Financial Advisor Texting Compliance Is a Retrieval Problem

TL;DR: Financial advisor texting compliance is a retrieval problem, not a permission problem. Three different clocks can run on the same text. A broker-dealer preserves originals of all communications received and copies of all communications sent relating to its business for not less than three years, the first two in an easily accessible place, under 17 CFR 240.17a-4(b)(4). An SEC-registered investment adviser preserves written communications on four enumerated subjects (advice given, funds or securities moving, orders placed, and performance claims) for not less than five years from the end of the fiscal year in which the last entry was made, the first two in an appropriate office, under 17 CFR 275.204-2(a)(7) and (e)(1). FINRA Rule 4511(b) sets a floor of at least six years for FINRA books and records with no stated period. The capture tests are not the same either: the broker-dealer test is topical (“relating to its business as such”) and the adviser test is a closed list of four subjects. If you keep texts electronically, 17 CFR 240.17a-4(f)(2)(i) gives you two options and only two: a complete time-stamped audit trail covering every modification and deletion, or storage exclusively in a non-rewriteable, non-erasable format. The system must also download a record and its audit trail in both a human readable format and a reasonably usable electronic format, and under (f)(3)(ii) the firm must be ready at all times to immediately provide any stored record on request. Supervision is a separate control: FINRA Rule 3110(b)(4) requires procedures for reviewing incoming and outgoing written (including electronic) correspondence, conducted by a registered principal and evidenced in writing. A CRM that logs every text is a good starting point and it is not, by itself, a records archive. Decide which rule you are under, then buy to that rule.

A client texts your advisor at 4:50 on a Friday and asks him to move money. He answers from his own phone, because that is the number the client has. The trade gets handled Monday. Everyone is happy.

Now the examiner asks for that conversation eighteen months later. Where is it? Not in the CRM. Not in email. It is on a handset that has since been replaced, in a thread that was trimmed when the phone ran out of storage. The advice happened. The record did not.

That is the whole of financial advisor texting compliance, and most policy documents bury it under a question nobody actually needs answered. The question is not whether advisors are allowed to text. The question is whether you can retrieve the text later, in the form a regulator asks for, inside the window the rule gives you. Permission is easy. Retrieval is the work.

Advisor Texting Compliance Is About Retrieval

Start with the two questions that decide everything downstream. Is this message a record? And can you hand it over?

Firms get the first one roughly right and the second one badly wrong. They write a policy that says business texts are records, they tell advisors to use the approved app, and then they never test whether the approved app can export a full thread with attachments and timestamps on a two-day deadline. The policy is not the control. The export is the control.

Here is the sentence that should set your budget. Under 17 CFR 240.17a-4(f)(3)(ii), a broker-dealer using an electronic recordkeeping system must “be ready at all times to provide, and immediately provide” any record stored in that system when the Commission, a self-regulatory organization, or a state securities regulator asks. Immediately. Not promptly, not within a reasonable period, not after the vendor opens a support ticket.

Read that against how texts actually get kept at a small firm. Screenshots in a shared drive. An advisor forwarding threads to a compliance mailbox on Fridays. A phone in a drawer because the rep left and nobody wanted to wipe it. None of those survive the word “immediately.” They were never going to.

Texting Compliance Retention Clocks for Advisor Messages

This is the part that gets flattened into “keep everything for seven years” and then quietly ignored. There is no single number. There are at least three, they come from different rulebooks, and one of them does not even start when you think it does.

Broker dealer texting compliance uses a three year clock

17 CFR 240.17a-4(b) requires a member, broker, or dealer to preserve for not less than three years, the first two years in an easily accessible place, the categories listed in that paragraph. Paragraph (b)(4) is the one that catches texting: “Originals of all communications received and copies of all communications sent (and any approvals thereof) by the member, broker or dealer (including inter-office memoranda and communications) relating to its business as such.”

Note what that language does not say. It does not say email. It does not say letters. It says communications received and communications sent. A text message about firm business is inside that sentence the moment it is sent, whatever device carried it.

Note the second clock inside the first one too. Three years total, and the first two years in an easily accessible place. A text that sits in cold storage in month nine is a problem even though you still technically have it.

Advisor texting records run five years after fiscal year

Advisers run on a different rule and a different clock. 17 CFR 275.204-2(a)(7) covers “Originals of all written communications received and copies of all written communications sent by such investment adviser” relating to four enumerated subjects: any recommendation made or proposed to be made and any advice given or proposed to be given; any receipt, disbursement or delivery of funds or securities; the placing or execution of any order to purchase or sell any security; and predecessor performance or the performance or rate of return of managed accounts, portfolios, or securities recommendations.

