MarcusEmma, let's start with a scenario that every principal dreads. A regulator from FINRA walks into your office, sits down, and says, "I need to see all customer complaint files from the last five years, your daily blotters from two years ago, and your firm's original partnership agreement." What goes through your head?

EmmaYour first thought is, "Do I have them? For how long was I supposed to keep them? And where are they?" Getting that wrong means a deficiency, and that’s a conversation no one wants to have. This all comes down to two specific SEC rules.

MarcusAnd those would be the famous SEA Rules 17a-3 and 17a-4.

EmmaExactly. It's best to think of them as a pair. Rule 17a-3 tells you *what* records you have to create. Rule 17a-4 tells you *how long* you have to preserve them. The 'what' and the 'how long'.

MarcusSo 17a-3 is the list of documents a firm needs to be making and keeping current. What's on that list?

EmmaIt starts with the absolute core of the business. The first things are blotters. Think of a blotter as the firm's daily diary for every single transaction. Every purchase, every sale, every time cash comes in or goes out—it gets an entry.

MarcusSo the blotter is the chronological, day-by-day log. What about the bigger picture, like the firm’s overall accounting books?

EmmaThat's the next key record: the ledgers. If the blotter is the diary, the ledgers are the master accounting books that summarize everything. They track all the firm's assets, liabilities, income, and expenses, including the specific accounts for each customer.

MarcusOkay, so we have the daily log and the summary books. What about the records for an individual client's instruction to buy or sell?

EmmaThat would be the order ticket. Rule 17a-3 requires a record of every single order, whether it was executed or not. It has to include all the details—the security, the timing, the account info. It's the evidence of the client's instruction and the firm's action.

MarcusThat makes sense. And I imagine records about the customers themselves are on this list.

EmmaAbsolutely. That’s a whole category called customer account records. This includes the new account form, any margin agreements, and other key documents that define the relationship with the client.

MarcusWhat about all the back-and-forth? The emails, the instant messages, the letters?

EmmaAll of it. That falls under "correspondence." Any written communication, including electronic, that relates to the firm's business has to be captured. This is a huge area for regulators.

MarcusAnd what about the firm's own internal rulebook? The one that tells employees how to do their jobs correctly.

EmmaThat's another critical one: the Written Supervisory Procedures, or WSPs. It’s the firm’s customized compliance manual, and regulators need to see that you not only have one, but that you're keeping it current.

MarcusOkay, that covers the firm's rules. Any records about the people working there?

EmmaYes, specifically Forms U4 and U5. Those are the registration and termination forms for your advisors and other associated persons. The firm has to maintain copies of those as well.

MarcusSo that’s Rule 17a-3—a comprehensive list of *what* you need to create. Now for 17a-4, the big question: how long do you have to keep all this stuff?

EmmaRule 17a-4 breaks it down into three main retention periods: lifetime, six years, and three years.

MarcusLet's start with the longest one. What kind of record does a firm have to keep for its entire "lifetime"?

EmmaThink of these as the firm's birth certificate and constitution. These are the foundational documents that establish the firm's legal existence. We’re talking about the Articles of Incorporation or the Partnership Agreement, the minutes from board of directors meetings, and stock certificate books.

MarcusSo, the documents that define what the company is. That makes sense. Now, what about the six-year records? That seems to be a major category on the exam.

EmmaIt is. This bucket holds the core financial and customer records. It includes those blotters we talked about—the daily transaction diaries—the general ledgers, and the customer account records like new account forms.

MarcusOkay, so the firm's financial backbone and the core customer files are kept for six years. Is there a catch I need to know about?

EmmaThere is, and this is one of the most tested details. For the first two years of that six-year period, those records must be kept in an "easily accessible location."

MarcusWhat does "easily accessible" actually mean in practice? Sitting on a server in the main office?

EmmaExactly. It means you can produce it for a regulator without a delay. On-site, either physically or electronically, where you can pull it up immediately. It can’t be in a third-party storage facility in another state that takes three days to ship you a box.

MarcusThat’s a critical distinction. After two years, it can go to long-term storage, but for those first two, it has to be at your fingertips.

EmmaPrecisely.

MarcusOkay, so we have lifetime records and six-year records. What falls into the three-year bucket?

