Marketing Recordkeeping Requirements

Marketing recordkeeping requirements under SEC Rule 204-2 require registered investment advisers to retain copies of every advertisement they directly or indirectly disseminate, plus the books, records, and working papers that substantiate performance results and material marketing claims. To operationalize it, you need a controlled capture-and-approval workflow, a complete inventory of ad formats and distribution channels, and auditable substantiation files tied to each ad. (17 CFR § 275.204-2)

Key takeaways:

• Keep a retrievable copy of every ad you disseminate, across every channel, including third-party distribution you direct or influence. (17 CFR § 275.204-2)
• Retain the records needed to support performance shown and substantiate material statements in the ad, not just the final PDF or screenshot. (17 CFR § 275.204-2)
• Build a repeatable system: intake → review/approval → distribution capture → substantiation package → retention and retrieval. (17 CFR § 275.204-2)

Marketing recordkeeping is an exam-ready requirement because it sits at the intersection of advertising, performance reporting, and basic books-and-records hygiene. The SEC’s recordkeeping rule expects you to be able to reproduce what you said (the advertisement), when and where you said it (distribution context), and why you had a reasonable basis to say it (substantiation). If you cannot promptly produce complete records, the firm’s marketing program becomes difficult to defend even if the underlying claims are accurate.

Operationally, the hard part is not understanding the rule; it is coverage. “Advertisement” content is created and disseminated by more teams, in more tools, and through more channels than most policies anticipate: investor pitch decks, website pages, mass emails, social posts, DDQ language copied into decks, third-party consultants distributing materials, and performance extracts embedded in PDFs. Your program should assume marketing will happen everywhere and design controls that capture by default.

This page translates 17 CFR § 275.204-2(a)(11) into requirement-level steps a CCO or GRC lead can implement quickly: scoping, workflow, evidence, testing, and the artifacts that keep you out of “we can’t find it” territory during an exam. (17 CFR § 275.204-2)

Regulatory text

Requirement (excerpt): “Investment advisers must make and keep copies of all advertisements they directly or indirectly disseminate … along with documentation supporting performance claims and substantiation of material statements.” (17 CFR § 275.204-2)

What the operator must do:

1. Capture and retain a copy of every advertisement the adviser disseminates, whether the dissemination is direct (you send it) or indirect (a third party distributes it at your direction or as part of your marketing process). (17 CFR § 275.204-2)
2. Retain the records that form the basis for performance shown in advertisements, including “accounts, books, internal working papers, and other records necessary” to support the calculation. (17 CFR § 275.204-2)
3. Retain documentation supporting a reasonable basis for believing testimonials and endorsements comply, when those appear in advertising. (17 CFR § 275.204-2)

Plain-English interpretation (what the rule demands in practice)

If you run an SEC-registered adviser marketing program, you need to be able to answer three exam questions for any ad:

• What exactly was distributed? Provide the final distributed version in the format a recipient saw (PDF, web page capture, email body, video file, etc.). (17 CFR § 275.204-2)
• What is the backup for the claims? Provide the substantiation package behind performance figures, statements about process, risk, holdings, track record, comparisons, awards, or other material statements. (17 CFR § 275.204-2)
• What is the compliance basis for sensitive content types? For example, if the ad includes testimonials or endorsements, retain your documentation supporting your reasonable basis for compliance. (17 CFR § 275.204-2)

A “file folder of final decks” is not enough if performance numbers, case studies, or comparative statements cannot be traced to source records and working papers. Conversely, a pile of calculations without the final ad copy fails the “what did you disseminate” test.

Who it applies to (entity + operational context)

Applies to:

• Investment advisers (including SEC-registered advisers) and fund managers subject to the SEC’s adviser recordkeeping rule. (17 CFR § 275.204-2)

Operational contexts where this shows up:

• Marketing and IR distributing pitch decks, one-pagers, factsheets, due diligence responses, and RFP content.
• Website updates, blog posts, thought leadership, and gated content.
• Mass email campaigns and one-to-one emails that include performance excerpts or material claims.
• Social media posts and paid digital campaigns.
• Third parties distributing your materials (placement agents, marketers, affiliates, or platforms) when you are part of the dissemination chain. (17 CFR § 275.204-2)

What you actually need to do (step-by-step)

1) Build a complete “advertisement universe” inventory

Create a living register of advertisement types and channels. Minimum fields:

• Content type (deck, factsheet, web page, email, video)
• Product/strategy
• Owner (Marketing/IR/Product)
• Distribution channels (website, CRM email, data room, social, third party)
• System of record (SharePoint, CMS, CRM, DAM)
• Whether performance is shown
• Whether testimonials/endorsements are used (17 CFR § 275.204-2)

Practical tip: If your inventory does not include “one-to-one email templates” and “website pages,” you will miss a lot of real distribution.