Then 17 CFR 275.204-2(e)(1) sets the period. Those records are maintained and preserved in an easily accessible place for not less than five years from the end of the fiscal year during which the last entry was made on the record, the first two years in an appropriate office of the investment adviser.

Read the start of that clock again, because it is the most commonly mangled fact in this whole area. The five years do not run from the date of the text. They run from the end of the fiscal year in which the last entry was made. A message sent in January of a calendar fiscal year is covered for five years starting the following December 31, which in practice is closer to six.

FINRA texting records may need six years

FINRA Rule 4511(b) states that “Members shall preserve for a period of at least six years those FINRA books and records for which there is no specified period under the FINRA rules or applicable Exchange Act rules.”

That is a backstop, and it matters for texting because the category question is often unsettled. If a text is a FINRA book or record and no rule names a period for it, the floor is six years. A firm that configured its archive to three because 17a-4(b) said three has not necessarily satisfied 4511(b).

So the operating answer to “how long do we keep advisor texts” is: look up your registration status first, then your record category, then take the longest period that applies. Dually registered firms do not get to pick the friendlier rule.

Advisor Texting Compliance Depends on Business Records

Now the harder half. Retention is arithmetic. Capture is judgment, and the two regimes do not ask the same question.

The broker-dealer test in 17a-4(b)(4) is topical and wide: communications “relating to its business as such.” That is a status test on the subject matter, and almost any client exchange about accounts, timing, instructions, or markets lands inside it.

The adviser test in 204-2(a)(7) is narrower on its face and is a closed list. Written communications relating to advice given or proposed, funds or securities moving, orders placed, and performance. A text that says “running ten minutes late” is not on that list. A text that says “go ahead and sell the rest of it” is on two of them.

Here is where firms quietly create their own problem. The reasonable-sounding policy is “archive business texts, not personal ones,” and then the judgment call lands on the advisor, in the moment, on a Friday afternoon. That is not a control. That is a hope.

Capture everything on the approved channel and sort it later. Sorting is a search problem, and search is cheap. Reconstructing a thread that nobody preserved is not a search problem, and it is the only one of the two that ends in a deficiency letter.

Texting Compliance Systems Must Pass One of Two Tests

If you preserve texts electronically, 17 CFR 240.17a-4(f) is the paragraph your vendor has to satisfy, and it does not leave much room to improvise. The rule first defines an electronic recordkeeping system as one that “preserves records in a digital format in a manner that permits the records to be viewed and downloaded.”

Then 17a-4(f)(2)(i) gives two paths and only two.

Path one, under (f)(2)(i)(A), is the audit trail. The system must preserve a record for its whole retention period in a manner that maintains a complete time-stamped audit trail that includes all modifications to and deletions of the record or any part of it, the date and time of actions that create, modify, or delete the record, the identity of the individual doing so where applicable, and any other information needed to permit re-creation of the original record if it is modified or deleted.

Path two, under (f)(2)(i)(B), is the older one. Preserve the records exclusively in a non-rewriteable, non-erasable format. If a firm takes this path, 17a-4(f)(3)(iii) adds an audit system providing accountability for inputting records and for inputting any changes to every original and duplicate record, with those audit results available for examination and preserved for as long as the audited records.

The rest of (f)(2) is where consumer messaging apps fall over. The system must verify automatically the completeness and accuracy of the storage and retention processes. It must have the capacity to readily download and transfer copies of a record and its audit trail in both a human readable format and a reasonably usable electronic format, plus the information needed to locate the record. And it must either include a backup electronic recordkeeping system meeting the same requirements, or have other redundancy capabilities designed to ensure access.

Take that list to a vendor call and ask it as five questions. Which of the two paths are you on? Show me the audit trail on a message that was edited. Export this thread in both formats, now, while I watch. Where is the redundant copy? Who at my firm can retrieve it without calling you?

The firm’s own obligations do not stop at the vendor either. Rule 17a-4(f)(1) builds its conditions around named humans: a designated executive officer, a designated officer, a designated specialist, or a designated third party who has access to and the ability to provide records on the system. If nobody at your firm is named, the condition is not met by having bought good software.

Advisor Texting Supervision Goes Beyond Compliance Archiving

Capturing a message proves the message exists. It does not prove anyone read it. Those are two different controls and firms collapse them constantly.

FINRA Rule 3110(b)(4) requires supervisory procedures for reviewing incoming and outgoing written (including electronic) correspondence, in order to properly identify and handle, in accordance with firm procedures, customer complaints, instructions, funds and securities. The rule also requires that reviews of correspondence and internal communications be conducted by a registered principal and be evidenced in writing, either electronically or on paper.

Three operational consequences fall out of that sentence.

First, somebody specific has to do the reviewing, and that somebody holds a principal registration. A compliance analyst with a dashboard is not a substitute unless the registration lines up.

