Compliance decisions
When are AI prompts FINRA business records?
Do not classify an AI conversation solely by the tool that created it. Determine whether its content or use makes it a record required under applicable FINRA or Exchange Act rules. Rule 4511’s six-year fallback applies to required FINRA records with no other specified period, not automatically to every prompt.
For Broker-dealer records officers, compliance teams and security architects
Preserve the required evidence in the appropriate records system, not just a chat history.
General decision logic plus synthetic business examples. No actual record determination, archive validation or litigation hold is represented.01
Identify the business activity and record requirement
Rule 4511 requires member firms to make and preserve books and records required by FINRA rules, the Exchange Act and applicable Exchange Act rules. Start with the business activity and the information it produces. A sent customer communication, supervisory review or transaction-related record can raise different requirements.
An AI thread may contain several record types alongside irrelevant working material. Identify which parts influenced or evidence the business activity and have the appropriate records or compliance owner determine the governing requirement. A label such as draft or private chat does not itself settle the classification.
Source context: FINRA Rule 4511: General requirements · FINRA Regulatory Notice 24-09
02
Separate working context from required evidence
The fictional cases below distinguish a generic public-source question from a draft that becomes a client communication and a conversation used in a supervisory decision. They are classification prompts, not blanket rulings that every draft must be retained or that all unfinished drafts can be deleted.
Record the relationship between input, output, final communication and material review evidence where relevant. Avoid keeping unnecessary personal information merely because a transcript export is convenient, but do not remove relevant context before the responsible owner resolves a preservation requirement.
Source context: FINRA Rule 4511: General requirements
03
Apply the specified period before the fallback
Rule 4511(b) sets at least six years for FINRA books and records where FINRA or applicable Exchange Act rules do not specify a period. Its scope is required records. It is not a universal six-year period for all AI activity, all security logs or all drafts.
Identify the actual record rule, period and any preservation obligation for each category. Keep that decision with the archive handoff. A vendor’s available chat retention setting does not establish the firm’s required period and may not provide the format, accessibility or other controls the record needs.
Source context: FINRA Rule 4511: General requirements
04
Hand the record to the appropriate archive
Rule 4511(c) points to Exchange Act Rule 17a-4 for required format and media. Confirm the applicable requirements with the records owner and archive provider. A downloaded PDF, screenshot or SIEM event does not become a compliant books-and-records system simply because it is retained.
Include the relevant identity, time, business category, source references and final status in the handoff. Test retrieval and the link to supporting material using synthetic cases. Do not invent an archive validation result or claim that Aona supplies the firm’s required records repository.
Source context: FINRA Rule 4511: General requirements
05
Review deletion separately from preservation
Before routine deletion, check whether litigation, investigation or another applicable obligation requires preservation of particular material. That decision is separate from a platform’s default conversation lifecycle. A retention policy should tell staff how to raise uncertainty rather than letting them make an irreversible decision from the word draft.
Keep the classification record concise and review it when the AI feature or business use changes. The goal is justified preservation and reliable retrieval of required evidence, not indiscriminate collection of every employee interaction.
Source context: FINRA Rule 4511: General requirements
Put it into practice
AI record-classification branch map
Use explicit yes, no and unknown outcomes to reach the retention and archive decision. Separate fictional business cases are included in the download.
General decision logic plus synthetic business examples. No actual record determination, archive validation or litigation hold is represented.
Record required?
Yes: identify the rule. No: check other duties. Unknown: escalate.
Period specified?
Use it; apply the six-year fallback only where its conditions hold.
Archive ready?
Resolve format, media and required context.
Preservation issue?
Resolve before routine disposal.
| Question | Finding | Next outcome |
|---|---|---|
| Does a FINRA or applicable Exchange Act record requirement apply? | Yes | Identify the exact required record and governing rule. |
| Does a record requirement apply? | No under the assessed rule | Check other applicable retention or preservation duties; do not infer all deletion is permitted. |
| Does a record requirement apply? | Unknown | Escalate classification before deleting potentially relevant material. |
| Is a retention period specified by the applicable rules? | Yes | Use that specified period for the identified record. |
| Is it a required FINRA record with no specified period? | Yes | Apply Rule 4511(b)’s at-least-six-year fallback. |
| Are format, media and archive requirements established? | No or unknown | Resolve the Rule 17a-4 handoff with the records team; a chat export is not enough. |
| Is a separate preservation obligation relevant? | Yes or unknown | Resolve that obligation before routine disposal. |
| Are classification, period and archive handoff established? | Yes | Preserve and retrieve the required evidence under the documented process. |
Work through your review
Use the checks to organise the evidence you need. Your selections stay in this tab.
0 of 3 reviewed
Example files for this task
Keep the source material and the instructions together. You can also download the complete worksheet or matrix as CSV.
finra-ai-record-classification.mdInspect
# AI record-classification branch map
General decision logic plus synthetic business examples. No actual record determination, archive validation or litigation hold is represented.
Use explicit yes, no and unknown outcomes to reach the retention and archive decision. Separate fictional business cases are included in the download.
| Question | Finding | Next outcome |
| --- | --- | --- |
| Does a FINRA or applicable Exchange Act record requirement apply? | Yes | Identify the exact required record and governing rule. |
| Does a record requirement apply? | No under the assessed rule | Check other applicable retention or preservation duties; do not infer all deletion is permitted. |
| Does a record requirement apply? | Unknown | Escalate classification before deleting potentially relevant material. |
| Is a retention period specified by the applicable rules? | Yes | Use that specified period for the identified record. |
| Is it a required FINRA record with no specified period? | Yes | Apply Rule 4511(b)’s at-least-six-year fallback. |
| Are format, media and archive requirements established? | No or unknown | Resolve the Rule 17a-4 handoff with the records team; a chat export is not enough. |
| Is a separate preservation obligation relevant? | Yes or unknown | Resolve that obligation before routine disposal. |
| Are classification, period and archive handoff established? | Yes | Preserve and retrieve the required evidence under the documented process. |
## Review steps
- Identify the actual record rule: Tie classification to business content and use, not only the app, file type or draft label.
