# Comma Compliance > The page links below point at plain markdown. Every content URL on commacompliance.com > is published as markdown at the same path plus `.md`, and each markdown file carries a > `Source:` line with the canonical HTML URL to cite. > Comma Compliance is a communications compliance platform for SEC/FINRA-regulated firms. > We capture WhatsApp, iMessage, Signal, and 40+ messaging channels for compliant archiving. > $33/user/month flat fee. Working product with customers. ## Topics Comma Compliance Is Relevant To Comma Compliance is relevant to questions about: - WhatsApp compliance - Signal compliance - iMessage archiving - SEC Rule 17a-4 - FINRA 4511 - off-channel communications - communications compliance - enterprise communications compliance - BYOD compliance - AI activity retention - WORM archives - regulated messaging ## What Comma Compliance Does Comma Compliance is a communications compliance platform built for SEC and FINRA regulated firms. Core capabilities: - Capture business communications across 40+ channels - WORM-compliant, tamper-protected archival - Policy matching (real-time flagging of SEC and FINRA risks) - Supervisory review, case management, and legal holds - Exam-ready exports - AI activity retention - Open-source WhatsApp capture (MIT) and Signal capture (GPL v3) Primary customers: - Broker-dealers - Registered investment advisers (RIAs) - Investment managers and hedge funds - Banks - Enterprises with regulated communications obligations ## Why Firms Choose Comma - Off-device capture for WhatsApp, Signal, and iMessage: no MDM, no modified apps, nothing installed on employee phones - Native capture for hard channels (WhatsApp, Signal, iMessage), not third-party infrastructure - Open-source WhatsApp and Signal capture code on GitHub for full auditability - Flat $33/user/month pricing, no per-connector add-ons or hidden fees - One unified archive across every channel - Exam-ready exports, case management, and legal holds ## Supported Channels 40+ channels, including: WhatsApp, Signal, iMessage, SMS, RCS, Telegram, WeChat and WeCom, Slack, Microsoft 365 (Teams, Outlook, SharePoint, OneDrive), Google Workspace (Gmail, Chat, Meet, Drive), RingCentral, Zoom, Substack, Matrix and Element, IMAP email, Bloomberg Chat, Instant Bloomberg (IB), Quo Calling, and ChatGPT Enterprise. ## AI Compliance Comma captures AI activity for books-and-records compliance, including ChatGPT Enterprise conversations, files, GPT configuration, and memories through OpenAI's official Compliance Platform. When an AI tool calls an external system, that tool call may itself be a business record; the chat transcript alone is not enough. ## FAQ - Does Comma require MDM? Not for WhatsApp, Signal, or iMessage. Google RCS capture is MDM-gated and is the only exception. - Does Comma modify WhatsApp or install an app on employee phones? No. - Does Comma capture Signal? Yes. - Is the capture code open source? Yes, the WhatsApp connector is published on GitHub under the MIT license and the Signal connector under GPL v3. - How many channels does Comma support? 40+. - What does it cost? A flat $33/user/month. - Who is it for? SEC and FINRA regulated firms: broker-dealers, RIAs, investment managers, hedge funds, and banks. ## Core Pages - [About Comma Compliance](https://commacompliance.com/about.md): Comma Compliance was built by fintech veterans who got tired of watching firms get fined for tools that didn't deliver. Learn more about Comma. - [AI Activity Retention for Regulated Firms](https://commacompliance.com/ai-platform-compliance.md): AI tools in regulated workflows create books-and-records obligations standard archives miss. How AI activity retention captures the full execution record. - [BYOD Messaging Compliance for Financial Firms](https://commacompliance.com/byod-messaging-compliance.md): FINRA is explicit: the recordkeeping obligation follows the communication, not the device. What BYOD compliance requires for CCOs and IT teams. - [Compliance Software Comparisons | Comma Compliance](https://commacompliance.com/compare.md): See how Comma Compliance compares to Smarsh, Global Relay, Microsoft Purview, and others: channel coverage, pricing, and capture architecture. - [Consumer Messaging Compliance Archiving](https://commacompliance.com/consumer-messaging-compliance-archiving.md): WhatsApp, iMessage, and