2) Standardize an ad intake and approval workflow

Write a simple SOP that answers:

• Who can request marketing content approval?
• What must be provided at intake (draft + claim substantiation references)?
• What are the review gates (Compliance, Legal, Product/performance team)?
• What constitutes “approved” versus “approved with changes”?
• How do you prevent unapproved distribution? (17 CFR § 275.204-2)

Control design: Require a unique approval ID (or ticket number) that gets stamped into the ad file name or metadata so you can link the distributed version to its review record.

3) Define “copy of the advertisement” by channel (capture rules)

Create channel-specific capture standards so you can produce the ad later:

• PDF/deck: final exported file + the version history showing approval state.
• Web pages: page export or web-archive capture showing content as published, plus the publish log from the CMS.
• Email campaigns: the HTML/body content, subject line, send list or criteria, and the send log from the email platform.
• Social posts: the post content, image/video, and posting record. (17 CFR § 275.204-2)

The requirement is copies of ads you disseminate; your capture method must reproduce what a recipient saw. (17 CFR § 275.204-2)

4) Create a substantiation package for each ad with performance or material claims

For any advertisement with performance shown or material factual statements, retain a substantiation bundle that typically includes:

• Source performance reports and the working papers that demonstrate the calculation shown in the ad. (17 CFR § 275.204-2)
• Data lineage notes: where the numbers came from (portfolio accounting system outputs, benchmark sources, internal models) and who prepared/checked them.
• Claim substantiation memo or spreadsheet mapping each material statement to support (e.g., “we have deep expertise in X,” “risk is managed by Y process,” “we have done Z transactions,” “top holdings include …”). (17 CFR § 275.204-2)

Operational rule: If a claim is important enough to be in marketing, it is important enough to have a citation to internal records.

5) Add testimonial/endorsement documentation when applicable

If an ad includes testimonials or endorsements, retain documentation supporting your reasonable basis for believing it complies. (17 CFR § 275.204-2)

At minimum, build a checklist and file packet keyed to the ad approval ID:

• What content was used (quote, logo, rating excerpt)
• Who approved it
• What compliance conditions were checked
• Where the supporting documentation is stored (17 CFR § 275.204-2)

6) Centralize retention and retrieval (don’t rely on individuals)

Implement a records repository pattern:

• One repository for “final distributed ads.”
• One linked repository for “substantiation and working papers.”
• Clear naming conventions and metadata (strategy, date, channel, approval ID).
• Permissions that prevent silent edits after approval (or at least preserve immutable versions). (17 CFR § 275.204-2)

If you are stitching this together across SharePoint + CMS + CRM, Daydream can function as the control layer: intake/approval workflow, required fields for substantiation, and a retrieval index so you can respond to exam requests without chasing down personal drives.

7) Test the program like an examiner would

Run periodic “pull tests”:

• Select a sample of ads across channels.
• Retrieve the exact distributed copy.
• Retrieve the substantiation package.
• Verify the package clearly supports performance figures and material statements. (17 CFR § 275.204-2)

Document the test results and remediation actions as compliance evidence.

Required evidence and artifacts to retain

Store these artifacts in an exam-ready structure tied to each advertisement:

• Final advertisement copy (as disseminated) and version history. (17 CFR § 275.204-2)
• Approval ticket / compliance sign-off record and comments.
• Distribution evidence (publish log, email send log, social post record). (17 CFR § 275.204-2)
• Performance calculation support: reports, working papers, calculation spreadsheets, reconciliation notes. (17 CFR § 275.204-2)
• Material statement substantiation mapping (claim-to-support matrix). (17 CFR § 275.204-2)
• Testimonial/endorsement reasonable-basis documentation when applicable. (17 CFR § 275.204-2)

Common exam/audit questions and hangups

Expect these prompts in some form:

• “Provide all advertisements disseminated during the period, including website content and emails.” (17 CFR § 275.204-2)
• “Show the backup for performance shown in this ad and how it was calculated.” (17 CFR § 275.204-2)
• “Show the basis for each material statement in the pitchbook.” (17 CFR § 275.204-2)
• “Where is your documentation supporting your reasonable basis for testimonial/endorsement compliance?” (17 CFR § 275.204-2)
• “How do you ensure content disseminated by third parties is captured and retained?” (17 CFR § 275.204-2)

Hangups usually trace back to incomplete channel capture (web/social/email) or orphaned calculations that are not tied to the exact distributed version.

