Skip to content
Menu

RIA compliance manual template

Answer a few questions about the firm and get the outline of an RIA compliance manual: a contents list, a starter paragraph for every section saying what it must cover, and the rule each section implements. Edit any line in place, then copy or print it. It is a starting draft for your own procedures, not a finished manual; the SEC’s compliance program rule asks for policies built around your firm.

Rule 206(4)-7 and the dates around it

  • Written policies and proceduresadopt
    17 CFR 275.206(4)-7(a)
  • Review of their adequacy and effectivenessannually
    17 CFR 275.206(4)-7(b)
  • Chief compliance officer, a supervised person1 named
    17 CFR 275.206(4)-7(c)
  • Policies kept: in effect now or within the past5 years
    17 CFR 275.204-2(a)(17)(i)
  • Form ADV annual amendment, after fiscal year end90 days
    17 CFR 275.204-1(a)
  • Form CRS update once materially inaccurate30 days
    Form CRS General Instruction 8.A
  • Access-person transaction reports, after quarter end30 days
    17 CFR 275.204A-1(b)(2)(ii)
  • Reg S-P customer notice, at the latest30 days
    17 CFR 248.30(a)(4)(iii)
From the eCFR text of the SEC’s adviser rules (as of October 20, 2026) and the Form CRS instructions, read October 22, 2026. Form CRS rows apply only to firms with retail investors.
Stipple engraving of an open ring binder of blank pages beside a hole punch and punched sheets
Card 01
A compliance manual is a binder of the firm’s own procedures, filed and kept current.

What it builds

A table of contents for a written compliance manual, with a short starter paragraph under each heading that says what the section has to cover and the rule it implements. The firm facts decide which sections appear: a firm without custody gets no custody section, a firm without retail investors gets no Form CRS section, and a one-person firm gets the code-of-ethics wording that Rule 204A-1(d) allows.

  • Sections that implement a rule carry its citation
    17 CFR 275.204-2, 204A-1, 206(4)-1, 206(4)-2, 206(4)-6; 248.30
  • Sections drawn from the SEC’s list of areas a program should address
    Release IA-2204, 68 FR 74714
  • Sections you add for your firm’s own practices
    Your firm

Rule 206(4)-7 itself names no chapters. The SEC’s adopting release says the rule “does not enumerate specific elements that advisers must include in their policies and procedures,” and that it “does not require advisers to consolidate all compliance policies and procedures into a single document.” The outline draws on the ten areas that release lists, plus the rules an adviser’s own facts bring in. The guide to the Rule 206(4)-7 compliance program explains the three duties the manual sits under.

Worked example

Two advisers, the same tool. The first is the default: four supervised persons, discretion over client accounts, fees deducted from those accounts, retail clients, a website and a LinkedIn page, and advisers who text clients. The second is a one-person planner with no discretion, no custody, retail clients and a website.

Which sections each firm gets, and the rule each implements

Manual sections for a four-person adviser and a one-person planner
SectionFour-person adviserOne-person planner
Purpose and scope206(4)-7(a)206(4)-7(a)
Chief compliance officer206(4)-7(c)206(4)-7(c)
Code of ethics and personal trading204A-1; 275.204-2(a)(12), (13)204A-1; 275.204-2(a)(12), (13)
Portfolio managementIA-2204; 204-2(a)(8), (9)IA-2204
Trading and best executionIA-2204; 204-2(a)(3)Left out
Marketing and advertisements206(4)-1; 275.204-2(a)(11), (15), (16)206(4)-1; 275.204-2(a)(11), (15), (16)
Electronic communications204-2(a)(7)204-2(a)(7)
Books and records204-2(a), (e)(1), (g)204-2(a), (e)(1), (g)
Form ADV filings and brochure delivery204-1(a); 275.204-3(b)204-1(a); 275.204-3(b)
Form CRS (relationship summary)204-5(b)204-5(b)
Privacy and Regulation S-P17 CFR 248.30(a), (b)(2); 275.204-2(a)(25)17 CFR 248.30(a), (b)(2); 275.204-2(a)(25)
Custody of client assets206(4)-2(a), (b)(3)Left out
Proxy votingForm ADV Part 2A, Item 17Form ADV Part 2A, Item 17
Valuation and fee billingIA-2204; 204-2(a)(10)IA-2204; 204-2(a)(10)
Business continuityIA-2204IA-2204
Annual review of this manual206(4)-7(b); 275.204-2(a)(17)206(4)-7(b); 275.204-2(a)(17)
Sections1614

Built by this tool from the facts above

The four-person firm gets a trading section because it places trades with discretion, and a custody section because fee deduction is custody under Rule 206(4)-2(d)(2), with the examination lifted by (b)(3). The solo planner loses both, keeps the code of ethics in its one-access-person form, and still gets the annual review: Rule 206(4)-7(b) applies to every SEC-registered adviser, whatever its size. To plan that review area by area, use the annual compliance review planner.

