Broker-Dealer Record Retention: 3 Years, 6 Years, or Life?

Broker-dealer record retention requirements come from SEC Rule 17a-4, which sorts records into three main buckets: keep for the life of the firm, keep for six years, or keep for three years. FINRA layers a separate four-year rule on top for written customer complaints, and personnel records run on their own clock tied to when the employee leaves. Within each SEC tier, the first two years generally have to sit somewhere a regulator can pull them fast.¹

The Retention Schedule at a Glance

Where a record could fall into more than one category, the longer period controls.

Life of the firm: organizational documents, Form BD and amendments, supervisory procedure records, stock certificate books, minute books.
Six years: blotters, general ledgers, customer account ledgers, securities records, and account opening records (measured from account closure).
Four years: written customer complaint records under FINRA Rule 4513.
Three years: business communications, trade confirmations, bank statements, trial balances, order tickets, internal audit papers, and advertising or marketing materials.
Three years after termination: Form U4, employment applications, and fingerprint records for associated persons.

For everything except lifetime records, the first two years must be kept in an easily accessible place.¹

Records Kept for the Life of the Firm

Some documents never age out. Rule 17a-4 requires broker-dealers to preserve their foundational records for as long as the firm exists, and a successor entity inherits the obligation.

Organizational documents: articles of incorporation or organization, partnership agreements, charters, and minute books recording board or member meetings.
Ownership records: stock certificate books or equivalent records tracking ownership interests and capital changes.
Registration filings: all versions of Form BD, Form BDW, and amendments, plus documentation of registration with securities regulators or the CFTC.
Compliance procedures: records describing the firm’s supervisory system and written compliance policies required under the securities laws.

A firm that cannot produce these during an examination risks delays in registration renewals and possible action against its operating authority.¹

Records with a Six-Year Retention Period

The six-year tier covers the core accounting records regulators use to reconstruct a firm’s financial history:

Blotters: daily logs of every purchase, sale, receipt, and delivery of securities, plus all cash receipts and disbursements.
General ledgers: records of all assets, liabilities, income, and expenses.
Customer account ledgers: itemized records of each customer’s positions and money balances.
Securities records: logs showing each security held, where it is held, and the amounts owed to or by customers and other broker-dealers.

The Account-Closure Clock

Customer account records run on their own timer. Records relating to the terms and conditions of opening and maintaining an account must be preserved for at least six years after the account is closed. For account profile information collected under Rule 17a-3(a)(17), the six-year clock starts on whichever comes first: the date the account was closed or the date the information was last collected, replaced, or updated.¹ An account opened in 2015 and closed in 2026 creates an obligation running through 2032, not back to when it opened.

Records with a Three-Year Retention Period

Most day-to-day operational records land in the three-year bucket:

Communications: originals of all incoming correspondence and copies of all outgoing correspondence relating to firm business, including inter-office memos, emails, instant messages, and approvals of those communications.
Trade confirmations: copies of confirmations sent to customers for each transaction.
Bank records: bank statements and canceled checks.
Trial balances: periodic trial balances and internal audit working papers.
Order tickets: memoranda of each securities order showing the terms, time of entry, execution details, and the identity of the person who accepted or entered it.

The communications requirement covers every channel used for business discussions, including sales scripts, recordings of phone calls, and any materials subject to SRO rules on public-facing content.² When a dispute arises over a trade or a piece of advice, these are the records both sides reach for first.

Personnel Records Run From Termination

Records tied to associated persons follow a different clock: they run from the date the person leaves, not from the date the record was created. Form U4 filings and related employment records must be preserved in an easily accessible place until at least three years after the associated person’s employment and any other connection with the broker-dealer ends.³ Fingerprint records required under Rule 17f-2 follow the same three-years-after-termination rule.¹

A registered representative who worked at a firm for 20 years generates a U4 file that has to be preserved for that full period plus three more years. Firms that purge personnel files on a fixed calendar without tracking individual termination dates are a common source of compliance failures.

