Our Operations
Through proactive management of sustainability risks and the integration of compliance, transparency, data protection and resilience throughout our organization, we safeguard the personal information and business of those who entrust us.

Data Protection and
Cybersecurity Strategy
Cybersecurity and data protection are top priorities across our organization. We address these risks through Board oversight, executive leadership and employee training. Our information security program — driven by policies, technologies and controls — is essential to our success, and we embed cybersecurity practices throughout our operations.
- The Crisis Incident Management Team (CIMT), composed of senior executives, is mobilized during major events. Crisis and cyber incident response plans are regularly maintained and tested to ensure readiness for disruptions. The CIMT conducts quarterly drills to validate notification protocols and assess response strategies.

Business Ethics and
Standards
Honesty, integrity and trustworthiness are core values that define our culture and drive our relationships with customers, employees and business partners. See pages 19-22 of our Sustainability Report.
- We uphold and reinforce these values through our company policies, including our Code of Business Conduct (Code). Our Code requires attestation by all our employees and Board members, including external directors, and drives our ethical decision-making.
- All employees must complete mandatory compliance training that includes our Code, privacy and information security awareness, anti-harassment, sanctions awareness, records and information management and artificial intelligence. We also require annual attestations to our social media policy and Code and provide refresher training every three years.
- Our Human Rights Policy sets forth the standards for global business conduct related to human rights and labor for our company, including all our employees and suppliers.

Responsible Sourcing
Arch is committed to procuring sustainable products and services and respecting human rights as an important part of our sustainability strategy and our vision to build purposeful growth across our global operations. We recognize the benefit of conducting supplier outreach and sustainability assessments to confirm our suppliers share these priorities. Learn more about supplier risk management, compliance and engagement on pages 22-23 of our Sustainability Report.
- We encourage both new and existing vendors to commit to our Supplier Code of Conduct, which outlines expectations for ethical behavior, environmental management, labor practices and anti-corruption measures.
- We manage the cybersecurity risks of third-party service providers to meet regulatory requirements. Our supplier management program includes threshold requirements to identify and mitigate third-party risks. Before services begin, our Vendor Management group conducts a risk/rating assessment to determine if the third party may access or process our data.
- Arch reviews suppliers’ business practices and partners with a third-party vendor for supplier outreach and sustainability assessments. These assessments cover labor and human rights, environment, health and safety, ethics and procurement.
- To help Arch drive innovation, we strive to expand supplier opportunities by engaging businesses with a broad range of perspectives, backgrounds and experiences. We prioritize competitive sourcing that delivers long-term value to customers, employees and communities.

Environmental Impact
Arch continues to identify opportunities to reduce our global environmental impact. We recognize the importance of reducing greenhouse gas (GHG) emissions in our operations and we are taking steps to achieve our targets. Additionally, we engage with our employees to encourage sustainable actions and thinking.
We continue to measure our global GHG emissions across Scope 1, Scope 2, and relevant Scope 3 categories annually, as reported in our TCFD Report. In 2022, we set the following targets:
- Commit to reducing absolute Scope 1 and Scope 2 GHG emissions by at least 42% by 2030 from the 2020 base year.
- Commit to achieving net zero operations1 by 2030 by purchasing carbon removal offsets for our remaining Scope 1 and Scope 2 emissions.
Our decarbonization strategy continues to focus on promoting energy efficiency measures within our global facilities, sourcing renewable energy through utility providers, purchasing RECs and right-sizing our office and data center portfolio to fit our operation’s needs. In addition to our efforts to reduce emissions in our operations, we strive to further mitigate our Scope 1 and 2 GHG emissions by purchasing carbon offsets from verified projects that generate positive impacts in local communities. Learn more about how we manage our environmental impact on pages 24-27 of our Sustainability Report.
1 Note that our definition of operational net zero does not include Scope 3 greenhouse gas emissions as defined in the GHG Protocol. The term “operational net zero” does not carry the same meaning as “net zero emissions” as defined in the Science Based Targets initiative (SBTi) Glossary or any other framework, methodology, or other applicable publication. Additionally, our global goal is not a “net zero science-based target” as defined by the SBTi Glossary and is not aligned with the SBTi Corporate Net Zero Standard.
Blue Goes Green
Blue Goes Green (BGG), Arch’s grassroots environmental stewardship committee, drives sustainability initiatives across the organization. Dedicated to building a culture of environmental responsibility, BGG is committed to educating our global workforce on sustainable practices that help preserve and enhance our environment. Learn more about BGG on page 27 of our Sustainability Report.




