Section 2Underwriting, Offerings and Registration of Securities
Post-Execution Activities and Record Keeping
18 min read
· Lesson 4 of 5
🌎WHY THIS MATTERS
$2.8 billion in SEC fines for texting on WhatsApp
In 2022 and 2023, the SEC and CFTC fined more than two dozen Wall Street firms a combined $2.8 billion for “off-channel communications” — bankers using WhatsApp, Signal, and personal email for business that should have been preserved under FINRA Rule 4511 and SEC Rule 17a-4. Recordkeeping isn’t paperwork; it’s regulatory survival. This lesson covers exactly which records must be kept, for how long, and on what media.
Rule 17a-4 retention periods
Four retention windows. Every business record a broker-dealer creates falls into one of them. The exam tests whether you can match a document type to its window — the sorter below drills this.
The 3-year / 2-year access distinction: 3-year records must be retained for 3 years total, but the first 2 years must be in an easily accessible location. Same concept for 6-year records (first 2 years accessible, then archived). The point isn’t just storage — it’s retrievability for regulators on demand.
Rule 17a-4 compliance pillars
Five operational requirements that apply to every record a broker-dealer is required to retain. Missing any one of these is the WhatsApp-fine pattern — storage exists but the procedures fail.
1
Non-rewriteable storage (WORM or equivalent)
Rule 17a-4(f)
Records must be stored in a Write-Once-Read-Many (WORM) format or an equivalent technology ensuring the records cannot be altered, deleted, or overwritten during the retention period. Modern cloud systems using audit logs and immutable backups qualify under 2022 technology-neutral amendments.
Violation pattern: employees using deletable personal messaging apps for business
2
Duplicate storage at separate location
Rule 17a-4(f)(3)
A duplicate copy must be stored at a separate location — different physical or cloud location, different system — to ensure records survive disaster, fire, or system failure. Cloud providers typically handle this via geo-redundant storage.
Violation pattern: single-location storage without disaster recovery
3
Indexing & retrievability
Rule 17a-4(f)(3)(v)
Records must be indexed in a way that allows retrieval by the SEC or FINRA on demand. The first 2 years of every retention period must be in an easily accessible location — no archive requests, no tape retrieval delays.
Violation pattern: records exist but cannot be produced within regulatory response windows
4
Designated third-party access
Rule 17a-4(f)(3)(vii)
Firm must engage a designated third-party service provider who can access the records independently if the firm becomes unable to produce them — typically during wind-down, dispute, or regulatory impasse. Provides a backup path for regulators.
Violation pattern: sole-custody records at a firm in financial distress
5
Supervisory review & written procedures
Rule 17a-4(b) & 17a-4(j)
Firm must have written supervisory procedures (WSPs) covering recordkeeping and must evidence supervisory review of relevant records — order tickets, correspondence, advertising — with documentation of the review itself preserved per the underlying retention rule.
Violation pattern: records stored but no evidence of principal review — the WhatsApp enforcement theme
Post-Execution Requirements
After an offering closes, investment bankers must ensure proper documentation and compliance:
The Deal File
A comprehensive archive of all deal-related materials:
Correspondence with underwriting group members, selling groups, and issuer
Pitch and marketing materials (internal sales memos, presentations)
Road show materials and investor meeting notes
Book building documents (IOIs, allocation records)
All versions of the prospectus (preliminary, final, any supplements)
Copies of all underwriting agreements and deal wires
Books and Records
SEC Rule 17a-3: Records that must be made by broker-dealers (trade blotters, ledgers, order tickets)
SEC Rule 17a-4: Records that must be preserved and retention periods (generally 3–6 years)
FINRA Rule 4511: General record retention requirements — firms must keep books and records as required by FINRA rules and the Exchange Act
Syndicate Settlement
FINRA Rule 11880: Syndicate accounts must be settled within 90 days of the syndicate settlement date. The managing underwriter must send a detailed written statement to syndicate members.
Know the distinction: 17a-3 = records to make, 17a-4 = records to keep. The exam tests specific retention periods less often, but it will test whether you know which rule governs creation vs. preservation.
Record Retention Specifics
Key retention periods for investment banking records:
6 years: General ledgers, stock record, trade
blotters, customer account records. First 2 years in an easily
accessible location.
3 years: Communications (emails, correspondence),
internal memos, compliance records. First 2 years in an easily
accessible location.
Lifetime of the enterprise + 3 years: Articles
of incorporation, minute books, stock certificates
Electronic records: Must be preserved using either WORM
(Write Once, Read Many — non-rewriteable, non-erasable) format or
an electronic recordkeeping system that maintains a complete time-stamped
audit trail permitting recreation of the original record if it is modified
or deleted. Prior to the October 2022 amendments to Rule 17a-4 (compliance
date May 3, 2023), WORM was the sole permitted format.
