iMessage archiving,
built for RIAs.
Your advisors text clients from their iPhones in Apple Messages, and every business conversation is preserved as an SEC Rule 204-2 record, including the messages someone later edits or deletes. Nothing changes about how anyone texts. One archive for texting, email, WhatsApp, and your website, searchable at exam time.
A text is a record when its content is advisory business, not because of the app it traveled on. Rule 204-2(a)(7) turns on what the message says. See our SEC and FINRA archiving requirements guide for the rule text. Here to save personal chats from your own iPhone? Apple's export and backup options cover that; this page is for firms with recordkeeping obligations.
4 messages · client text thread
J. Okafor (IAR) ↔ M. Alvarez · advice on a market-timing question, preserved as a Rule 204-2 record.
The message your advisor sent from their personal iPhone still counts.
The SEC's recordkeeping initiative has charged more than 100 firms and imposed more than $2 billion in penalties since December 2021, sweeping in investment advisers alongside broker-dealers. The violation is not what any one message said. It is that a covered business communication lived off-channel, on a platform the firm never captured and could not produce. iMessage is the off-channel gap most firms miss, because advisors text clients from the phone in their pocket. For the full requirements picture, read our archiving requirements guide.
Why iMessage is the industry's hard channel.
An SMS text crosses a carrier's network, so a number-based archive can read it. iMessage never touches that network. When both people are on iPhones it routes through Apple, encrypted, and lands on the two devices and nowhere else. Delete the thread and an uncaptured copy is gone. Every common workaround tries to reach into that world, and each one has a catch.
- –A sync agent copies messages off the advisor's phone. It depends on that phone staying connected and unlocked, and a message deleted before the next copy is simply gone.
- –A device backup captures a snapshot, not a continuous record, so anything sent and deleted between backups never lands in it.
- –Mirroring the thread to a second device inherits the same gap: an edit or a delete-for-everyone can reach the mirror before anyone preserves the original.
- –Disabling iMessage to force plain SMS lets a number-based archive read the text, but advisors resent the downgrade and route around it, and RCS reopens the gap.
- –A second-number app routes a separate business line through an archive, but clients keep texting the number the advisor has always used, so those threads stay off-channel.
Every one of these chases the iMessage protocol or a copy of the phone, and each breaks at the moment that matters most: when a message is edited or deleted.
You don't have to capture the iMessage protocol to archive every business text.
Your firm adds RegFin's archive line to client conversations. Advisors keep the phone in their pocket, the number clients already have, and Apple Messages. From then on, every message in those conversations is preserved and sealed, including the ones a sender later edits or deletes. Nothing to install, nothing to change.
Add the archive line
The firm adds RegFin's archive contact to client text threads. Advisors text from their own iPhones, and clients keep texting the number they already have.
Every message, the moment it's sent
Everything in those threads, SMS, MMS, and RCS, one-to-one and group, is preserved as it happens. An edit or a deletion later leaves the original intact and records the attempt itself.
Sealed to WORM
Each message is hashed and sealed to write-once storage where no one, not even RegFin, can alter or delete it. From there it is full-text and semantically searchable.
What happens when someone deletes a text.
A message can be unsent or edited on a phone. It cannot be unsent from the record.
The original, the revision, and the attempt
- ✓The original message, exactly as it was first sent.
- ✓The full revision history when a sender edits it.
- ✓A record of the deletion or edit attempt itself, a reviewable event on its own.
The test no copy of the phone passes
Approaches that read a copy of the device only hold whatever was on it at the last sync. If a message is deleted before that copy runs, there is nothing left to preserve.
Because the archive line sits inside the conversation, the record is written the moment a message exists. A later deletion changes what the client sees, never what the archive holds.
Two ways to cover the channel. Pick your level.
Most firms start with the archive line on the phones advisors already carry. Firms that want every message captured, with no reliance on advisor habits, issue company phones instead.
Works with the phones your advisors already have
- ✓Advisors keep their own iPhones, numbers, and Apple Messages.
- ✓The firm's archive line is added to client conversations; every message in them is preserved.
- ✓Selective by design: only threads that include the archive line are archived, so personal threads never are.
- ✓Nothing installed on anyone's personal phone.
A company phone that archives itself
- ✓Your firm buys the phones; RegFin sets them up and manages them.
- ✓Every message on the device is archived automatically, with no per-thread setup.
- ✓Complete capture by design, with zero reliance on advisor discipline.
- ✓The same sealed WORM record and one review as everything else.
iMessage is the wedge. The rest of your records come with it.
The same platform that archives your advisors' texts keeps every other channel a firm has to produce, under one policy engine and one review.
Text messages
SMS, MMS, and RCS through the archive line, one-to-one and group. Every message preserved; edits and deletions survive.
WhatsApp Business messages, media, and documents, captured and sealed in the same archive as every other channel.
Microsoft 365 and Google Workspace mailboxes, with full headers, attachments, and full-text search. See communications archiving.
Website
Page-level snapshots of your marketing pages, blog, and PDF disclosures, versioned so you can see the site as it stood on any day.
AI surveillance
One filter reads every channel for misleading claims, off-channel intent, and complaints, then hands each flag to a person to decide.
One archive, one contract
RegFin built the capture layer itself, so nothing sits between capture and the archive. Every channel lands in the same searchable, sealed record, reviewed and produced from a single place. See the full archiving platform.
Kept long enough. Provably unchanged.
Rule 204-2 sets outcomes for adviser records: indexed, reproducible, and safeguarded from loss or alteration. RegFin meets them and lets you set the window.
SHA-256, then WORM
Every message is hashed and sealed to write-once storage, tamper-evident from the first byte and beyond anyone's reach to edit.
No one can alter it
Once a record lands in write-once storage, no one can change or remove it, not even RegFin.
Five-year floor
Rule 204-2(e)(1) keeps adviser records for at least five years, the first two years in an appropriate office. RegFin defaults to six and lets you configure it.
Exam export
Filter by advisor, client, channel, and date, then export a searchable set with checksums for an examiner request.
Your questions, answered.
Cover the channel your advisors already use.
Watch a live text survive an edit and a delete-for-everyone, and see how the rest of your records fit the same archive. Have a look at pricing or start with the RIA compliance guide.
Book a demo →