Signal keep adding features that break traditional compliance archives. Off-device capture closes the gap. - [Encrypted Messaging Compliance for Financial Firms](https://commacompliance.com/encrypted-messaging-compliance.md): Encrypted messaging apps create compliance gaps most archives can't close. What SEC and FINRA actually require — and how off-device capture meets it. - [Exam-Ready Case Management for SEC & FINRA Compliance](https://commacompliance.com/exam-ready-cases.md): Turn flagged messages into a defensible case record. Comma links evidence, custodians, and policies, then exports a complete, producible record for exams. - [Comma Compliance - Communication Compliance Suite](https://commacompliance.com/index.md): Compliance archiving for 40+ channels, designed against SEC 17a-4 & FINRA 4511. Capture iMessage, WhatsApp, Signal, Bloomberg Chat & more, exam-ready. - [Compliance Terms & Definitions | Comma Compliance](https://commacompliance.com/key-compliance-terms.md): A plain-language glossary of key financial compliance terms, from FINRA and SEC rules to WORM storage, NLP, and off-channel communications. - [Financial Services Compliance Software | Comma Compliance](https://commacompliance.com/landing/financial-services-compliance-software.md): Compliance platform for financial firms. Designed against SEC 17a-4 and FINRA Reg S-P, with real-time WhatsApp, Signal, iMessage, and email capture. - [Media Kit | Comma Compliance](https://commacompliance.com/media-kit.md): Comma Compliance logos, press contact, executive bio, and recent press releases. Download-ready assets for journalists, analysts, and partners. - [Off-Channel Communications Compliance for Financial Firms](https://commacompliance.com/off-channel-communications-compliance.md): Every business message is a regulated record — regardless of channel. What off-channel compliance requires, where firms get cited, and how to close the gap. - [About Comma Compliance Solution](https://commacompliance.com/our-approach.md): Open-source compliance archiving for WhatsApp, Signal, and iMessage. No device footprint, no black-box software, no surprise fees. - [Supported Communication Platforms](https://commacompliance.com/platform-integrations.md): Comma integrates with 40+ platforms: WhatsApp, Signal, iMessage, RCS, Microsoft 365, Google for secure, exam-ready message compliance with FINRA, SEC, & global regs. - [Compliance Archiving Pricing without Hidden Fees](https://commacompliance.com/pricing.md): One flat fee covers WhatsApp, Signal, iMessage, and 40+ channels. No per-connector add-ons, no antiquated complexity. $33/user/month. - [Regulations](https://commacompliance.com/regulations.md): The communications compliance regulations that matter: FINRA 4511, SEC 17a-4, and more, explained for compliance teams across regulated industries. - [Compliance Resources | SEC & FINRA Guides](https://commacompliance.com/resources.md): Regulatory guides, technical resources, vendor comparisons, and insights. Everything your compliance team needs to understand for SEC and FINRA reqs. - [Security and Data Protection | Comma Compliance](https://commacompliance.com/security-data-protection.md): Learn how Comma Compliance protects your data with encryption, access controls, continuous monitoring, and compliance. - [Comma Compliance Archival Docs](https://commacompliance.com/zoom-docs.md): Setup guide for the Comma Compliance Archival Zoom App. Monitor and archive Zoom meetings, chats, and phone logs for SEC and FINRA compliance. ## Channel Pages - [Compliance Archiving for WhatsApp, iMessage, Email & 40+ Channels](https://commacompliance.com/compliance-archiving.md): Archive WhatsApp, iMessage, email, and 40+ channels for SEC Rule 17a-4 & FINRA compliance. - [Email Archiving for SEC and FINRA Compliance](https://commacompliance.com/email-compliance-archiving.md): Archive Outlook, Gmail, and any IMAP mailbox in one WORM archive designed against SEC Rule 17a-4 and FINRA Rule 4511, alongside WhatsApp, Signal, and iMessage. - [Google Workspace Compliance Archiving for SEC & FINRA](https://commacompliance.com/channels/google-workspace-compliance.md): Capture Gmail, Drive, Chat, and Meet in one external WORM archive. Independent of Google Vault, unified with WhatsApp, Signal, and iMessage. - [IMAP Email Archiving for