EmmaThis category is mostly for communications and operational records. This is where you’ll find correspondence—all those emails and instant messages—as well as advertisements and sales literature. The firm’s WSPs and employee records like Forms U4 and U5 also fall in this category.

MarcusAnd let me guess, that "easily accessible" rule probably applies here, too?

EmmaYou got it. Same exact rule. For the first two years of that three-year period, all that correspondence, advertising, and the WSPs must also be in an easily accessible place.

MarcusYou’ve mentioned electronic records a few times. I assume firms aren't printing out every single email. Are there specific rules for digital storage?

EmmaYes, and they are very strict. The primary requirement is that the records must be stored in a "WORM" format.

MarcusWORM, as in W-O-R-M?

EmmaCorrect. It stands for "Write Once, Read Many." Think of it like a digital version of chiseling something in stone. Once the record is saved to the system, it cannot be altered, overwritten, or erased for the duration of its retention period.

MarcusSo just saving a PDF to a shared company drive isn't good enough.

EmmaNot even close. That file could be changed or deleted. A WORM-compliant system ensures the record is preserved in its original state, which is what regulators need to see.

MarcusThis is a lot of moving parts. Let's walk through a practical example. An examiner asks a principal for an email sent to a customer two years and eleven months ago. What happens?

EmmaOkay, let's use the framework. Step one: identify the record. It's an email, which is "correspondence."

MarcusRight. Step two is the retention period. Correspondence is a three-year record.

EmmaExactly. So is the request for a record that is two years and eleven months old within the required retention period? Yes, it is. It's just inside the three-year window.

MarcusSo the firm has to produce it. Now, what about the "easily accessible" rule? Two years and eleven months is outside the first two years.

EmmaThat’s the key. It doesn't need to be in that immediately retrievable, on-site location anymore. It might take a little more effort to pull from an archive. But the obligation to preserve and produce it for the full three years is absolute. The firm must find it and provide it.

MarcusThis seems custom-made for tricky exam questions. What's a common trap that candidates fall into with these rules?

EmmaThe biggest one is mixing up the three-year and six-year categories. The test will describe a record, like a customer's new account form, and one of the answer choices will be "three years." You have to know that core customer records are six years, while communications are three.

MarcusAnd I'm guessing that "easily accessible for the first two years" rule is another favorite trap.

EmmaAbsolutely. An answer choice might say a six-year record only needs to be accessible for the full six years, ignoring the special requirement for the first two. Or it might incorrectly apply the rule. Remember, it applies to *both* the three-year and six-year records.

MarcusYou also mentioned a trap with "lifetime" records.

EmmaYes. People assume any document that seems really important must be a lifetime record. But the list is very specific: it's the firm's foundational, structural documents. A customer's account records are vital, but they are six-year records, not lifetime. Don't let the word "important" trick you into picking "lifetime" automatically.

MarcusOkay, this is a lot of detail to hold in your head during an exam. Is there a simple way to organize these buckets?

EmmaI use a simple analogy. Think of three categories. First, the Firm's Birth Certificate. These are your lifetime records—the Articles of Incorporation, partnership agreements. They define the firm's existence.

MarcusThe Birth Certificate. I like that. What's the second one?

EmmaThe Firm's Wallet and Client Files. This is the money and the relationships. It's your blotters, ledgers, and customer account records. That's your six-year bucket.

MarcusBirth Certificate is lifetime. Wallet and Client Files are six years. What's the third?

EmmaThe Firm's Mail and Rulebook. This is all the day-to-day communication and operational guidance—correspondence, ads, WSPs. That’s your three-year bucket.

MarcusThat’s a great mental shortcut. Birth Certificate, Wallet and Client Files, Mail and Rulebook.

EmmaExactly. And for the Wallet and the Mail, just remember the first two years of records have to be on your desk, figuratively speaking—easily accessible.

MarcusThat really helps clarify it. Breaking down complex rules into frameworks like that is essential for passing.

EmmaIt's what we focus on in all our material. For anyone listening, VoraPrep is a full exam-prep app — lessons, practice questions, and an AI tutor in one place. If you're looking for more ways to break down complex topics like this, you can get started at Vora Prep dot com.

MarcusAnd it's free to try. Emma, this was incredibly helpful. Thanks for making these rules so much clearer.

EmmaMy pleasure, Marcus. To everyone studying, keep up the focus and the hard work. We'll talk to you next time.