Second, the review has to leave a trace. “We review texts” is not evidence. A reviewer, a date, a sample, a disposition, and a record of what happened next is evidence.

Third, the review has to be able to find the right messages. That puts a floor under your search tooling that archiving alone does not. If you cannot filter by advisor, by client, by date range, and by keyword, you cannot run a defensible lexicon or sampling program on top of it.

Off Channel Texting Creates Advisor Compliance Risk

Every firm has the same hole, and it is not the advisors who ignore policy. It is the clients who never read it.

A client has your advisor’s cell number because they met at a kid’s soccer game in 2019. The client texts that number. The advisor now has three bad options and one good one, and in the moment the bad ones all look polite.

Answering on the personal number is the one everybody picks. It creates a business record on an unmanaged device. Deleting the message is worse, because now you have destroyed a record instead of merely failing to capture one. Ignoring it is not neutral either; the message still arrived, and the client is still waiting.

The workable version is boring and it needs to be written down before anyone needs it:

1. Stop the substance. Do not answer the actual question on the unapproved channel. One line of acknowledgment is not a business discussion.
2. Preserve what arrived. Follow the firm’s preservation procedure. Do not improvise, and do not delete.
3. Move the conversation. Reply from the approved number, or call. Tell the client plainly which number to use going forward and why.
4. Report it the same day. Name the person it goes to in the policy. If reporting is slower than ignoring, advisors will ignore it.
5. Fix the cause. Stale contact card, a client who has two numbers for your advisor, a new hire who never got a business line. Each of those has a different fix.

One more thing about step four. If the firm punishes self-reporting, it will stop receiving reports and it will keep believing the channel is clean. A quiet off-channel log is not evidence of a healthy program. It is usually evidence that nobody wants to file one.

Business Texting Software Supports Advisor Compliance

Here is the boundary, stated plainly, because vendors in this category blur it and compliance teams pay for the blur.

A sales engagement platform solves the channel problem. It gives every advisor a business number the firm controls, keeps the conversation off personal handsets, and writes the activity somewhere a supervisor can see it. Kixie’s business texting works this way: the product page states that calls, texts, outcomes and recordings are logged in your CRM automatically, and its compliance workflows support checks against the National Do Not Call Registry and internal suppression lists. Kixie’s own page also says customers remain responsible for their calling practices and legal review, which is the correct division of labor and worth repeating to anyone who tells you otherwise.

What that gets you is real. A controlled number instead of a personal one. Activity in the CRM instead of a handset. A thread a supervisor can open without asking the advisor for a screenshot.

What it is not is a 17a-4(f) recordkeeping system. A CRM log and a regulatory archive are different products with different tests. Neither the text messaging page nor the call recording page on kixie.com uses the words retention or archive, and they should not, because that is an archiving vendor’s job. If your firm is subject to 17a-4(f) or 204-2(e), you are buying two things: a controlled channel, and a records system that can satisfy the audit trail or non-rewriteable test and produce on demand. Ask which one a quote covers before you sign it.

The same split shows up on the voice side, which is why call recording retention is worth reading next to this; the clock logic is the same shape even though the rules differ. And if your advisors text prospects rather than existing clients, a second regime arrives on top of the securities rules. Consent, opt-out handling, and carrier registration are their own subject, covered in text message marketing laws and 10DLC compliance. Securities recordkeeping does not excuse you from those, and they do not excuse you from this.

Financial Advisor Texting Compliance Checklist

Written so a reviewer can tick it, not so a policy binder can hold it.

• Name your regime. Broker-dealer, SEC-registered adviser, state-registered adviser, or dually registered. Write it at the top of the policy. Every number below depends on it.
• Set the period to the longest applicable rule. Three years under 17a-4(b), five years from fiscal year end under 204-2(e)(1), six years under FINRA Rule 4511(b). Document which one you applied and why.
• Define the approved channel by number, not by app. List the business numbers. “Use a secure app” is not an instruction anyone can follow.
• Capture on the channel, sort afterward. Do not ask advisors to decide in the moment which text is a record.
• Pick your 17a-4(f)(2)(i) path and prove it. Audit trail or non-rewriteable storage. Get the answer from the vendor in writing.
• Test the export quarterly. Pull a real thread with an attachment. Confirm you get a human readable format and a reasonably usable electronic format, with metadata.
• Name the humans. Designated executive officer, designated officer, designated specialist, or designated third party, per 17a-4(f)(1).
• Staff the principal review. Who reviews, how often, what sample, what lexicon, what escalation, and where the evidence of review is stored.
• Write the off-channel runbook. Stop, preserve, move, report, fix the cause. One page.
• Close the offboarding loop. Number reassignment, archive access, and device handling when an advisor leaves. This is where records disappear quietly.
• Handle prospects separately. Consent and opt-out tracking for outbound texting is a different rulebook from recordkeeping.
• Re-read the rules annually. The electronic recordkeeping conditions in 17a-4(f) were amended in recent years and a policy written against the old text will read as current until somebody checks.