- Document the period and basis: Distinguish a specified period from the Rule 4511 fallback and any separate preservation obligation.
- Verify the archive handoff: Map required context, identity, retrieval, format and media with the responsible records team.
## Separate fictional classification cases
| Situation | Classification question | Next outcome |
| --- | --- | --- |
| Generic question about a public definition | Was it merely reference material, or used as evidence of a regulated business activity? | Records owner determines whether any record requirement applies; do not classify by tool alone. |
| AI draft later sent to a customer | What communication record and material review evidence are required? | Preserve the applicable final communication and supporting record under the relevant rule. |
| AI summary used in supervisory review | Which review decision, source material and findings must be evidenced? | Link required supervisory evidence to the appropriate records process. |
| Unsent draft contains material decision context | Does the actual rule or preservation duty require this context? | Resolve before deletion; “draft” alone is not a decision. |
| Required FINRA record with a specified period | Which FINRA or Exchange Act period applies? | Use the applicable specified period. |
| Required FINRA record with no specified period | Does Rule 4511(b)’s fallback apply? | Apply at least six years where the fallback conditions are met. |
| Format, media or preservation uncertain | Are archive requirements or a specific preservation obligation unresolved? | Escalate to the records/legal owner; do not claim a normal chat export resolves them. |
## Synthetic handoff record
Reference: TEST-RECORD-01
Activity: fictional customer communication
Draft: TEST-DRAFT-01
Final communication: TEST-FINAL-01, not sent
Review: fictional role and check, no actual approval
Archive validation: not run
Apply the actual record rule before assigning retention. No real archive or preservation order is represented.
## Source and scope
Guide: https://aona.ai/resources/guides/ai-prompts-business-records-finra/
Source check: 21 September 2026. General information, not professional approval or a completed control test.
- FINRA Rule 4511: General requirements: https://www.finra.org/rules-guidance/rulebooks/finra-rules/4511
- FINRA Regulatory Notice 24-09: https://www.finra.org/rules-guidance/notices/24-09
finra-ai-record-classification.csvInspect
Question,Finding,Next outcome
Does a FINRA or applicable Exchange Act record requirement apply?,Yes,Identify the exact required record and governing rule.
Does a record requirement apply?,No under the assessed rule,Check other applicable retention or preservation duties; do not infer all deletion is permitted.
Does a record requirement apply?,Unknown,Escalate classification before deleting potentially relevant material.
Is a retention period specified by the applicable rules?,Yes,Use that specified period for the identified record.
Is it a required FINRA record with no specified period?,Yes,Apply Rule 4511(b)’s at-least-six-year fallback.
"Are format, media and archive requirements established?",No or unknown,Resolve the Rule 17a-4 handoff with the records team; a chat export is not enough.
Is a separate preservation obligation relevant?,Yes or unknown,Resolve that obligation before routine disposal.
"Are classification, period and archive handoff established?",Yes,Preserve and retrieve the required evidence under the documented process.
finra-ai-fictional-record-cases.csvInspect
Situation,Classification question,Next outcome
Generic question about a public definition,"Was it merely reference material, or used as evidence of a regulated business activity?",Records owner determines whether any record requirement applies; do not classify by tool alone.
AI draft later sent to a customer,What communication record and material review evidence are required?,Preserve the applicable final communication and supporting record under the relevant rule.
AI summary used in supervisory review,"Which review decision, source material and findings must be evidenced?",Link required supervisory evidence to the appropriate records process.
Unsent draft contains material decision context,Does the actual rule or preservation duty require this context?,Resolve before deletion; “draft” alone is not a decision.
Required FINRA record with a specified period,Which FINRA or Exchange Act period applies?,Use the applicable specified period.
Required FINRA record with no specified period,Does Rule 4511(b)’s fallback apply?,Apply at least six years where the fallback conditions are met.
"Format, media or preservation uncertain",Are archive requirements or a specific preservation obligation unresolved?,Escalate to the records/legal owner; do not claim a normal chat export resolves them.
Before you proceed
Keep these distinctions clear
- Six years is a scoped fallback
- It does not automatically apply to every AI prompt or event.
- An export is not an archive certification
- Confirm the actual format, media and retrieval requirements.
Apply it to employee AI use
Bring your actual data path.
Aona’s supported activity evidence may help identify a relevant employee AI application or input event.
It is not represented as a Rule 17a-4 books-and-records archive and does not classify every conversation’s legal status.
Use a synthetic record to determine which event evidence is available and what must be handed to the firm’s records system.
Review your use caseFAQ
Questions for this decision
Are all AI prompts business records?
Does an unsent draft always fall outside retention?
Does Rule 4511 require six years for every AI log?
Can a security dashboard replace the required archive?
Evidence behind the guide
Sources and scope
Prepared by Aona. Sources checked 2026-09-21. The cited material supports the specific points below; it does not certify a product or your use case.
- FINRA Rule 4511: General requirements
Required books and records, the six-year fallback only when no other period is specified, and Rule 17a-4 format/media requirements.
standard · checked 2026-09-21 - FINRA Regulatory Notice 24-09
Technology-neutral duties, pre-deployment evaluation, supervision and communications standards for generative AI use.
regulator · checked 2026-09-21