U.S. Registered Investment Adviser (RIA) Registration and Compliance Guide | RGYS · mtl8.com

This guide explains how to assess SEC or state registration for U.S. securities-advisory activity, prepare Form ADV filings through IARD, and establish governance, disclosure, and ongoing compliance proportionate to the business. Thresholds, exemptions, fees, and personnel requirements must be verified against the actual activities and current state rules. Registration is not SEC endorsement of an investment strategy or a guarantee of commercial success.

1. RIA Definition, Regulators, and Scope

The Investment Advisers Act of 1940 generally defines an investment adviser to include a person or company that, for compensation, is in the business of providing advice about securities. Whether a business falls within the definition depends on its services, compensation, and conduct—not labels such as “financial planning,” “software platform,” or “research.” A person within the definition generally must register with the SEC or state securities regulators unless an exclusion or exemption applies. [1]

RIA registration does not replace broker-dealer, banking, insurance, or commodity-related permissions. Brokerage, insurance sales, or commodity advisory activity may trigger separate federal or state regimes. Where activities overlap, analyze each separately. FINRA primarily regulates its broker-dealer members and associated persons; it is not a universal self-regulatory authority for all RIAs. [1][5]

2. SEC Versus State Registration and RAUM Thresholds

The registration path depends primarily on regulatory assets under management (RAUM), principal office and place of business, and the adviser’s activities. Generally, advisers with more than $110 million in RAUM must register with the SEC; SEC registration is generally permitted at $100 million; and advisers below $100 million are generally prohibited from SEC registration unless an exception applies. Mid-sized advisers with $25 million to $100 million must also determine whether their home state requires registration and examines advisers. Specific state circumstances, including New York, may affect the outcome. The $100 million and $110 million levels are not a single cut-off. [1]

Advisers below $25 million generally register in relevant states, where client-count, place-of-business, and activity rules can determine requirements. SEC materials also state that an SEC adviser generally may need to withdraw when RAUM falls below $90 million, subject to exceptions. Other exceptions involve registered investment company advisers, advisers required to register in multiple states, and certain related advisers. Reassess status with the annual Form ADV update and check current SEC and state rules. [1][2]

4. Advisory Entity, Governance, and Control Persons

The registrant should generally be the legal entity that actually provides advisory services and bears contractual responsibility. Choosing a corporation, LLC, or partnership requires analysis of ownership, tax, liability, fund structure, client contracts, and state law; there is no single formation state or statutory capital plan that fits every applicant. Entity name, principal office, branch locations, and business model should align across Form ADV and client documents. [1][2]

Form ADV requires information about ownership, control, and related persons. New owners or investors, a change of control, reorganization, or material business change may require an amendment, state notice, contract review, or reassessment of registration status. Conduct background checks on principals and compliance leadership and document authority, signing powers, conflict escalation, and recordkeeping responsibilities. [2][3]

5. Key Personnel, CCO, and IAR Qualification

SEC rules require an SEC-registered adviser to designate a chief compliance officer responsible for administering its compliance policies and procedures. The adviser should provide authority, information, and resources proportionate to its risks, but federal rules do not prescribe a fixed headcount or require every RIA to hire a full-time external compliance officer. [4]

Investment adviser representative (IAR) registration is distinct from firm registration. Series 65 is normally a prerequisite for state IAR registration; Series 7 plus Series 66 or a state-recognized professional designation may qualify in certain circumstances. Passing an exam alone is not a license: a state may also require Form U4, background review, fees, or other conditions. State representative registration may remain relevant even for an SEC-registered firm, depending on the individual's business location and states served. [6]

6. Form ADV, IARD Filing, and Application Steps

Applicants file Form ADV through IARD. Part 1A contains regulatory and business information; Part 2A is the client brochure; Part 2B supplements information about certain supervised persons. Form CRS and other reports may also apply. Filings should accurately describe services, client types, fees, custody, affiliated activities, disciplinary history, control persons, and branch offices. The advisory entity generally applies for SEC registration, while state registrations follow the applicable state process. [2][3]

