What records must an RIA keep when AI informs a recommendation?
The same records you'd keep for any advice that forms the basis of a recommendation — plus the practical reality that AI output needs to live in a retainable system, not a consumer chat history.
Short answer: If AI-assisted reasoning forms part of the basis for advice, that reasoning and its sources should be retained like any other record supporting a recommendation. The standard is set by SEC Rule 204-2, and it is technology-neutral.
What the books-and-records rule actually requires
Rule 204-2 requires SEC-registered advisers to make and keep specified books and records, including records relating to the advice and recommendations they provide. The rule predates AI, but its logic applies cleanly: if something informed what you told a client, you should be able to reproduce it.
That means, in practice, retaining:
- The question you researched.
- The sources the answer relied on (e.g., a specific 10-K, an economic series, a firm document).
- The output that informed your reasoning.
The practical gap with consumer AI
A consumer chatbot account isn't a recordkeeping system. There's no firm-controlled retention, no export designed for an examiner, and no guarantee the history persists. Producing "my ChatGPT thread" on exam is not the same as producing a record.
Retention checklist
For AI-assisted research, can you produce — on demand, in a firm-controlled system — the query, the sources retrieved, and the answer, for the full retention period your registration requires? If not, the workflow has a recordkeeping gap.
How a purpose-built tool closes the gap
The fix is structural: log every interaction automatically, attach the sources to the answer, and keep it exportable for the standard retention window. The advisor doesn't have to remember to screenshot anything — the record is a byproduct of doing the work.
Every AdvisorIQ query is logged with its sources and exportable for SEC/FINRA retention — the record is automatic.
Request access →General information, not legal or compliance advice. Confirm retention specifics with your own compliance counsel.
- How long must advisers retain these records?
- Rule 204-2 sets retention periods (commonly five years, with the first two in an easily accessible place) for required records. Confirm the exact period for your records and registration with your compliance counsel.
- Does a screenshot of a chat satisfy recordkeeping?
- It's fragile and incomplete. A compliant approach retains the query, sources, and output in a firm-controlled, exportable system for the full retention period — not ad hoc screenshots.
- Is this different for state-registered advisers?
- State recordkeeping rules often mirror the federal approach but vary. State-registered advisers should confirm their specific state requirements.
Keep reading
All q&a →Can I use AI to research client investments and stay compliant?
Yes — if the AI cites its sources and the work is retained as a record. The compliance risk isn't AI itself; it's using a tool that can't show its sources or keep a books-and-records trail.
Does the SEC Marketing Rule cover AI-generated content?
Yes — the Marketing Rule is about what you communicate to clients and prospects, not how you drafted it. AI-written marketing is held to the same substantiation and fair-and-balanced standards as anything else.
How do I check a client's portfolio for drift from their IPS?
Compare current allocations and concentrations against the bands written in the investment policy statement — and do it on a schedule, not just at the annual review, so breaches surface the same day instead of next quarter.