Frequent implementation mistakes (and how to avoid them)

1. Saving only the final deck, not the backup. Fix: require a substantiation checklist at approval time and block “final approval” until it is attached. (17 CFR § 275.204-2)
2. No evidence of dissemination. Fix: store distribution logs or publication records alongside the ad, especially for web and email. (17 CFR § 275.204-2)
3. Performance numbers copied into decks without traceability. Fix: keep a standardized “performance table workbook” with locked formulas and link the workbook version to each ad approval ID. (17 CFR § 275.204-2)
4. Third-party distribution is unmanaged. Fix: contractually require third parties to distribute only approved materials and to route dissemination copies back into your repository. (17 CFR § 275.204-2)
5. Approvals happen in chat. Fix: make the system of record a ticket/workflow tool, not email threads; preserve the decision and the final file hash/version. (17 CFR § 275.204-2)

Enforcement context and risk implications

No public enforcement sources were provided in the supplied source catalog for this page, so this section is limited to rule-based risk framing.

Your primary risk is exam defensibility: if you cannot promptly produce ads and their substantiation, the firm can face regulatory scrutiny around recordkeeping and the underlying marketing content. The operational consequence is time-consuming lookbacks, reconstruction efforts, and a loss of confidence in your marketing controls. The cleanest mitigation is a controlled workflow that captures the ad and its support as part of the normal marketing lifecycle. (17 CFR § 275.204-2)

Practical execution plan (30/60/90)

First 30 days (stabilize and stop record loss)

• Map all ad channels and owners into a single inventory.
• Implement a “no approval, no distribution” rule for new materials through a centralized intake.
• Establish minimum capture standards per channel and a single repository for final ads. (17 CFR § 275.204-2)

Days 31–60 (attach substantiation and make it auditable)

• Add a substantiation checklist for performance and material statements.
• Build the claim-to-support matrix template and require it for high-risk content.
• Stand up testimonial/endorsement documentation packets when applicable. (17 CFR § 275.204-2)

Days 61–90 (prove it works under exam conditions)

• Run a pull test across channels; document gaps and remediation.
• Train Marketing/IR and performance teams on “what must be retained” and where.
• Operationalize ongoing monitoring: periodic sampling, repo access reviews, and workflow metrics (e.g., rejected items, missing substantiation flags). (17 CFR § 275.204-2)

Frequently Asked Questions

Does “advertisement” include website pages and social media posts?

The recordkeeping requirement covers “all advertisements” you directly or indirectly disseminate, so you should treat web and social content as in-scope and capture copies as published. Align your capture method to reproduce what a recipient saw. (17 CFR § 275.204-2)

Do we need to keep drafts or only final versions?

The rule text provided focuses on keeping copies of advertisements disseminated and the records supporting performance and material statements. In practice, retain the final disseminated version plus the approval record and substantiation; keep drafts if they are necessary to evidence review history in your process. (17 CFR § 275.204-2)

What counts as “documentation supporting performance claims”?

Keep the accounts, books, internal working papers, and other records necessary to form the basis for or demonstrate the calculation of performance shown in the ad. That typically means source reports, calculation workpapers, and reconciliation notes that tie directly to the figures in the ad. (17 CFR § 275.204-2)

How do we handle third parties who distribute our marketing materials?

If ads are indirectly disseminated, treat them as in-scope. Require third parties to distribute only approved versions and to provide copies or distribution evidence back to your records repository, enforced through contract terms and operational checks. (17 CFR § 275.204-2)

Our performance numbers come from multiple systems. How do we make substantiation exam-ready?

Create a standardized substantiation package that includes system outputs, calculation workpapers, and a short lineage note that explains inputs and checks. Tie the package to a unique approval ID so you can prove the exact numbers in the distributed ad are supported. (17 CFR § 275.204-2)

What’s the simplest way to operationalize this if we lack a marketing compliance tool?

Start with a centralized approval queue (even a ticketing workflow), a controlled repository for final ads, and a required substantiation checklist for performance/material claims. Daydream can replace the patchwork by enforcing required fields, preserving approval history, and indexing ads to their substantiation for fast retrieval. (17 CFR § 275.204-2)