A practical sequence is to determine the registration or exemption path and state footprint, establish entity and personnel arrangements, prepare compliance policies, agreements, and disclosures, arrange IARD access and filing funds, submit, and respond to regulator questions. The SEC has 45 days after receiving a complete, properly filed initial application to grant registration or begin proceedings to deny it. An incomplete or unclear application may be returned; resubmission starts a new 45-day period. This statutory review period is not a promise of approval. [2]

7. Compliance Program, CCO, and Books and Records

SEC Rule 206(4)-7 requires an SEC-registered adviser to adopt and implement written compliance policies and procedures reasonably designed for its operations, review their adequacy and implementation at least annually, and designate an individual CCO to administer the program. The rule does not impose one handbook template on every firm. Policies should address actual risks such as conflicts, investment process, valuation, trade allocation, fees, personal trading, complaints, advertising, custody, and business continuity. [4]

Advisers must also meet applicable books-and-records requirements. Compliance files should support Form ADV disclosures, client instructions, agreements and billing, trading and allocation, marketing, communications, review findings, complaints, and remediation. Electronic systems should preserve retrievable records and guard against unauthorized changes. Record types and retention periods depend on the applicable rule; document annual reviews so they can be evidenced to governance bodies and examiners. [3][4][8]

8. Client Agreements, Fees, and Conflicts

Client agreements should clearly describe the scope of services, investment authority, fees and calculation method, termination, account restrictions, proxy voting, conflicts, and applicable disclosures. Asset-based, flat, hourly, or performance fees must be assessed against client type, adviser status, and relevant federal and state requirements; performance fees may be subject to qualified-client and other conditions. Industry custom alone does not establish that a fee arrangement is compliant. [1][5]

Advisers should identify conflicts between client interests and their compensation, affiliated products, soft-dollar arrangements, referrals, trade allocation, or personal investments. Material conflicts must be fairly and fully disclosed in a way clients can understand, and some may need to be limited or eliminated. Form CRS may apply to retail relationships of SEC-registered advisers. Agreements, Form ADV disclosures, and actual practices should remain consistent. [2][5]

9. Custody and Safeguarding Client Assets

Custody is not limited to physically holding cash or securities; it can arise from authority to withdraw client assets, including certain powers, signatory rights, or trustee arrangements. The SEC custody rule generally requires client assets to be maintained with a qualified custodian and may require client statements, an independent surprise examination, or audited pooled-vehicle financial statements, depending on the facts and available exceptions. Analyze Rule 206(4)-2 for each arrangement. [7]

A digital asset’s legal treatment cannot be determined solely by whether a platform labels a wallet custodial or non-custodial. SEC staff materials discuss private-key control, irreversible transfers, non-DVP settlement, and asset records, but are staff views and discussion—not a general exemption or final classification of every token. Assess whether an asset is client funds or securities, who controls it, qualified-custodian eligibility, and applicable safeguarding and recordkeeping duties. [7][10]

10. Marketing, Performance, and Testimonials

SEC Marketing Rule 206(4)-1 applies to advertisements disseminated by SEC-registered or required-to-register advisers. Advertisements must not contain material misstatements or omissions, unsupported material claims, unbalanced performance presentations, or omitted material risks. Testimonials, endorsements, third-party ratings, and performance information may be used only when applicable disclosure, oversight, written-agreement, and presentation conditions are met. [8]

Performance materials should use fair, balanced, verifiable methods and retain supporting calculations. Additional conditions apply to hypothetical performance, gross and net returns, extracted results, and predecessor performance. State-registered advisers should also check state advertising rules. Social media, websites, pitch decks, sales emails, and compensated referrals belong in the compliance review process. [8]

11. KYC, AML, and Sanctions Screening

FinCEN postponed the effective date of the AML/CFT program and suspicious activity reporting rule for covered registered investment advisers and exempt reporting advisers from January 1, 2026 to January 1, 2028. The adviser-specific rule should therefore not be described as generally effective in 2026. During the delay, assess other existing federal or state obligations, sanctions restrictions, bank or custodian requirements, and contractual commitments that may apply. [9]