SEC Rule 17a-3 — Records That Must Be Created
The existing lesson flags the 17a-3 vs. 17a-4 distinction (make vs.
keep). Here is what 17a-3 specifically requires a broker-dealer to
create:
Trade blotters: A daily itemized record of every
purchase and sale of securities, showing the security, quantity, price,
time of execution, and the account for which the trade was made
General ledger: Reflects all assets, liabilities,
income, expense, and capital accounts of the firm
Securities record (stock record): For each security
the firm carries, shows the position held, where it is physically or
electronically located, and every customer or entity with an interest
in that position. This is the key record for tracing custody.
Customer account records: Name, address, tax ID,
investment objectives, date the account was opened, and the associated
person responsible for the account
Order tickets (memoranda): For every order received,
the terms of the order, time of entry and execution, the account, and
the registered representative who handled it
These records must be created at or near the time of the event they
document. They form the foundation that Rule 17a-4 then requires the
firm to preserve for specified periods.
FINRA Rule 11880 — Syndicate Settlement Mechanics
The 90-day settlement window is the headline, but the exam tests
the operational details underneath it:
What Starts the Clock
The syndicate settlement date is the date on which
securities are delivered by the syndicate to the purchasers. This is
distinct from the pricing date or the trade date. The 90-day final
settlement period runs from this delivery date.
Interim Payments
While final settlement may take up to 90 days, the syndicate manager
must remit at least 70% of the gross amount due to
each syndicate member within a reasonable time. This ensures members
receive the bulk of their compensation promptly while the manager
reconciles expenses.
Itemized Expense Statement
No later than the date of final settlement, the syndicate manager
must provide each member an itemized statement of syndicate
expenses. This includes how the gross spread was allocated
among management fees, underwriting fees, selling concessions, and
shared expenses (legal, printing, FINRA filing fees). If actual
expenses were lower than originally estimated, the difference must be
redistributed to members.
Post-Offering Prospectus Delivery
SEC Rule 172 — Access Equals Delivery
For most registered offerings, SEC Rule 172 provides that a
broker-dealer satisfies its final-prospectus delivery obligation if
the final prospectus has been filed with the SEC. The logic:
investors can access the filed prospectus on EDGAR, so
physical delivery is not required.
Key exclusion: Rule 172 does not apply to
offerings of investment companies registered under the Investment
Company Act of 1940 (other than registered closed-end funds). Mutual
fund prospectuses must still be physically delivered.
SEC Rule 174 — Aftermarket Delivery Periods
When access-equals-delivery does not fully apply, broker-dealers
must deliver a prospectus for aftermarket trades during specific
windows:
25 days: IPO securities that, as of the offering
date, will be listed on a registered national securities exchange or
authorized for inclusion in an electronic inter-dealer quotation
system (e.g., Nasdaq)
40 days: IPO securities that will not be
listed on an exchange or authorized for Nasdaq inclusion
90 days: Securities of issuers that are not
subject to Exchange Act reporting requirements
0 days (no delivery required): Securities of
issuers that were already Exchange Act reporting companies before the
offering (follow-on offerings by seasoned issuers)
FWP Retention and Closing Deliverables
Rule 433(g) — Free Writing Prospectus Retention
If an issuer or offering participant uses a free writing prospectus
(FWP) that is not required to be filed with the SEC, it must
still be retained for three years from the date of
the initial bona fide offering of the securities. This ensures a
regulatory trail even for FWPs that were never publicly filed.
Key Closing Deliverables in the Deal File
Beyond the standard documents (underwriting agreement, prospectus
versions, AAU), the post-closing deal file should include:
Comfort letters: Delivered by the issuer's
independent auditor at signing and again at closing (bring-down)
10b-5 letters: Negative assurance letters from
issuer's counsel and underwriter's counsel
Officers' certificates: Certifying accuracy of
representations and no material adverse changes since the filing
Blue sky memorandum: State-by-state registration
and exemption analysis for the offering
Legal opinions: Regarding valid issuance of
securities, tax treatment, and enforceability of agreements
FINRA Rule 4511 — The Umbrella Recordkeeping Obligation
FINRA Rule 4511 is the general recordkeeping rule that sits above
the specific SEC requirements. It requires every FINRA member firm to
make and preserve books, accounts, records, documents,
and memoranda as required by:
FINRA rules (including syndicate settlement records under Rule 11880)
The Securities Exchange Act of 1934 and rules thereunder
(including SEC Rules 17a-3 and 17a-4)
Think of Rule 4511 as the enforcement wrapper: even if a firm
complies with every SEC record-creation and retention rule, it must
also satisfy any additional FINRA-specific requirements.
Rule 4511 is the rule FINRA cites when examining a firm's overall
recordkeeping program.