If you only do two of these, do the export test and the off-channel runbook. One tells you whether the system works. The other tells you whether the people do.

Financial Advisor Texting Compliance FAQs

Can a financial advisor text clients?

Yes, when the firm permits it on a channel the firm can preserve and supervise. The securities rules do not ban texting. They attach obligations to the message once it relates to firm business, which is why the practical answer is always a channel decision rather than a yes or no.

How long must advisor text messages be kept?

Three years, five years, or six years, depending on your registration. A broker-dealer preserves communications under 17 CFR 240.17a-4(b)(4) for not less than three years, the first two in an easily accessible place. An SEC-registered investment adviser preserves written communications on the four subjects in 17 CFR 275.204-2(a)(7) for not less than five years from the end of the fiscal year in which the last entry was made, the first two in an appropriate office. FINRA Rule 4511(b) sets a six-year floor for FINRA books and records with no specified period. Take the longest one that applies to you.

Does a CRM that logs texts satisfy recordkeeping rules?

Not on its own. Logging proves the message passed through a system you control, which is useful and is not the same as the electronic recordkeeping conditions in 17 CFR 240.17a-4(f). Those require either a complete time-stamped audit trail of modifications and deletions or exclusively non-rewriteable, non-erasable storage, plus download in both a human readable and a reasonably usable electronic format, plus redundancy. Ask the vendor which of those it meets.

What should an advisor do when a client texts a personal number?

Stop the substantive exchange, preserve the message under the firm’s procedure, move the conversation to the approved number, report it the same day, and record the cause. Do not delete the message. Deleting a business communication turns a capture failure into a destruction problem.

Is supervision of texts separate from archiving them?

Yes. FINRA Rule 3110(b)(4) requires procedures for reviewing incoming and outgoing written (including electronic) correspondence, with reviews conducted by a registered principal and evidenced in writing, electronically or on paper. An archive that nobody reviews satisfies the preservation rule and leaves the supervision rule open.

Do prospecting texts follow the same rules?

They follow these rules and more. Securities recordkeeping applies to the communication, while consent, opt-out handling, and carrier registration apply to the outreach. A compliant archive does not create permission to text somebody who never gave it.

Sources

• U.S. Government Publishing Office, Electronic Code of Federal Regulations, 17 CFR 240.17a-4, Records to be preserved by certain exchange members, brokers and dealers. Paragraph (b) sets a three-year preservation period with the first two years in an easily accessible place; (b)(4) covers originals of all communications received and copies of all communications sent relating to the business; (f) sets the electronic recordkeeping system conditions, including the audit-trail and non-rewriteable options in (f)(2)(i), the download and redundancy conditions in (f)(2)(iv) and (f)(2)(v), and the immediate-production requirement in (f)(3)(ii). https://www.ecfr.gov/current/title-17/chapter-II/part-240/section-240.17a-4. Reviewed November 13, 2026.
• U.S. Government Publishing Office, Electronic Code of Federal Regulations, 17 CFR 275.204-2, Books and records to be maintained by investment advisers. Paragraph (a)(7) lists the four subjects of written communications an adviser must keep; (e)(1) sets the five-year period running from the end of the fiscal year in which the last entry was made, the first two years in an appropriate office. https://www.ecfr.gov/current/title-17/chapter-II/part-275/section-275.204-2. Reviewed November 13, 2026.
• Financial Industry Regulatory Authority, FINRA Rule 4511, General Requirements. Paragraph (b) requires members to preserve for at least six years those FINRA books and records for which no period is specified under the FINRA rules or applicable Exchange Act rules. https://www.finra.org/rules-guidance/rulebooks/finra-rules/4511. Reviewed November 13, 2026.
• Financial Industry Regulatory Authority, FINRA Rule 3110, Supervision. Paragraph (b)(4) requires procedures for the review of incoming and outgoing written (including electronic) correspondence, with reviews conducted by a registered principal and evidenced in writing, either electronically or on paper. https://www.finra.org/rules-guidance/rulebooks/finra-rules/3110. Reviewed November 13, 2026.
• Kixie, Automated Text Messaging Platform for Businesses, product page describing automatic CRM logging of calls, texts, outcomes and recordings, and compliance workflows supporting National Do Not Call Registry and internal suppression list checks. https://www.kixie.com/features/text-messaging/. Reviewed November 13, 2026.

Sources verified and content reviewed by the Kixie Research Team on November 13, 2026.