Regardless of how the enforcement landscape around it has evolved, the obligation to retain off-channel communications has not changed for registered investment advisers. Understanding the difference between an enforcement trend and a regulatory requirement is one of the most important distinctions a CCO can make.

What Off-Channel Communications Are and Why the SEC Has Focused on Them

Off-channel communications are any business-related messages sent through a platform or device outside of a firm's official, approved communication channels. For most RIAs, that means texts sent from a personal phone, messages through WhatsApp, LinkedIn, or other consumer apps, and any other platform the firm has not explicitly approved and integrated into its archiving program.

The SEC's focus on off-channel communications has been consistent and significant. For several years, the regulator pursued a sustained series of enforcement actions against RIAs and broker-dealers whose employees used personal devices and unapproved messaging platforms for business communication without being captured in the firm's official archive.

What Industry Sources Have Said — and What It Actually Means

In early 2025, a number of credible industry and legal publications suggested that a change in enforcement posture was underway. White & Case, commenting on the SEC's January 2025 enforcement wave, described it as potentially "the final set of standalone charges" on off-channel communications given the shift in SEC leadership. Corporate Compliance Insights reported in April 2026 that FINRA has continued enforcing off-channel violations even as the SEC went quiet on new standalone cases, noting that the current regulatory environment is increasingly holding individuals personally accountable rather than just firms.

A shift in enforcement emphasis under current SEC leadership reflects a real development worth understanding. It does not mean that the rules have changed; It does not mean off-channel communications are no longer a regulatory concern; And it certainly does not mean firms can deprioritize their communication archiving programs and expect no consequences.

Enforcement postures shift, administrations change, and regulatory priorities evolve. But the underlying obligation to retain all written business communications, on every platform, for five years has not budged.

What Rule 204-2 Actually Requires from RIAs

SEC Rule 204-2 requires registered investment advisers to make and keep true, accurate, and current records of all written communications related to their advisory business — regardless of which device or platform those communications happen on. That requirement has been in place for decades, and its application to modern messaging platforms is not new.

The retention period is five years total. Records from the first two years must be kept in an easily accessible location and producible the same business day an examiner requests them. This retrieval standard is one which manually managed archives and scattered records consistently fail to meet.

The SEC's 2026 examination priorities continue to cite recordkeeping as a focus area during routine examinations. FINRA has continued enforcing off-channel communication requirements and has shown an increasing willingness to hold individuals personally accountable, not just firms.

Why the Off-Channel Communication Risk Is Often More Acute at RIA Firms

The off-channel risk is frequently more pronounced at registered investment advisory firms than at larger institutions. At many RIAs, the principal is also the adviser communicating directly with clients. In many cases, that same person carries compliance oversight responsibility as well. The separation that exists at larger firms between the people communicating with clients and the people supervising those communications often doesn't exist at smaller RIAs.

This overlap makes off-channel gaps harder to detect internally and harder to defend when an examiner asks for records. A firm without a dedicated compliance function reviewing communications has no internal check catching the gap before a regulator does.

What an Exam-Ready Off-Channel Communication Archive Looks Like

The infrastructure that meets the current standard has three characteristics:

Records need to be centralized in one searchable system rather than scattered across personal devices and disconnected platforms.

The archive needs to be organized in a way that maps to how examiners actually request records: by date, adviser, and communication type.

Retrieval needs to be measured in hours, not days. A firm that can technically produce off-channel records, but only after days of manual searching, has not met the standard regulators expect.

The consistent pattern we see behind most documented off-channel compliance failures is that communications happen outside the firm's archive because the archiving process depended on a person remembering to include them. A manual process that looks like “forward this text,” “screenshot that message,” “put it in that drive” is not a compliant archiving program.

How Simple Email Archive Supports Off-Channel Communication Compliance

RIA Compliance Technology's Simple Email Archive captures and retains email, text message, SMS, website, and social media communications for registered investment advisers in a single, secure, searchable archive. Every communication is captured automatically; there is no dependency on an adviser remembering to forward a message or upload a screenshot at the end of the day.

That automatic capture is what closes the gap that has driven off-channel compliance failures consistently. When the process is automatic, the firm's communication record is complete by default rather than complete only when someone remembers to make it so. When an examiner requests records, the response is immediate, organized, and complete.

Frequently Asked Questions

Q: Are RIAs still required to archive text messages and off-channel communications even though SEC enforcement has evolved?

Yes — SEC Rule 204-2 still requires registered investment advisers to retain records of all written business communications regardless of which device or platform was used, and that obligation has not changed regardless of shifts in enforcement posture. While credible industry sources including White & Case and Corporate Compliance Insights noted in early 2025 that standalone off-channel enforcement actions may be deprioritized, the underlying rule is unchanged and FINRA continues to actively enforce communication retention requirements. RIA Compliance Technology's Simple Email Archive captures and retains email, text, and SMS communications automatically so the firm's record is complete regardless of enforcement trends.

Q: What records must RIAs be able to produce for off-channel communications during an examination?

RIAs must be able to produce records of all written business communications, including text messages and messaging app conversations, for the prior five years, with records from the most recent two years producible the same business day an examiner requests them. RIA Compliance Technology's Simple Email Archive automatically captures email, text, SMS, and social media communications in a single searchable archive, organized by date, adviser, and communication type so production is immediate rather than the result of days of manual reconstruction.

Maintain Communication Records, It’s That Simple.

Enforcement postures shift. Regulatory priorities evolve. Administrations change. The underlying obligation to retain off-channel communications does not move with any of them.

RIA Compliance Technology's Simple Email Archive gives registered investment advisers a complete, automatic communication record that meets the standard Rule 204-2 has always required — regardless of which platform employees use to communicate and regardless of where enforcement priorities sit in any given year.

See how it works at riacomptech.com/services.