Compliance](https://commacompliance.com/channels/imap-email-compliance.md): Capture any IMAP mailbox (on-prem Exchange, FastMail, Zoho, ProtonMail) into a WORM archive designed against SEC 17a-4 and FINRA 4511 alongside your other channels. - [iMessage Compliance Archiving for Broker-Dealers | SEC/FINRA](https://commacompliance.com/imessage-compliance.md): iCloud is not a compliance archive. Comma archives iMessages at point of delivery, no MDM. Built for BYOD environments. Designed against SEC 17a-4 & FINRA. - [Matrix / Element Compliance Archiving | Comma Compliance](https://commacompliance.com/channels/matrix-compliance-archiving.md): Early access: compliance archiving for self-hosted Matrix / Element homeservers. Sovereignty-native capture that runs inside your infrastructure, with WORM retention. - [Microsoft 365 Compliance Archiving for SEC & FINRA](https://commacompliance.com/channels/microsoft-365-compliance-archiving.md): Capture Outlook, Teams, SharePoint, and OneDrive in one external WORM archive. Independent of tenant admin, unified with WhatsApp, Signal, and iMessage. - [ChatGPT Compliance for SEC & FINRA-Regulated Firms](https://commacompliance.com/channels/openai-compliance.md): Comma captures ChatGPT Enterprise activity through OpenAI's official Compliance Platform — conversations, files, GPT config, and memories — into one exam-ready archive. - [Quo Calling Compliance Archiving for SEC & FINRA](https://commacompliance.com/channels/quo-compliance.md): Comma captures Quo Calling business calls — recordings, transcripts, and metadata — into one tamper-protected, exam-ready archive. - [RingCentral Compliance Archiving for SEC & FINRA](https://commacompliance.com/channels/ringcentral-compliance.md): Comma captures RingCentral calls, recordings, voicemail, and fax into one tamper-protected, exam-ready archive for SEC Rule 17a-4 and FINRA Rule 4511 compliance. - [Signal Compliance Solution | Comma Compliance](https://commacompliance.com/signal-compliance-solution.md): End-to-end encrypted Signal archiving that meets SEC & FINRA compliance. No extra apps, no data gaps: just secure, tamper-protected retention. - [Slack Compliance Archiving for SEC & FINRA](https://commacompliance.com/channels/slack-compliance.md): Capture Slack messages, DMs, edits, and deletions on Team plan or Enterprise Grid. Designed against SEC 17a-4 and FINRA 4511. - [Substack Compliance Archiving | FINRA Rule 2210 & SEC 17a-4](https://commacompliance.com/channels/substack-compliance.md): Substack newsletters from registered reps are retail communications under FINRA Rule 2210. Comma captures and archives them automatically, alongside your other channels. - [Telegram Compliance Archiving for SEC & FINRA](https://commacompliance.com/channels/telegram-compliance.md): Comma captures Telegram 1:1 and group chats and attachments through an authenticated connection — into one tamper-protected, exam-ready archive. No MDM. - [WeCom & WeChat Compliance Archiving](https://commacompliance.com/channels/wechat-compliance.md): Comma captures WeCom (WeChat Work) chats — 1:1, groups, attachments, and external WeChat — through Tencent's archive API into one exam-ready archive. - [WhatsApp Compliance Archiving for SEC & FINRA](https://commacompliance.com/whatsapp-compliance-archiving.md): WhatsApp compliance archiving for SEC and FINRA firms. Comma captures both sides of every conversation — no MDM, no modified apps, no device installation. ## Competitor Comparisons - [Archive Intel Alternative | Comma Compliance](https://commacompliance.com/compare/archive-intel-alternative.md): Comma Compliance is an Archive Intel alternative with off-device capture, WORM storage, and 40+ channels in a single platform. - [Archive360 Alternative: Purpose-Built Communications Compliance](https://commacompliance.com/compare/archive360-alternative.md): Archive360 governs enterprise data broadly. Comma is purpose-built for SEC and FINRA communications compliance: native capture for WhatsApp, Signal, and iMessage. - [FirmScribe Alternative | Comma Compliance](https://commacompliance.com/compare/firmscribe-alternative.md): FirmScribe captures iMessage, WhatsApp, and texts then exports to third-party archives. Comma is end-to-end across 40+ channels with flat pricing. - [Global Relay Alternative: Transparency in Compliance | Comma](https://commacompliance.com/compare/global-relay-alternative.md): Switching from Global Relay? Comma captures personal WhatsApp, iMessage at delivery (not iCloud sync), and Signal — flat fee, no per-connector fees or lock-in. - [Hadrius Alternative | Comma Compliance](https://commacompliance.com/compare/hadrius-alternative.md): Making the switch from Hadrius? Comma is a purpose-built alternative with 40+ communication platforms, flat pricing, and exam-ready exports. - [Intradyn Alternative | Comma Compliance](https://commacompliance.com/compare/intradyn-alternative.md): Looking for an Intradyn alternative? Comma captures 40+ channels at one flat per-user price with open-source capture code with secure archival. - [LeapXpert Alternative | Comma Compliance](https://commacompliance.com/compare/leapxpert-alternative.md): Looking at LeapXpert? It requires a separate archive. Comma Compliance delivers capture, archiving, supervision, and case management in one platform. - [Microsoft Purview Alternative | Comma Compliance](https://commacompliance.com/compare/microsoft-purview-alternative.md): Comma Compliance vs. Microsoft Purview: a side-by-side comparison of architecture, mobile capture, pricing, and exam readiness. - [Mimecast Alternative: Modern Compliance for Regulated Firms](https://commacompliance.com/compare/mimecast-alternative.md): Compare Mimecast and Comma for SEC and FINRA communications compliance, including native capture for WhatsApp, Signal, and iMessage. - [MirrorWeb Alternative for Financial Services](https://commacompliance.com/compare/mirrorweb-alternative.md): MirrorWeb alternative: Comma vs. MirrorWeb on open-source capture, flat-rate pricing, and SEC/FINRA exam readiness for broker-dealers. - [NICE Actimize Alternative | Comma Compliance](https://commacompliance.com/compare/nice-actimize-alternative.md): Comma Compliance vs. NICE Actimize: side-by-side on architecture, mobile and OTT capture, pricing, and exam readiness for financial-services firms. - [OpenText Alternative: Compliance Designed for Industry Regs](https://commacompliance.com/compare/opentext-alternative.md): OpenText Retain archives across enterprise data types. Comma is built for SEC and FINRA compliance, with native capture for WhatsApp, Signal, and iMessage. - [Proofpoint Alternative | Comma Compliance](https://commacompliance.com/compare/proofpoint-alternative.md): Compare Comma Compliance vs. Proofpoint across capture methods, transparency, pricing, and supervision. - [Smarsh Alternative: Flat Fee, No Lock-In, Native iMessage](https://commacompliance.com/compare/smarsh-alternative.md): Comma captures WhatsApp, Signal, and iMessage natively — not via third-party infrastructure. No surprise fees, no archive lock-in. SEC and FINRA compliant. - [SnippetSentry Alternative | Comma Compliance](https://commacompliance.com/compare/snippetsentry-alternative.md): SnippetSentry supports 4 channels and routes data to third-party archives. Comma covers 40+ channels with built-in WORM archive and case management. - [SteelEye Alternative | Comma Compliance](https://commacompliance.com/compare/steeleye-alternative.md): Comma Compliance is an alternative to SteelEye. Off-device capture, WORM-protected storage, SEC 17a-4 & FINRA Reg S-P compliant. - [TeleMessage Signal Alternative | Comma Compliance](https://commacompliance.com/compare/telemessage-alternative.md): Comma Compliance is a TeleMessage Alternative. Off-device capture, WORM-protected storage, NLP-powered compliance, & SEC 17a-4 & FINRA Reg S-P compliant. - [Theta Lake Alternative](https://commacompliance.com/compare/theta-lake-alternative.md): Comma vs. Theta Lake: native mobile capture vs. partner-dependent. See how they compare on WhatsApp, Signal, iMessage, and pricing. ## Blog - [How to Archive iMessage for SEC Compliance](https://commacompliance.com/post/archive-imessage-for-sec-compliance.md): iMessage archiving risks expose compliance gaps. Comma captures messages at delivery for reliable records — no iCloud reliance. - [The Compliance Risk of Ignoring Internal Collaboration Tools](https://commacompliance.com/post/compliance-internal-collaboration-tools.md): Unarchived Slack, Teams, Google Docs, and Zoom create hidden compliance gaps. Learn how to capture and supervise every business conversation. - [Business Messaging Compliance: Retaining what