Risk assessment, customer and source-of-funds understanding, escalation of unusual activity, sanctions screening, and recordkeeping may still be required by other applicable laws, counterparties, or contracts. Identify which entities and activities are regulated financial institutions, distinguish the adviser’s duties from those of banks, broker-dealers, or funds, and plan systems, owners, training, and reporting processes for the scheduled 2028 requirements. [9]

12. Technology, Cybersecurity, and Business Continuity

An RIA should assess cybersecurity and operational risks based on client information, trading authority, custody interfaces, and outsourcing. Establish workable responsibilities and procedures for access control, employee departures, vendor diligence, encryption and backups, incident response, business continuity, disaster recovery, and client communications. Requirements vary by adviser category, state law, and facts; no single industry framework should be presented as a universal SEC licensing condition. [3][4]

Firms using robo-advice, cloud services, algorithmic trading, or digital-asset infrastructure should test governance of algorithms, model changes, data quality, access, cyber incidents, key protection, and third-party continuity. Outsourcing does not automatically transfer the adviser’s duties concerning services, disclosures, or oversight. Document vendor scope, access, incident notification, and exit arrangements. [4][10]

13. Annual Updates, Reports, and Examinations

SEC- and state-registered advisers generally file an annual updating amendment to Form ADV within 90 days after fiscal year end; material changes may require other amendments sooner. SEC advisers should also check applicable brochure delivery, Form CRS, Form PF (if applicable), records, fees, and state notice filings. Reassess registration status annually using current RAUM and business facts rather than carrying forward last year’s conclusion. [2][3]

Examinations may cover filing accuracy, compliance policies, client agreements, fees, custody, marketing, trading, conflicts, and records. Maintain a centralized document inventory, designate regulator contacts, preserve original records, and track remediation with owners and deadlines. Examination timing, scope, and outcomes depend on regulator priorities and case-specific risks; no one can guarantee the firm will avoid an examination or receive a particular result. [2][4]

14. Tax, Cross-Border Business, and Digital-Asset Boundaries

U.S. entity tax classification, federal and state income tax, payroll tax, fund tax, and client reporting should be assessed alongside the legal structure and business model. Advising U.S. clients, maintaining a U.S. place of business, or having U.S. personnel perform activities may affect federal and state registration analyses; foreign status does not automatically exclude U.S. law. Also review privacy, cross-border data, solicitation, governing law, and overseas representative activity. [1]

Whether digital-asset advice triggers the RIA regime depends on whether it concerns securities and how the adviser definition, exclusions, and exemptions apply to the facts. Digital-asset trading, custody, money transmission, commodity derivatives, or brokerage may separately trigger other regimes. A state MTL, New York BitLicense, or other money-transmission authorization does not replace RIA registration; RIA registration does not authorize money transmission or digital-asset exchange activity. [1][10]

15. Acquisitions, Sales, Change of Control, and Exit

Before acquiring an RIA business, review registration status, Form ADV and amendment history, examinations and disciplinary records, client agreements and assignment/termination provisions, fees and refunds, custody, complaints, compliance issues, personnel registrations, intellectual property, data, insurance, and affiliate transactions. Asset and equity purchases can have different registration consequences; client relationships and contracts are not freely transferable assets by default. Analyze assignment and change-of-control issues under the Advisers Act, contract terms, and applicable state law, including any client consent, notice, or new-agreement requirements. [2][3][5]

Before signing, map Form ADV updates, control-person disclosures, state pre-approval or notice, IARD or other filings, client notices and consent, custodian changes, employee and IAR registration, and post-closing responsibilities. SEC or state adviser registration is not a generic license that can be sold independently of the adviser and regulatory process; do not assume the target’s registration automatically covers a buyer’s new entity or business. On exit, follow applicable withdrawal or final-report procedures and preserve client assets, records, and outstanding obligations. [2][3]