8.6 Current Records, Reconciliations and Electronic Retention
Key Takeaways
Make-and-keep-current duties differ from record-preservation periods.
Reconciliations need traceable investigation rather than unsupported plugs.
Electronic records can use compliant WORM or the audit-trail alternative.
The operational foundation of the securities regulatory framework rests upon complete, accurate, and immutable recordkeeping. Under Sections 17(a) and 23(a) of the Securities Exchange Act of 1934, the SEC promulgated SEC Rule 17a-3 (specifying the records that broker-dealers must create and maintain) and SEC Rule 17a-4 (specifying how long and in what manner those records must be preserved). Without rigorous books and records compliance, regulatory audits, customer dispute resolutions, financial solvency monitoring, and market surveillance would be impossible.
SEC Rule 17a-3: Records to be Made by Broker-Dealers
SEC Rule 17a-3 outlines the mandatory primary accounting records, transaction memoranda, and administrative files that every registered broker-dealer must generate in the ordinary course of business. Operations professionals must enforce strict preparation deadlines across each record category:
1. Blotters (Records of Original Entry)
Blotters represent chronological, itemized records of daily operational activity. They reflect all incoming and outgoing financial transactions and must be prepared no later than the first business day following the trade date (T+1). A broker-dealer must maintain three distinct primary blotters:
- Purchases and Sales of Securities: Detailed records of every execution, including trade date, settlement date, quantity, security name/symbol, unit price, gross consideration, commission/markup, and customer or counterparty account identifier;
- Receipts and Deliveries of Securities: Records of physical certificates or book-entry depository movements entering or leaving firm custody, including CUSIP number, certificate number, date received/delivered, and sender/recipient details; and
- Cash Receipts and Disbursements: Comprehensive accounting of all cash movements, wire transfers, incoming customer checks, and outgoing distribution checks.
2. General Ledgers
The general ledger reflects the firm's complete financial status, containing all asset, liability, revenue, expense, and equity capital accounts. General ledgers must be made and kept current. Monthly trial balances are a separate requirement, not permission to leave material daily activity unposted until month-end.
3. Customer Account Ledgers (Customer Ledgers)
Customer ledgers provide an itemized chronological record of cash and margin debits and credits for each individual customer account. Customer ledgers must reflect transactions no later than the settlement date (T+1 under standard regular-way settlement). Entries include securities bought or sold, cash deposits and withdrawals, dividend or interest receipts, margin interest debits, and journal entries.
4. Order Memoranda (Order Tickets)
Every order received by a broker-dealer—whether executed, canceled, or unexecuted—must be recorded on a formal order memorandum (order ticket) prepared at the time of order receipt. The order ticket must record:
- Terms and conditions of the order (symbol, share quantity, buy/sell, market/limit/stop, time-in-force);
- Customer account name and account number;
- Identity of the registered representative introducing the order and the individual who entered it;
- Order classification: solicited, unsolicited, or executed under discretionary authority;
- Mandatory Precise Timestamps: Time of order receipt, time of order entry into the routing system, execution time with the precision required by the applicable record/audit-trail rule, and time of any order modification or cancellation.
5. Trade Confirmations
Under SEC Rule 10b-10, copies of all trade confirmations dispatched to customers on or before settlement date must be preserved. Confirmations detail trade date, settlement date, capacity (agent vs. principal), price, yield disclosures, and fee allocations.
6. Trial Balances and Capital Computations
The broker-dealer must prepare trial balances and regulatory Net Capital computations under Rule 15c3-1 at least once each month.
7. Associated Person Records & Customer Profile Updates
Firms must maintain personnel files containing Form U4 and Form U5 filings, fingerprint cards (SEC Rule 17f-2), employment applications, registered principal supervisory designations, and compensation agreements. Under SEC Rule 17a-3(a)(17), customer account profile records must be updated within 30 days of receiving customer notification of an address, name, or investment objective change.
Retention Periods and Trigger Dates
Rule 17a-4 specifies preservation periods by record category. Basic blotters, general and customer ledgers, and securities-position records generally have a six-year period, with the first two years easily accessible. Order memoranda, confirmations and many financial/communication records generally have a three-year period, with applicable accessibility requirements.
FINRA Rule 4513 requires written customer complaints and records of action taken to be preserved for four years. Do not purge a complaint after three years merely because the same email also qualifies as correspondence. Corporate organizational records such as charters and minute books have life-of-enterprise requirements.
The starting event matters. Under Rule 4512.01, updated customer information is preserved for at least six years after the update; the last update, or original information if never updated, is preserved for six years after account closure. That does not make every CIP verification document subject to an invented identical 26-year retention period.
CIP has separate five-year triggers: basic identifying information generally runs from account closure, while descriptions of verification methods and discrepancy resolution run from record creation. Other overlapping obligations can require longer preservation. Apply all applicable requirements rather than use the shortest period.