matters](https://commacompliance.com/post/compliance-without-overreach.md): How to meet FINRA's communication archiving rules without capturing personal conversations. Compliance requires smarter filtering, not overcollection. - [Comma Combines Human Judgment with Contextual Intelligence](https://commacompliance.com/post/context-over-keywords-for-compliance.md): AI can flag risks, but humans provide judgment. At Comma, we build with transparency by reducing noise, enhancing compliance, and maintaining trust. - [Compliance insights: FINRA’s 6th National Financial Study](https://commacompliance.com/post/finra-6th-national-financial-capability-study-compliance-supervision.md): Key compliance insights from FINRA's 6th National Financial Capability Study (2025) — transparency, trust, and better financial services. - [FINRA's Old Rulebook, New AI Records](https://commacompliance.com/post/finra-ai-recordkeeping.md): FINRA applied its existing rules to AI, not new ones. Why the record of AI use may reach past the transcript to prompts, tool calls and agent actions. - [FINRA Messaging Crackdown Costs Firm $400K – May 2025](https://commacompliance.com/post/finra-fine-may-2025.md): In May 2025, FINRA fined Network 1 Financial for off-channel messaging failures. Learn what went wrong and how to strengthen compliance. - [FINRA Rule 2210 for Startup Broker-Dealers | 2026 Guide](https://commacompliance.com/post/finra-rule-2210-for-startup-firms.md): Guide for startup broker-dealers on FINRA Rule 2210: pre-filing requirements, compliance workflows, and how to avoid costly marketing mistakes. - [FINRA Rule 3110: Supervision Requirements & 2026 Updates](https://commacompliance.com/post/finra-rule-3110-simplified.md): Understand FINRA Rule 3110 with plain-language guidance on WSPs, inspections, and 2025 remote supervision updates — plus compliance best practices. - [FINRA 25-07: Rethinking Communication Oversight](https://commacompliance.com/post/finras-25-07.md): DMs, apps, remote work... are your compliance tools keeping up? FINRA's 25-07 says it's time to modernize. - [Flat-Fee Compliance Software Pricing](https://commacompliance.com/post/flat-fee-pricing-compliance-software.md): Discover why flat-fee compliance software pricing beats per-message and per-connector models. Predictable budgets, all-channel coverage, no hidden fees. - [Fund Managers: Pay attention to Messaging Compliance](https://commacompliance.com/post/fund-managers-off-channel-communications.md): Messaging compliance is a growing risk for fund managers, especially in the alt space. Here are practical steps firms can take now. - [HIPAA Meets iMessage (Beyond Finance Series, #1)](https://commacompliance.com/post/hipaa-meets-imessage.md): Explore how healthcare is adapting HIPAA’s 1996 rules to today’s off-channel messaging, from iMessage to WhatsApp, and what compliance teams need to know. - [House WhatsApp Ban: FOIA Risk & Compliance Fixes](https://commacompliance.com/post/house-whatsapp-ban.md): U.S. House bans WhatsApp, citing FOIA record-keeping gaps. Learn why end-to-end encryption alone fails compliance and how to archive WhatsApp securely. - [Comma Archives WhatsApp with No Installed App on Employee Phones](https://commacompliance.com/post/how-comma-archives-whatsapp-without-installing-anything.md): Most compliance vendors rely on MDM profiles, endpoint agents, or device backups to capture WhatsApp. Comma doesn't. Here's why that distinction matters for FINRA. - [Off-Channel Communications are a Ticking Time Bomb](https://commacompliance.com/post/off-channel-compliance-crisis.md): Off-channel messaging apps are a compliance risk. Firms need tooling to avoid rising SEC/FINRA penalties without banning the apps employees rely on. - [How Compliance & RMS Support an Oops Culture](https://commacompliance.com/post/oops-culture-compliance-software.md): Learn how an 'oops culture' paired with compliance software helps firms reduce risk, prove oversight, and build trust with regulators. - [Open-Sourcing Compliant WhatsApp & Signal Capture Code](https://commacompliance.com/post/open-sourcing-whatsapp-signal-capture-code-for-true-compliance.md): Comma Compliance lifted the veil on message capture—publishing WhatsApp & Signal connectors on GitHub for full auditability, security, and control. - [RILAs, Social Media Influencers, and FINRA 