Advisers Act Rule 204-2 Explained

Question	Practical answer
Who must comply?	Investment advisers registered, or required to be registered, with the SEC
What does the rule cover?	Financial, trading, client, communication, marketing, compliance, custody, proxy-voting, and disclosure records
Does it cover electronic communications?	Yes, where the content falls within a required record category
Must every communication be retained?	The rule identifies specific communications and other records that must be preserved
What is the standard retention period?	Many records must be kept for at least five years, although triggers and requirements vary by record category
Does the rule require WORM storage?	Not specifically. Adviser electronic-record requirements differ from the broker-dealer requirements under Rule 17a-4
Can recordkeeping be outsourced?	Operational support can be outsourced, but the adviser remains responsible for compliance and production

Advisers Act Rule 204-2: Investment Adviser Recordkeeping Explained

Rule 204-2 under the Investment Advisers Act of 1940 is commonly known as the investment adviser books-and-records rule. It requires every investment adviser registered, or required to be registered, with the SEC to make and keep specified records relating to its investment advisory business. These records must be true, accurate, and current.

The rule supports the SEC’s ability to examine an adviser, reconstruct its decisions, verify client disclosures, assess trading and marketing activity, and determine whether its business practices match its policies and regulatory obligations. Recordkeeping is therefore more than an administrative storage requirement. It is the evidence layer supporting the adviser’s wider compliance program.

A firm may have carefully drafted policies, disclosures, and supervisory procedures, but it may be unable to demonstrate that those controls worked if the underlying communications, approvals, trading records, advertisements, and review documentation cannot be found.

For the wider framework covering record creation, retention, accessibility, legal hold, and production across regulated firms, see recordkeeping compliance in financial services explaining firm’s obligation to capture, retain and produce their electronic communications.

Who must comply with Rule 204-2?

Rule 204-2 applies to investment advisers registered, or required to be registered, with the SEC under section 203 of the Advisers Act. This can include advisers serving retail or institutional clients, private fund advisers, hedge fund and private equity advisers, and firms operating through multiple offices or communication channels.

The precise recordkeeping requirements depend partly on what the adviser does. Some records are required broadly across registered advisers. Others arise only where the firm conducts particular activities, such as disseminating advertisements, exercising proxy-voting authority, maintaining custody of client assets, or managing private funds.

State-registered advisers are generally subject to applicable state books-and-records requirements rather than federal Rule 204-2. A firm should therefore determine whether its entities and advisory activities fall under SEC or state jurisdiction rather than assume one recordkeeping regime applies across the organization.

Outsourcing portfolio administration, communications capture, marketing support, or archive management does not change which entity is responsible for meeting the rule.

What records must investment advisers keep?

Rule 204-2 contains an extensive set of requirements covering both ordinary business records and information specific to the adviser’s fiduciary and regulatory responsibilities.

Record category	Examples
Financial and accounting	Journals, ledgers, bank records, bills, financial statements, and supporting business records
Orders and transactions	Order memoranda, client instructions, allocations, transaction details, and execution information
Client relationships	Advisory agreements, powers of attorney, account records, brochures, relationship summaries, and delivery records
Written communications	Specified communications about advice, recommendations, transactions, client funds or securities, and performance
Marketing	Advertisements and records supporting performance, testimonials, endorsements, ratings, and material claims
Compliance and ethics	Policies, annual-review documentation, codes of ethics, acknowledgments, violations, and access-person records
Custody and proxy voting	Records relating to client assets, proxy policies, voting decisions, client requests, and supporting information

The rule should be mapped against the adviser’s actual services and operating model. A private fund adviser, retail adviser, institutional manager, and adviser exercising proxy-voting authority will not necessarily produce exactly the same records.

For a comparison with the corresponding broker-dealer framework, see SEC Rules 17a-3 and 17a-4 explained. The two regimes share the objective of creating a reliable regulatory record, but they apply to different entities and contain different record categories, retention rules, and electronic-storage provisions.

Which communications must advisers preserve?

Rule 204-2(a)(7) requires advisers to preserve originals of specified written communications received and copies of specified written communications sent.

The covered subjects include:

• Recommendations made or proposed and advice given or proposed
• The receipt, disbursement, or delivery of funds or securities
• The placing or execution of orders to purchase or sell securities
• The performance or rate of return of managed accounts or securities recommendations

The requirement follows the substance of the communication rather than the application or device used. A covered communication may take place through email, SMS, enterprise chat, a collaboration platform, social-media messaging, or another electronic channel.

A client recommendation sent through a personal text message does not cease to be a required record because the adviser prohibited that channel. The unauthorized use may create an additional policy and supervision problem, but it does not remove the recordkeeping obligation.

This does not mean every employee message must be retained under Rule 204-2. Firms should identify which communications fall within the rule or another applicable record category and document how those records are captured.