Interactive sorter
Match the record to its retention window
Ten document types every investment banker encounters. Drag each to its required retention period under Rule 17a-4 — or tap to select, then tap a zone. Fifth and final sorter in the course.
Lifetime of firm
Structural / registration records
6 years
Customer account & accounting core
3 years
Most operational records
Not required
Non-business records
Document types — 10 total
Form BD (Uniform Application for Broker-Dealer Registration)
Firm articles of incorporation and partnership agreements
Customer account records after account closure
General ledger, trial balances, and blotters of original entry
Advertising and marketing materials distributed to prospects
Principal supervisory review records
Banker’s personal weekend text messages with no business content
Early-draft internal brainstorms superseded before any client delivery or business decision
All ten placed. The matching rule: who the record is about drives the retention period. Records about the firm itself (charter, registration) → lifetime. Records about customers and accounting core → 6 years. Operational records (comms, trades, ads) → 3 years. Personal non-business material → not required. “Business content” is the magic phrase — it converts a personal text into a regulated record.
Concept Check
Under FINRA Rule 11880, syndicate accounts must be settled within how many days?
FINRA Rule 11880 requires syndicate accounts to be settled within 90 days of the syndicate settlement date. The managing underwriter must provide detailed written statements to all syndicate members.
Concept Check
Under SEC Rule 17a-4, general ledgers and trade blotters must be preserved for:
General ledgers, trade blotters, and customer account records must be preserved for 6 years, with the first 2 years in an easily accessible location. Communications and memos have a 3-year retention requirement.
Concept Check
SEC Rule 17a-3 governs:
17a-3 = records to MAKE. 17a-4 = records to KEEP (and how long). The exam tests whether you know which rule governs creation vs. preservation.
Concept Check
Electronic records must be stored in a format that is:
Under the SEC's amended Rule 17a-4 (compliance date May 3, 2023), broker-dealers may preserve electronic records using either WORM (Write Once, Read Many — non-rewriteable, non-erasable) format, or an electronic recordkeeping system that maintains a complete time-stamped audit trail permitting recreation of the original record if it is modified or deleted. The October 12, 2022 amendments added the audit-trail alternative to modernize the rule for current technology. WORM remains a permitted option for firms that wish to continue using it.
Concept Check
Under FINRA Rule 4511, firms must maintain books and records as required by:
FINRA Rule 4511 is the general books and records requirement. Firms must keep records as required by FINRA rules and the Exchange Act. The specific creation and retention requirements come from SEC Rules 17a-3 and 17a-4.
Concept Check
Under SEC Rule 17a-3, the securities record (stock record) must show which of the following for each security the firm carries?
The securities record (stock record) required by SEC Rule 17a-3 must show each security position, where those securities are located, and all persons with an interest in the position. This allows regulators to trace custody and ownership. Aggregate valuations, spread data, and counterparty lists serve other functions but are not the securities record.
Concept Check
Under FINRA Rule 11880, what event marks the syndicate settlement date from which the 90-day final settlement period is measured?
The syndicate settlement date under FINRA Rule 11880 is the date securities are delivered to purchasers. It is not the effective date, the signing date, or the prospectus filing date. The 90-day window for completing final settlement and providing the itemized expense statement runs from this delivery date. Confusing the delivery date with the pricing or effective date is a common exam trap because those events can occur days or weeks apart.
Concept Check
The access-equals-delivery framework under SEC Rule 172 simplifies prospectus delivery for most registered offerings. Which type of offering is excluded from this framework?
Rule 172 excludes offerings of investment companies registered under the 1940 Act (other than registered closed-end funds). This means mutual fund prospectuses must still be physically delivered to investors. The rule applies to most other registered offerings, including WKSIs filing on Form S-3, shelf takedowns under Rule 415, and exchange-listed IPOs, because their final prospectuses are accessible on EDGAR.
Concept Check
An offering participant uses a free writing prospectus that is not required to be filed with the SEC. Under Securities Act Rule 433(g), how long must this FWP be retained?
Rule 433(g) requires retention of unfiled FWPs for three years from the initial bona fide offering date. The six-year period is the retention window under SEC Rule 17a-4 for records like blotters and ledgers, not for FWPs specifically. The one-year option is too short, and the retention obligation extends well beyond the closing of the offering itself, ensuring a regulatory trail exists for marketing materials used during the distribution.
Concept Check
FINRA Rule 4511 requires member firms to make and preserve books and records as required by which of the following?
FINRA Rule 4511 is the umbrella recordkeeping rule. It requires member firms to make and preserve records as required by both FINRA rules and the Exchange Act, which includes SEC Rules 17a-3 and 17a-4. It is not limited to the Securities Act of 1933, and it encompasses SEC requirements rather than operating separately from them. SOX and PCAOB standards apply to auditors of public companies, not to broker-dealer recordkeeping obligations.