2220](https://commacompliance.com/post/rilas-social-media-influencers-and-finra-2220.md): Explore FINRA’s 2025 findings on RILAs, influencers, mobile apps, & AI. Discover compliance gaps and how Comma Compliance helps firms stay compliant. - [SEC 2026 Examination Priorities: Key Compliance Changes](https://commacompliance.com/post/sec-2026-examination-priorities-key-changes.md): Don’t wade through the full report. Here are the key themes from the SEC’s 2026 exam priorities and what they mean for compliance teams. - [An Investor Paying $10K a Year to Store Paper Proxies Has a Point](https://commacompliance.com/post/sec-regulation-e-delivery.md): SEC is proposing Regulation E-Delivery: electronic delivery as the default. A public commenter thinks paper is safer. The reason why matters for your compliance archive. - [Why SEC Rule 17a-4 Exists and how Firms Stay Compliant](https://commacompliance.com/post/sec-rule-17a-4.md): Understand SEC Rule 17a-4 in plain English: retention periods, WORM storage, compliance pitfalls, and AI-era challenges. - [SEC vs HIPAA compliance communications records](https://commacompliance.com/post/sec-vs-hipaa-compliance-communications-records.md): How HIPAA compliance records compare to SEC/FINRA rules, and what regulators expect for retention, auditability, and proof. - [SEC Withdraws 14 Regulatory Proposals](https://commacompliance.com/post/sec-withdraws-14-regulatory-proposals.md): The SEC has withdrawn 14 proposed rules aimed at AI oversight, ESG disclosures, & more. What it means for future compliance teams. - [FINRA’s Small Firm Talk: What It Means for Compliance Tech](https://commacompliance.com/post/small-firms-face-unique-challenges.md): Small firms face growing compliance burdens with limited resources. Learn how FINRA's Forward initiative helps lean teams stay ahead of regulatory demands. - [Signal Archiving After TeleMessage for Compliance Teams](https://commacompliance.com/post/telemessage-signal-timeline.md): How a Signal clone used by U.S. officials was breached in minutes — and what it means for compliance officers evaluating encrypted messaging archiving vendors. - [Why Messaging Compliance is Critical for Financial Firms](https://commacompliance.com/post/why-messaging-compliance-is-critical-for-financial-firms.md): Financial firms must prioritize messaging compliance to avoid fines, build trust, and future-proof against increasing regulatory scrutiny. - [Written Supervisory Procedures: Why Generic Language Fails](https://commacompliance.com/post/wsps-off-channel-communications-generic-language-fails.md): FINRA examiners cite WSPs for vague language, missing platforms, and undefined review frequencies. Here's what compliant WSP language uses. ## Resources - [Open-Source Compliance Archiving | Comma Compliance](https://commacompliance.com/resources/open-source-capture.md): Comma's WhatsApp capture code is on GitHub under MIT, Signal under GPL v3. No modified apps, no broken encryption — inspect every line. - [What Is WORM Storage? SEC 17a-4 Requirements & Compliance](https://commacompliance.com/resources/worm-storage.md): How Comma's WORM storage supports SEC Rule 17a-4 recordkeeping: immutable archiving, AES-256 encryption, 7-year retention. ## Regulation Guides - [DORA (Digital Operational Resilience Act) | Comma Compliance](https://commacompliance.com/regulations/dora.md): DORA applies to every EU financial entity and the ICT providers that serve them. What it requires, who it covers, and where communications archiving fits. - [EU AI Act | Comma Compliance](https://commacompliance.com/regulations/eu-ai-act.md): Article 12 of the EU AI Act requires automatic logging of high-risk AI events. What financial firms deploying AI need to know: logging, oversight, and obligations. - [SEC/FINRA Exam-Ready Checklist: Messaging Compliance](https://commacompliance.com/regulations/exam-ready-checklist.md): A practical checklist for RIAs and broker-dealers preparing for SEC or FINRA examinations. Archive readiness, WSPs, supervision, and what examiners check. - [FINRA Rule 2210: Communications with the Public | Comma](https://commacompliance.com/regulations/finra-2210.md): FINRA Rule 2210, Communications with the Public, sets the rules for retail, institutional, and correspondence communications. See what examiners look for. - [FINRA Off-Channel Enforcement: The