For practical guidance on modern communications capture, see Capture if you can: your questions answered.

How does Rule 204-2 apply to off-channel communications?

Off-channel communications are business communications conducted through applications, devices, or accounts that the adviser does not capture through its approved recordkeeping environment.

Examples can include advice sent through personal text messages, recommendations discussed on WhatsApp or Signal, business conducted through personal email, and client communications moved from an approved platform to an uncaptured account.

The regulatory problem is not necessarily the application itself. It is that a required business record has been created outside the systems designed to preserve and supervise it.

The SEC continued bringing investment-adviser recordkeeping cases into January 2025. In one action involving nine investment advisers and three broker-dealers, the Commission said employees, including supervisors and senior managers, used unapproved communication methods and failed to preserve required records. See the SEC’s January 2025 recordkeeping settlements.

A policy prohibition is not sufficient where employees continue using personal channels and the firm does not take reasonable operational steps to detect and address that behavior.

The adviser should understand which channels its employees and clients actually use, provide workable approved alternatives, test whether capture works, investigate exceptions, and apply policies consistently across levels of seniority.

For the wider issue, see off-channel communications, addressing the leading source of recordkeeping enforcement and it’s importance.

Private fund advisers should also see Hedge fund communication archiving: US compliance rules, risks and solutions.

How does Rule 204-2 apply to marketing?

The Investment Adviser Marketing Rule introduced related amendments to Rule 204-2.

Advisers must make and keep copies of advertisements they directly or indirectly disseminate and preserve specified records supporting compliance with the Marketing Rule.

The SEC’s Investment Adviser Marketing compliance guide identifies records associated with performance information, testimonials, endorsements, third-party ratings, and other advertising practices.

The recordkeeping obligation is broader than retaining the final published item.

Depending on the advertisement, an adviser may need evidence supporting performance calculations, material claims, hypothetical or extracted performance, promoter compensation, testimonials, endorsements, ratings, disclosures, and the intended audience.

Websites, social-media content, pitchbooks, presentations, emails, videos, webinars, and other digital materials may all create advertising records.

This means that marketing approval and recordkeeping cannot operate as separate processes. The firm should preserve both the communication and the material needed to substantiate it.

In September 2025, the SEC charged an adviser with marketing, compliance, and recordkeeping violations that included failure to preserve website advertisements and failure to implement policies concerning reliance on third parties for recordkeeping. See the Meridian Financial proceeding.

See also The SEC Marketing Rule: a short guide.

How long must Rule 204-2 records be retained?

Many records must be kept in an easily accessible place for at least five years from the end of the fiscal year in which the last entry was made.

For those records, the first two years must generally be maintained in an appropriate office of the investment adviser.

This is a common standard under the rule, but it is not a universal retention formula.

Some record categories use a different triggering event, such as dissemination of an advertisement, delivery of a disclosure, completion of an annual compliance review, or termination of the adviser’s business.

Certain organizational records also have different duration requirements.

The adviser should therefore map each record category to:

• The applicable Rule 204-2 provision
• The event that begins the retention period
• The minimum retention duration
• Accessibility and office-location requirements
• Any legal hold, examination, subpoena, or investigation that suspends ordinary deletion

Records that have reached the end of their ordinary retention period should not be destroyed while a separate preservation duty remains active.

For the matter-specific preservation process, see legal hold explained, to further understand how to preserve information for litigation.

What does Rule 204-2 require for electronic records?

Rule 204-2 permits advisers to maintain required records electronically, provided the applicable conditions are met.

An electronic recordkeeping system should allow records to be arranged and indexed so that particular information can be located promptly. The adviser must also be able to produce electronic records to the SEC in an appropriate format when requested.

Safeguards should protect records from loss, alteration, or destruction and limit access to authorized personnel.

Where paper or other nonelectronic records are converted, electronic copies should remain complete, true, and legible.

The adviser framework should not be confused with the broker-dealer electronic-recordkeeping requirements under Rule 17a-4.

Rule 204-2 does not impose the same specific WORM or audit-trail framework used for broker-dealers. An adviser may nevertheless choose storage controls that provide immutability, audit history, chain of custody, or other evidence of record integrity.

Technology should also preserve enough context for the record to remain understandable. A collection of disconnected messages without participants, attachments, timestamps, replies, or surrounding conversation may be difficult to review or produce meaningfully.

Can advisers outsource recordkeeping?

An adviser can use third parties to support communications capture, storage, indexing, archiving, and production.

The regulatory responsibility remains with the adviser.

The firm should understand which records the provider captures, which content types or channels are excluded, how failures are detected, where data is stored, how retention is applied, and whether information can be produced promptly.

Service-provider oversight should not stop at reviewing contractual assurances.

