-time employees: each hired for a specific job, granted a specific scope, supervised by a named person and accountable through the same audit trail as everyone else. They work for the team, never instead of it.
An Operator can only enforce an obligation someone has correctly identified from a regulation and mapped to a control. Archer's legal and regulatory experts in the loop build and version-track Archer's data of more than 22 million regulatory documents. That data, with 250 million GRC records, feeds 492 purpose-built models developed by more than 200 AI engineers and GRC domain experts. In Archer's production evaluation of legislative effective dates, a leading general-purpose model was confidently wrong in a meaningful share of cases. Archer Evolv resolved 100% of the same set, because low-confidence work routes to an expert rather than shipping with no flag.
"Archer Evolv brings together two things no one else in GRC has: 25 years as the system of record the world's most regulated enterprises trust, and AI built for this domain since 2017, not bolted on last year," said Bill Diaz, Chief Executive Officer of Archer. "The models, data and experts that came with Compliance.ai now run across all of Archer. GRC teams do not need another AI tool sitting outside the way they work. They need AI that understands their business, was built responsibly from the start, and can be defended to their board."
"General-purpose AI starts with a prompt. Enterprise GRC AI starts with context," said Kayvan Alikhani, Chief Product & Technology Officer at Archer. "The models, the data, the expert review and the harness took years to build. A general-purpose agent can hold a conversation. A GRC Operator must hold a week of work, inside a defined scope, with a record of everything it did. Our customers do not have to build any of it. We already did, and it is available today."
About Archer
Archer powers how the world's leading enterprises govern risk, compliance, and regulatory change. More than 1,300 organizations run on Archer, including half the Fortune 500 and 37 of the top 50 global banks. A new regulatory change lands somewhere in the world every seven minutes, and agentic AI is outpacing most teams' ability to govern it. Archer replaces static controls and periodic reviews with purpose-built AI grounded in the deepest regulatory data and domain expertise in GRC: 22 million regulatory documents and 250 million GRC records, validated by more than 200 AI engineers and GRC domain experts. Every result traces back to its source, and every decision can be defended. Archer delivers solutions across the full range of GRC, including regulatory change management, AI governance, third-party risk, and IT and security risk.