Personnel and supervisory records also have category-specific triggers. Associated-person records can run from termination, and superseded procedures from when they cease use. Do not apply an ordinary three-year correspondence rule indiscriminately to every U4, U5 or compliance document. Preserve records required by an investigation, litigation hold or regulator even when an ordinary minimum period expires.
For example, an account closes in 2026 after its last Rule 4512 information update in 2024. The last information version must remain for at least six years after closure, while prior versions follow their own update-based clocks. Maintain a schedule identifying category, creation/update/closure trigger, minimum date and any hold.
Retention is useful only if the firm can retrieve complete records with their context. Preserve approvals, attachments and correction histories. A PDF with the attachment missing or a final balance without transaction history may not satisfy the underlying record requirement.
Electronic Storage Media (ESM) under SEC Rule 17a-4(f)
Historically, SEC Rule 17a-4(f) required broker-dealers preserving digital records to utilize physical WORM (Write Once, Read Many) optical media, which prevented the erasure, alteration, or overwriting of data once written.
Modern SEC Audit-Trail Alternative (2022 Amendments)
Recognizing modern cloud infrastructure, distributed ledgers, and enterprise databases, the SEC updated Rule 17a-4(f) to permit an alternative compliance pathway. A broker-dealer may preserve electronic records using either:
- The Traditional WORM Standard: Preserving records in a compliant non-rewriteable, non-erasable format; OR
- The Modern Audit-Trail Alternative: Storing records in an electronic recordkeeping system that maintains a complete, time-stamped, and verifiable audit trail. The audit trail must permit recreation of original records and track required modifications/deletions and related actions, recording:
- The date and time of the action;
- The identity of the individual or automated script initiating the change;
- The exact data modified; and
- Complete historical versioning ensuring deleted or altered records can be reconstructed in their original state.
Technical and Operational Safeguards for Electronic Records
Regardless of whether a firm uses WORM or the audit-trail alternative, Rule 17a-4(f) mandates strict operational controls:
- Immediate Retrieval and Viewing: The firm must maintain facilities to immediately display and download readable copies of records for regulatory examiners during examinations.
- Redundancy: Maintain the required backup copy or other compliant redundancy, with recoverability and access meeting the current rule. Do not assume the rule mandates one particular cloud architecture.
- Accurate Indexing: All records must be indexed, serialized, and cataloged with search metadata to permit rapid retrieval.
- Third-Party / Executive Access Undertaking: To prevent a broker-dealer from withholding records during an investigation, the firm must file a binding written undertaking with FINRA and the SEC executed by either:
- A Designated Third Party (D2P) possessing independent access to the firm's digital archives; OR
- A Designated Executive Officer (DEO) of the broker-dealer who has independent access and legal authority to furnish records directly to regulatory examiners.
Reconciliation and Timely Posting
Reconcile bank balances, customer subledgers, the general ledger, depository positions, transfer-agent records, loans and fails. Differences may reflect timing, omissions, duplicate entries, wrong accounts, prices or actual missing assets. A reconciliation identifies and resolves a break; it is not simply checking whether two totals match.
A bank shows a $25,000 wire debit while the customer ledger does not. First authenticate the bank transaction and trace the authorized request and processing reference. If a valid payment was omitted, record the correct customer and control-account entries with approval. If unauthorized, protect remaining assets, escalate and preserve evidence. An unexplained “plug” to expense is not resolution.
Daily processing should capture activity promptly and keep the books current under Rule 17a-3. Distinguish the daily blotter from the monthly trial balance. Posting a trade, its settlement, a fee and a correction may affect different records; reconcile all affected systems.
For an interaccount journal of $5,000, verify that the source debit equals the destination credit and the total cash control still reconciles to the bank. A balanced general ledger does not prove the customer authorized the payment. Similarly, a balanced stock record does not prove eligible possession/control.
Assign unresolved breaks an owner, age, financial effect and escalation deadline. Confirm late items and correct through traceable entries that preserve the original. Unauthorized backdating, deleting losses, inventing collateral or suppressing a fail violates record integrity even if it improves a report’s appearance.
Before preparing regulatory reports, reconcile subsidiary schedules to the general ledger and investigate unexplained movements. Document review and approvals. A vendor’s daily file can be incomplete or stale; compare accepted output to the firm’s actual transactions rather than rely solely on a successful file-transfer message.
Sources checked 2026-10-20: FINRA carrying agreements, SEC electronic recordkeeping, SEC reserve FAQ.
A valid $25,000 bank wire is missing from the customer ledger. What should operations do?
Insert an unexplained offset to make totals match
Trace authorization, correct approved entries and reconcile affected records
Delete the bank record
Wait indefinitely for an annual audit
Sections you finish are checked off in the contents.