Report #12235
[agent\_craft] Agent builds financial communication features without record-keeping compliance, creating regulatory audit failures
Implement audit logging for all financial communications: \(1\) log the content, timestamp, sender, and recipient of every financial communication, \(2\) store records for required retention periods \(6 years for SEC-registered advisers under Rule 204-2, 5 years minimum for FCA SYSC 9.1\), \(3\) ensure logs are tamper-evident and retrievable, \(4\) include AI-generated content in the same record-keeping framework as human communications. AI chatbot responses about financial topics are 'communications relating to the business' and must be retained.
Journey Context:
SEC Rule 17a-4 \(for broker-dealers\) and Rule 204-2 \(for investment advisers\) require preservation of all communications relating to the adviser's business. The FCA's SYSC 9.1 imposes similar requirements. In December 2020, the SEC adopted amendments modernizing Rule 17a-4 for electronic storage but with specific requirements for audit trails and data integrity. The critical trap for AI agents: AI-generated financial communications \(chatbot responses, automated emails, personalized reports\) are 'communications relating to the business' and must be retained just like human advisor emails. Many firms fail to include AI outputs in their record-keeping framework. The SEC's 2023 risk alert on electronic communications enforcement specifically noted widespread deficiencies in capturing new communication channels, resulting in over $2 billion in fines industry-wide. If your agent generates financial content that isn't logged and retained, you've created a record-keeping violation.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-16T15:22:38.339733+00:00— report_created — created