The adviser should test whether expected records reach the archive, whether searches return complete results, whether exports remain readable, and whether records can still be accessed following a system change or employee departure.

The SEC’s examination staff asks advisers whether electronic information can be promptly produced and whether records will remain readable for the entire required retention period. See Questions advisers should ask when reviewing their compliance programs.

What happens when an adviser cannot produce required records?

Incomplete, inaccurate, inaccessible, or missing records can prevent SEC staff from examining the adviser’s conduct and testing whether its policies, disclosures, and activities comply with the Advisers Act.

A recordkeeping failure can be charged as a violation even where the available facts do not establish a separate fraud or client-harm case.

However, the SEC’s current enforcement posture should be described accurately.

In its fiscal year 2025 enforcement report, published in April 2026, the Commission criticized the scale and penalties of the previous off-channel enforcement initiative and said that it had refocused resources toward fraud and matters involving investor harm.

That change in enforcement priority did not repeal Rule 204-2 or remove an adviser’s duty to create, preserve, and produce required records.

Advisers should therefore avoid assuming that reduced emphasis on industry-wide off-channel sweeps makes recordkeeping optional. A missing record may still obstruct an examination, investigation, client dispute, or assessment of another potential violation.

The SEC has also demonstrated that self-reporting, cooperation, and prompt remediation can influence outcomes. In the Atom Investors proceeding, the Commission did not impose a civil penalty after the adviser self-reported, remediated, and substantially cooperated.

How should advisers implement Rule 204-2?

A practical program should connect the legal requirements to the systems and business processes that create the records.

1. Map the rule to the business. Identify which provisions apply to the adviser’s services, clients, marketing, trading, custody, proxy voting, compliance program, and personnel.
2. Inventory records and owners. Determine which departments, employees, systems, and providers create or hold each required category.
3. Map communication channels. Identify approved and actual channels, including personal devices and applications used by employees or clients.
4. Capture records reliably. Automate capture where practicable and preserve sufficient content, context, and metadata.
5. Apply category-specific retention. Configure periods using the correct trigger and suspend disposition where another preservation duty applies.
6. Test retrieval and production. Confirm that records can be searched, reconstructed, exported, and produced promptly.
7. Monitor and improve. Investigate gaps, oversee service providers, train employees, document remediation, and include recordkeeping in the annual compliance review.

The goal is not simply to own an archive. The adviser should be able to demonstrate that the correct records enter it, remain protected and accessible for the required period, and can be produced when needed.

How does Rule 204-2 connect to wider recordkeeping compliance?

Rule 204-2 is the principal federal books-and-records rule for SEC-registered investment advisers.

It sits alongside—but is not interchangeable with—the broker-dealer requirements in Rules 17a-3 and 17a-4, state adviser requirements, CFTC or NFA obligations, privacy rules, legal-hold duties, and firm-specific contractual requirements.

Groups containing both adviser and broker-dealer entities should map each rule separately. Compliance with one regime does not automatically satisfy another.

A common governance and archive environment can support several regulated entities, but the correct record categories, retention periods, access controls, and production requirements must still be applied to each entity.

Frequently asked questions

What is Advisers Act Rule 204-2?

It is the SEC books-and-records rule requiring registered investment advisers to create and preserve specified records relating to their advisory business.

Does Rule 204-2 cover every investment adviser?

It applies to advisers registered, or required to be registered, with the SEC. State-registered advisers are generally governed by applicable state requirements.

Does the rule cover electronic communications?

Yes, where the substance of the communication falls within a required record category.

Must an adviser retain every employee message?

No. The rule identifies particular records and communication subjects. Other legal, regulatory, employment, or litigation requirements may create additional retention duties.

How long must records be kept?

Many records must be maintained for at least five years, with the first two years generally in an appropriate office. Other categories use different triggers or durations.

Does Rule 204-2 require WORM storage?

Not specifically. Its electronic-storage provisions differ from the broker-dealer requirements under Rule 17a-4.

Does the rule apply to WhatsApp or personal texts?

It can. A covered advisory communication remains a required record regardless of the application or device used.

Can recordkeeping be outsourced?

A third party can support capture, archiving, and production, but the adviser remains responsible for compliance.

How Global Relay helps

Rule 204-2 compliance depends on capturing covered communications, preserving their integrity and context, and producing them when required.

Global Relay captures and archives communications across email, mobile, messaging applications, collaboration platforms, social media, and other business channels.

Global Relay Archive provides a centralized, searchable system of record with retention controls, audit history, and support for legal hold and regulatory production.

Learn more about Global Relay Archive and Global Relay Recordkeeping Compliance.

Related reading:

• Recordkeeping Compliance in Financial Services
• Off-Channel Communications: What They Are and Why They Matter
• SEC Rules 17a-3 and 17a-4 explained