Text Message Archiving for Financial Advisors (iMessage)

SEC-registered investment advisers must retain business-related text messages, including iMessage, under the Advisers Act books-and-records rule, and broker-dealers under Exchange Act Rule 17a-4. A personal phone does not exempt a message; the content does. Firms take one of four postures: prohibit texting and enforce it, issue advisers a second business number, capture from a copy of the adviser's phone, or add an archive line to the client conversation so the business thread is preserved even when a message is later edited or deleted. Confirm the current rule text before relying on any specific requirement.

Texting is where most firms have their recordkeeping gap, and iMessage is the hardest part of that gap to close. It never crosses a carrier's SMS network, so the archiving methods that catch ordinary text messages cannot see it. This guide maps which rule binds you, what counts as a covered text, why iMessage is the channel firms miss, and the four ways to stay compliant, with citations to the rule text throughout. For the email-and-social side of the same obligation, start with our SEC and FINRA archiving requirements guide.

Do financial advisors have to archive text messages?

Yes, when the text is a business communication. For an SEC-registered adviser, the obligation lives in Rule 204-2(a)(7), which requires keeping "originals of all written communications received and copies of all written communications sent" that relate to recommendations or advice, the receipt, disbursement, or delivery of funds or securities, the placing or execution of an order, and the performance or rate of return of managed accounts. A text message is a written communication. If its content falls in one of those categories, it is a record, and the adviser has to preserve it.

The rule never mentions phones, carriers, or apps, because it does not turn on any of them. It turns on content. A message answering "should I move to cash?" is a record. A message confirming a lunch reservation is not. The channel the message rode in on does not change that analysis. Nothing in this area is misunderstood more often.

Which rules require it, RIA versus broker-dealer?

The rule that binds you depends on your registration, but both point the same direction and converge on the same storage standard.

A firm that is only an investment adviser answers to Rule 204-2 under the Investment Advisers Act. A broker-dealer answers to Exchange Act Rule 17a-4 and, as a FINRA member, to FINRA Rule 4511, which requires members to preserve books and records in conformity with the Exchange Act rules. A dually registered firm is subject to both: Rule 17a-4 and FINRA 4511 on the brokerage side, Rule 204-2 on the advisory side.

State-registered advisers sit outside Rule 204-2 itself; their books-and-records obligations come from their home state's rule. Most states require substantially similar retention of client communications, and a number of them incorporate the SEC rule's categories by reference, so the content-based analysis in this guide still applies. Check your state's rule text for the exact retention period before relying on the federal numbers.

The retention clocks differ. Rule 204-2(e)(1) sets an adviser's floor at five years; Rule 17a-4(b)(4) preserves broker-dealer communications for three. The storage format does not have to differ. Rule 17a-4(f) requires broker-dealers to keep electronic records in a non-rewriteable, non-erasable (WORM) format or with a compliant audit trail. Rule 204-2 does not name a medium for advisers, but 204-2(g) requires electronic records be indexed for retrieval and safeguarded from loss, alteration, or destruction, and WORM is the clearest way to meet that. One WORM archive satisfies both rules at once, which is why archiving products are built to serve advisers and broker-dealers together. There is no "that is not your rule" here. A dually registered firm meets both from a single sealed record.

What counts as a business text message?

Three tests decide whether a given text is a record, and running a message through them is faster than it sounds.

• Is it a written communication? A text, an iMessage, a WhatsApp message, and a social DM all qualify. A phone call does not, though a follow-up text summarizing the call does.
• Does the content touch advice, client assets, or an order? "Nice to see you Saturday" is not a record. "Yes, sell the position and move it to the money market" is.
• Is it the firm's business? A message about advisory business is covered wherever it happens, including on an adviser's personal phone.

The personal-device myth is the belief that gets firms into trouble. Advisers assume a message they send from their own iPhone, on their own number, on their own time, is theirs. Under the recordkeeping rules it is not, if it concerns the firm's advisory business. The safest operating assumption is that any client-facing channel will eventually carry covered content, so it should be captured by default rather than sorted message by message after the fact.

Why is iMessage the hard channel?

