Archer Receives Highest Score Possible in Compliance Management criterion in The Forrester Wave™: Governance, Risk, And Compliance Platforms, Q2 2026

The Score that Matters Most to Archer

Forrester published their latest Wave for governance, risk, and compliance platforms. Archer received the highest score possible in the Compliance Management criterion. A 5 out of 5.

Why a 5 in compliance management is important

Regulators are shipping more change in a quarter than they used to ship in a year. Compliance management is no longer a static library of obligations sitting next to a risk register. For the most regulated organizations in the world, it has become a continuous operating discipline. The work has a name. Regulatory change management.

That is the work Archer Evolv™ was built for.

We made a bet that compliance management was about to change. That regulators would not slow down. That static approaches would leave teams behind. That AI, applied carefully and with domain expertise in the loop, was the only way to keep up.

Forrester's evaluation reads: "Archer excels with one of the strongest compliance management solutions on the market, leveraging its AI-driven Archer Evolv solution to help customers interpret and manage obligations and continuously assess compliance posture."

Congratulations to the team. The 5 out of 5 is what execution looks like. And the vision is playing out in real time.

What Regulatory Change Management Requires

When regulatory change accelerates, compliance teams typically respond by adding more controls. More disconnected controls. More redundancy. Slower audits. Weaker traceability. The cost of keeping up gets paid by the business.

Archer Evolv was built for a different response. Pull live regulatory signal. Map change to controls automatically. Close the loop before the audit catches it.

Manage change intelligently. Cut unnecessary complexity. Align controls to actual risk.

Four capabilities make that work at the pace regulators are setting.

We ingest regulatory content at scale. We organize that content through a rich regulatory taxonomy that maps obligations to the controls and programs our customers already run. We apply purpose-built language models that are accurate and efficient enough to interpret regulatory text at production scale. And we keep domain experts in the loop on every layer of the system, because compliance is a discipline where the model is never the last word.

Most platforms can do one of those four things well. Archer Evolv is built around all four. Combined, they produce results accurate enough for the most regulated organizations in the world to trust at production scale.

That is regulatory change management in 2026.

What the Rest of the Report Says

The Wave evaluates twelve providers across twenty-three criteria, sorted into current offering and strategy. Archer received the highest score possible in the compliance management criterion

On the strategy side, Forrester wrote that Archer's vision of shifting toward a continuous operating model for risk teams is in line with the market.

The shift from periodic to continuous risk and compliance work is the actual change happening in the market right now. The Wave says Archer is moving with it.

The Longer Arc

In October 2025, Gartner named Archer a Leader in the GRC Magic Quadrant. In Q2 2026, Forrester gave Archer the highest score possible in the Compliance Management criterion.

Two independent research firms. Different methodologies. The picture they paint of Archer is consistent: one of the strongest compliance management solutions on the market.

Our Bet on the Future of Compliance

The next several years in GRC will be defined by how well a platform keeps up with the speed of regulatory change. The benchmarks are simple to state and hard to deliver.

Interpret new obligations as they are issued, not weeks later. That takes language models trained on regulatory text and the experts who keep them honest.

Map those obligations to existing controls without standing up a six-month manual mapping project. That takes a taxonomy built by people who have lived inside compliance programs, not a generic ontology.

Assess posture continuously rather than at audit time. That takes ingestion infrastructure that can absorb regulatory and operational signals at scale.

Surface all of it to the business owners who run the program day to day, not just to the GRC team. That takes a product that respects how compliance work actually gets done.

This is the bet we have been making inside Archer. Our Compliance Management score in this Wave is, in our opinion, the latest external proof that the bet is landing.

Final Thoughts

We believe the result reflects the people who built Archer Evolv and the broader platform around it. It also reflects the customers who trusted us with their most regulated programs while that build was in flight.

This report is part of a broader collection of Forrester resources, including interactive models, frameworks, tools, data, and access to analyst guidance. For more information, read about Forrester’s objectivity here.

Source citation: The Forrester Wave™: Governance, Risk, And Compliance Platforms, Q2 2026, Cody Scott and Paul McKay, Forrester Research, Inc., May 2026.