The rule text

The manual exists because of three sentences in Rule 206(4)-7. Every adviser registered, or required to be registered, with the SEC must:

The words that matter for a manual are “reasonably designed” and “implement.” A manual copied from another firm is neither: it describes someone else’s business, not what your own staff do. Rule 204-2(a)(17) then requires the firm to keep every version of its policies in effect now or within the past five years, and any records documenting each annual review. The rule text does not say the review must produce a written report, so check with your compliance counsel what your firm should keep.

Where the rule says so

Every rule the outline cites, one sentence of its text, and the sections that implement it. Open a row to read it; the link goes to the full text.

The compliance program rule

“Adopt and implement written policies and procedures reasonably designed to prevent violation, by you and your supervised persons, of the Act and the rules that the Commission has adopted under the Act”

Sections: Purpose and scope, Chief compliance officer, Annual review of this manual.

Read the full text

17 CFR 275.206(4)-7(a)

The SEC’s adopting release for Rule 206(4)-7

“Each adviser should adopt policies and procedures that take into consideration the nature of that firm’s operations.”

Sections: Portfolio management, Trading and best execution, Valuation and fee billing, Business continuity.

Read the full text

Release IA-2204, 68 FR 74714 (Dec. 24, 2003)

Books and records

“A copy of the investment adviser’s policies and procedures formulated pursuant to § 275.206(4)-7(a) of this chapter that are in effect, or at any time within the past five years were in effect”

Sections: Code of ethics and personal trading, Portfolio management, Trading and best execution, Marketing and advertisements, Electronic communications, Books and records, Privacy and Regulation S-P, Custody of client assets, Proxy voting, Valuation and fee billing, Annual review of this manual.

Read the full text

17 CFR 275.204-2(a)(17)(i)

Code of ethics

“Provisions requiring your supervised persons to comply with applicable Federal securities laws”

Sections: Code of ethics and personal trading.

Read the full text

17 CFR 275.204A-1(a)

The Marketing Rule

“Any direct or indirect communication an investment adviser makes to more than one person … that offers the investment adviser’s investment advisory services with regard to securities to prospective clients”

Sections: Marketing and advertisements.

Read the full text

17 CFR 275.206(4)-1(e)(1)

The custody rule

“A qualified custodian maintains those funds and securities”

Sections: Custody of client assets.

Read the full text

17 CFR 275.206(4)-2(a)(1)

Proxy voting

“Adopt and implement written policies and procedures that are reasonably designed to ensure that you vote client securities in the best interest of clients”

Sections: Proxy voting.

Read the full text

17 CFR 275.206(4)-6(a)

Form ADV amendments

“At least annually, within 90 days of the end of your fiscal year”

Sections: Form ADV filings and brochure delivery.

Read the full text

17 CFR 275.204-1(a)

Brochure delivery

“Deliver to a client or prospective client your current brochure before or at the time you enter into an investment advisory contract with that client.”

Sections: Form ADV filings and brochure delivery.

Read the full text

17 CFR 275.204-3(b)(1)

Form CRS delivery

“before or at the time you enter into an investment advisory contract with that retail investor.”

Sections: Form CRS (relationship summary).

Read the full text

17 CFR 275.204-5(b)(1)

Regulation S-P safeguards

“Every covered institution must develop, implement, and maintain written policies and procedures that address administrative, technical, and physical safeguards for the protection of customer information.”

Sections: Privacy and Regulation S-P.

Read the full text

17 CFR 248.30(a)(1)

Form ADV Part 2A, Item 17

“Voting Client Securities”

Sections: Proxy voting.

Read the full text

Form ADV Part 2A, Item 17

Two sections lean on tools of their own. The electronic communications section is where the off-channel communications policy builder writes the full policy, and the marketing section pairs with the Marketing Rule ad review checklist. For the records each section points to, the books and records checklist lists them by paragraph. Firms that would rather buy a maintained manual can compare RIA compliance software and RIA compliance consultants.