Compliance · Recordkeeping

SEC Rule 17a-4

Also known as: 17a-4, Books and Records Rule

SEC Rule 17a-4 requires broker-dealers to preserve business communications, including social and video content, for a set retention period in an accessible format that is either non-rewriteable and non-erasable or backed by a complete time-stamped audit trail. It applies to member firms, brokers, and dealers registered with the SEC, not registered investment advisers. Marketing content posted to a firm-affiliated YouTube or social channel counts as a business communication under the rule.

Need this reflected in your content strategy? See how we handle compliance across content

What counts as a preserved communication

Rule 17a-4(b)(4) treats marketing content as a business record the moment it is published. Originals of communications received and copies of communications sent relating to the firm's business, including anything subject to a self-regulatory organization's rules on communications with the public, must be preserved.

Record typeRetention periodFirst-two-years rule
Business communications (correspondence, sales scripts, marketing copy)Not less than 3 yearsFirst 2 years in an easily accessible place
Account opening recordsNot less than 6 years after the earlier of account closure or the date the information was collected, provided, replaced, or updatedN/A
Blotters and certain original records under 17a-3(a)(1)-(3)Not less than 6 yearsFirst 2 years in an easily accessible place
Compliance and supervisory manualsUntil 3 years after the manual is retiredN/A

Electronic storage requirements

RequirementWhat it means
Two accepted storage methodsA non-rewriteable, non-erasable (WORM) format, or an audit-trail system that logs every creation, modification, and deletion with date, time, and identity
Downloadable on requestThe firm must produce a copy in human-readable and reasonably usable electronic format immediately on request from the SEC, an SRO, or a state regulator
Third-party storageIf a firm stores records with an outside vendor, including a cloud host, that vendor must file a signed undertaking giving regulators direct access to the records
Designated third party (D-3P)A person unaffiliated with the firm who can access and produce the records if the firm cannot

What this means for your marketing

A YouTube upload is a business communication the moment it goes live. Once a broker-dealer publishes a video promoting its services, the rule treats it the same as a client letter: it has to be captured into the firm's recordkeeping system, not just left live on the platform.

Editing or deleting a live video does not remove the retention obligation. The record of what was published, and every change made to it, has to survive in the archive even after the public-facing version changes.

A folder of screenshots does not satisfy the rule on its own. The record has to sit inside a WORM-format store or an audit-trail system that logs every edit, not a shared drive anyone on the marketing team can quietly overwrite.

A third-party archiving vendor needs its own paperwork. If the firm uses an outside tool to store video and social content, that vendor has to file its own undertaking with the SEC promising direct regulator access, a step marketing teams often miss when choosing a tool on price and features alone.

What this looks like in practice

Illustrative example: channel archiving setup review (not a real client engagement)
NOT CAPTUREDNew videos are uploaded directly to the YouTube channel; the compliance team relies on the platform staying up.
RevisedEvery video is mirrored to the firm's WORM-compliant archive at the moment of publish, before the upload is scheduled live.

Rule 17a-4(b)(4) treats a live video as a preserved record the day it becomes public, not a record to capture later.

NO AUDIT TRAILMarketing edits video titles and descriptions directly in YouTube Studio after publishing.
RevisedEdits are logged in the archiving system first, with a timestamp and the editor's identity, before the change is pushed to YouTube.

An electronic recordkeeping system must maintain a time-stamped audit trail of every modification under 17a-4(f)(2)(i)(A).

VENDOR GAPThe firm's cloud archiving vendor was selected for price; no one confirmed its regulatory paperwork.
RevisedBefore signing, the firm confirms the vendor has filed, or will file, the outside-recordkeeping-service undertaking required under 17a-4(i), and separately confirms that its own access undertaking under 17a-4(f)(3)(v) is on file with its designated examining authority, signed by either a designated executive officer or a designated third party.

Without that filed undertaking, the archive does not satisfy the rule, regardless of how capable the tool is.

Common questions

Primary sources

Daniel Schoester

Daniel Schoester

Founder & CEO

Daniel Schoester combines years of SEO obsession with financial know-how. After receiving an Honours Bachelor of Business Administration (Finance), Daniel began working at a prominent mortgage website, where his content quickly quadrupled monthly traffic to over one million views.

Building on this success, Daniel launched Croton Content to help clients scale through evergreen content assets — notably working with Forbes Advisor, Moneywise, and Hardbacon.

In 2024, Daniel expanded his focus to YouTube after studying Google’s algorithm changes. He noticed YouTube’s increasing alignment with search visibility compared to traditional written SEO content — plus its ability to generate passive revenue and long-term brand authority.

Educational information only. This is not legal or compliance advice. Confirm current requirements with your compliance officer and the primary sources above.

Croton Content

Finance content that clears compliance the first time

We build content programs for regulated financial brands, with compliance review designed into the production schedule rather than bolted onto the end of it.