Every other text channel leaves a copy somewhere the firm can reach. iMessage does not, and that is what makes it the channel firms miss.

An SMS text travels across the carrier's network, so a carrier-based or number-based archiving service can capture it in transit. iMessage never touches that network. When both parties are on Apple devices, the message routes through Apple's own service, encrypted end to end, and lands on the device. There is no carrier record to pull and no telecom copy for the firm to request after the fact. The message exists in two places: the adviser's iPhone and the client's. If the adviser deletes the thread, the firm's copy, if it never captured one, is simply gone.

This is why "just use a texting app" does not fully solve it. Second-number apps issue the adviser a separate business number and route those texts through an archive. That works for messages sent on the second number. It does nothing for the blue-bubble iMessage a client sends to the number the adviser has used for years, which is the number clients actually have. Advisers who carry a second line tend to keep answering the personal one, and those iMessages stay off-channel. The durable fix is not to chase iMessage onto the device at all, but to make sure the business conversation itself runs where its record is preserved.

The four compliance postures, and their tradeoffs

Firms land on one of four postures. They are not equally durable, and examiners do not treat them as equal.

The posture examiners distrust most is the first one done nominally. A prohibition on paper, contradicted by advisers who keep texting, is not a control; it is a document. The SEC has been explicit that a written policy is not enough when personnel continue using the channel and the firm has no way to see it. Whichever posture you choose, the test is whether it produces the record or provably prevents the communication, not whether it exists in the policy manual.

What examiners actually ask for

When an off-channel issue surfaces in an SEC examination, the requests are concrete, and they are hard to satisfy after the fact.

Examiners ask the firm to produce specific communications: every business text between a named adviser and a named client over a date range, across every channel. They ask for evidence of supervision: how the firm surveils the channel, how it detects a policy breach, what it did when it found one. And they expect the records to be complete and unaltered, preserved so they cannot have been edited or deleted after capture, which is what the 204-2(g) safeguarding requirement and the 17a-4(f) WORM format are for.

The reason off-channel failures are so costly is that they cannot be remediated once the message is gone. A firm that captured iMessage from the start answers the document request. A firm that did not is explaining an absence, and the absence itself is the violation. In August 2024 the SEC charged 26 firms, including investment advisers and dually registered firms, that agreed to pay $392.75 million combined. In January 2025 it charged twelve more firms, nine of them investment advisers, that agreed to pay $63.1 million combined. In each case the charge was the recordkeeping failure itself, not the content of any particular message. The only reliable position is to capture the channel before anything is said, and iMessage archiving for RIAs is how a firm gets ahead of the request.

How RegFin archives iMessage without a second number

RegFin does it without chasing the iMessage protocol and without a second number. The firm adds RegFin's archive line to client conversations. Advisers keep their own iPhone, their own number, and Apple Messages. From the moment the archive line is on a conversation, every message in it, one-to-one or group, is preserved, including the ones a sender later edits or deletes. Nothing is installed on anyone's personal phone.

Each message is sealed into write-once WORM storage where no one, including RegFin, can alter or delete it, and an edit or deletion leaves the original intact alongside a record of the attempt itself. Business texts land in the same sealed, searchable record as email, SMS, MMS, and WhatsApp, under one policy engine and one review, and export filtered by adviser, client, channel, and date for an examiner request. That single WORM record meets the Rule 204-2(g) safeguarding requirement on the advisory side and the Rule 17a-4(f) format requirement on the brokerage side, so a dually registered firm covers both from one archive. For firms that want every message captured with no reliance on adviser habits, the firm can buy company phones that RegFin manages, where every message on the device is archived automatically. See the full communications archiving platform for the other channels.

For the broader program these records sit inside, the annual review, the code of ethics, Form ADV, start with our RIA compliance guide and the detailed RIA compliance requirements checklist.

Watch a text message survive deletion, live. Book a demo: we send a test message, edit it, delete it for everyone, and show you the archive holding the original, the revision, and the record of the attempt.

This article is educational and not legal advice. Verify every rule citation against the primary source before relying on it; the SEC and FINRA amend recordkeeping rules periodically.