Written Customer Complaints Have Their Own Rule

FINRA Rule 4513 requires broker-dealers to keep written customer complaints for four years. A “customer complaint” under this rule means any grievance involving the firm’s activities in soliciting or executing transactions, or handling a customer’s securities or funds. The four years apply whether the complaint was resolved quickly, went to arbitration, or led nowhere.⁴ Because this obligation sits outside the SEC’s three-year and six-year tiers, firms that build retention schedules solely around Rule 17a-4 can destroy complaint files a year too early.

The Two-Year “Easily Accessible” Rule

Every retention tier except lifetime records carries an additional requirement inside it: the first two years must be kept in an easily accessible location. In practice, that means the office where the business was conducted or somewhere the firm can pull them through an immediate electronic lookup.¹ After two years, records can move to deeper archival storage, but they still have to be retrievable through the balance of the retention period.

Electronic Storage: WORM or Audit Trail

For decades, broker-dealers storing records electronically had to use Write Once, Read Many (WORM) technology that physically prevents overwriting or erasure. In 2023, the SEC amended Rule 17a-4 to add a second option: an audit-trail system.⁵ An audit-trail system permits modifications and deletions but logs every change: what was changed, when, by whom, and enough context to reconstruct the original record.

Whichever method a firm picks, the system must verify the completeness and accuracy of the storage process, produce records in both human-readable and usable electronic formats when the SEC, FINRA, or a state regulator asks, and maintain a redundant backup at a separate location.¹ Firms using a cloud or off-site provider must also obtain a written undertaking from that provider agreeing to furnish records to regulators on request.⁶

What Happens When Records Aren’t Preserved

The SEC can censure a firm, issue cease-and-desist orders, impose civil monetary penalties, suspend or revoke registration, or bar individuals from the industry. Most recordkeeping cases end in fines and censures rather than registration revocations, but the dollar figures have climbed sharply.

The three-year rule for business communications is where enforcement has been most aggressive. Since 2021, the SEC has run multiple sweeps against firms whose employees used personal text messages, WhatsApp, Signal, and other unapproved platforms for business without preserving those conversations. In 2024, 26 firms paid a combined $392.75 million to settle recordkeeping charges, with individual penalties running from $400,000 to $50 million.⁷ In January 2025, 12 more firms paid $63.1 million combined, with individual penalties reaching $12 million; firms that self-reported received meaningfully reduced fines, and each firm was also censured and ordered to cease and desist.⁸ The SEC noted that the failures involved “personnel at multiple levels of authority, including supervisors and senior managers,” and required firms to retain independent compliance consultants to overhaul their communication policies.⁹

Missing records also create downstream risk. When a firm cannot produce records during an examination, regulators may draw adverse inferences about what the missing data would have shown. In customer arbitration, a broker-dealer that destroyed relevant communications before the retention period expired may find that the panel treats the gap as evidence against the firm. Even where the underlying conduct was defensible, the inability to prove it makes settlement far more likely and far more expensive.

1
eCFR. 17 CFR 240.17a-4 Records to Be Preserved by Certain Exchange Members, Brokers and Dealers
2
eCFR. 17 CFR 240.17a-4 Records to Be Preserved by Certain Exchange Members, Brokers and Dealers
3
SEC.gov. FINRA U4 Recordkeeping NAL
4
FINRA.org. FINRA Rule 4513 – Records of Written Customer Complaints
5
U.S. Securities and Exchange Commission. Frequently Asked Questions Regarding Rule Amendments to Broker-Dealer Electronic Recordkeeping Requirements
6
U.S. Securities and Exchange Commission. Amendments to Electronic Recordkeeping Requirements for Broker-Dealers
7
U.S. Securities and Exchange Commission. Twenty-Six Firms to Pay More Than $390 Million Combined to Settle SEC’s Charges for Recordkeeping Failures
8
U.S. Securities and Exchange Commission. Twelve Firms to Pay More Than $63 Million Combined to Settle SEC’s Charges for Recordkeeping Failures
9
U.S. Securities and Exchange Commission. Eleven Firms to Pay More Than $88 Million Combined to Settle SEC’s Charges for Recordkeeping Failures