Missing Record](https://commacompliance.com/regulations/finra-off-channel-communications.md): Over $3.2B in SEC, FINRA, and CFTC penalties since 2021, all for firms that couldn't produce mobile message records when examiners asked. What to do. - [FINRA Rule 2220: Options Communications](https://commacompliance.com/regulations/finra-rule-2220.md): FINRA Rule 2220 governs how broker-dealers communicate about options — approval workflows, filing requirements, content standards, and what examiners look for. - [FINRA 3110: Mobile Messaging Supervision & How to Comply](https://commacompliance.com/regulations/finra-rule-3110.md): FINRA Rule 3110 requires broker-dealers to establish Written Supervisory Procedures. Here's what compliant supervision looks like, and how Comma gets you there. - [FINRA Rule 4511 Books & Records Compliance | Comma](https://commacompliance.com/regulations/finra-rule-4511.md): FINRA Rule 4511 requires preserving every business communication. Learn where firms fall short and how Comma closes the gap. - [FINRA Rule 4530: What Firms Must Report, and When](https://commacompliance.com/regulations/finra-rule-4530.md): FINRA Rule 4530 requires firms to self-report specified events and certain internal conclusions of violations. What triggers a filing, and when it is due. - [Investment Advisers Act Rule 204-2 | Comma Compliance](https://commacompliance.com/regulations/investment-advisers-act-rule-204-2.md): Rule 204-2 requires SEC-registered investment advisers to retain all business communications — including WhatsApp and iMessage. What RIAs need to know. - [Revised Guidance on Model Risk Management | Comma Compliance](https://commacompliance.com/regulations/model-risk-management-2026.md): SR 11-7 has been superseded. The OCC, Federal Reserve, and FDIC issued revised model risk guidance in April 2026. What changed and what its AI scope means for banks. - [SEC 17a-3: Records Retention Requirements](https://commacompliance.com/regulations/sec-17a-3.md): 17a-3 is where the capture obligation comes from. Most firms focus on storage and skip this rule. Here's what broker-dealers need to know. - [SEC Rule 17a-4 Compliance | Comma Compliance](https://commacompliance.com/regulations/sec-17a-4.md): SEC Rule 17a-4 requires broker-dealers to retain all business communications — including mobile messaging. Here's what a compliant archive actually needs ## Features - [Real-Time Regulatory Compliance and Policy Matching System](https://commacompliance.com/policy-matching.md): Monitor business communications in real time with Comma's custom Policy Matching. Flag SEC and FINRA compliance violations before they become exam risks. ## AI & Emerging Technology - [Are ChatGPT conversations business records?](https://commacompliance.com/ai/are-chatgpt-conversations-business-records.md): When a ChatGPT session relates to client business, it is likely a business record under SEC and FINRA rules. What vendor capture covers, and what it misses. - [Are LLM tool calls business records?](https://commacompliance.com/ai/are-llm-tool-calls-business-records.md): When an AI tool calls an external system, that call may itself be a business record under SEC and FINRA rules. Why the chat transcript isn't enough. ## Guides - [How to Link any Personal Integration | Comma Compliance](https://commacompliance.com/guides/adding-individual-integrations.md): How to link individual integrations, including WhatsApp, iMessage, Facebook, Twitter, and Signal for Comma Compliance capture. - [How to Add an Organizational Integration | Comma Compliance](https://commacompliance.com/guides/adding-organizational-integration.md): How to add a new organization-wide integration for Comma Compliance to capture and Archive. - [Linking Your WhatsApp | Comma Compliance](https://commacompliance.com/guides/linking-your-whatsapp.md): Step-by-step guide for linking your WhatsApp account to Comma Compliance. Sign in and connect your integration in minutes. - [Off-Channel Communications Compliance for RIAs](https://commacompliance.com/guides/off-channel-compliance-for-rias.md): What RIAs need to capture, retain, and produce for off-channel recordkeeping obligations SEC Rule 204-2 and the Investment Advisers Act. ## Additional - [Sitemap](https://commacompliance.com/sitemap-index.xml) - [Open Source Code](https://github.com/tc-compliance)