AI Note Taker for Financial Advisors: SEC & FINRA

An AI note taker for financial advisors is workable, but three things need to be true first: your firm has approved the tool, the client knows the meeting is being recorded, and anything that counts as a required record ends up in the firm's archive rather than living only in the note taker's cloud. A note taker writes notes. It isn't a books-and-records system, and treating it like one is where advisors get into trouble.

Below: what the SEC and FINRA rules say, how a note taker differs from a compliance archive, the consent question, what to ask a vendor, and a day-to-day workflow. It's written for US advisers and broker-dealer reps; other countries run their own recording regimes. It isn't compliance advice. Your chief compliance officer decides how these rules apply to your firm.

What the recordkeeping rules actually say

Start with an awkward fact: we couldn't find an SEC or FINRA rule that names AI note takers. What exists is a set of technology-neutral recordkeeping rules written before anyone had a bot in a client review, and regulators have said plainly that those rules still apply.

SEC-registered investment advisers

Rule 204-2 under the Advisers Act requires advisers to keep originals of written communications received, and copies of those sent, relating to any recommendation made or advice given, among other topics. Those records are kept for five years from the end of the fiscal year of the last entry, the first two in an appropriate office. Electronic records must be safeguarded from loss, alteration or destruction, with access limited to authorized people.

Note the word "written." A recap email you send after an annual review looks a lot like a written communication relating to advice. Whether the transcript and the internal AI summary are records too is the question to settle with your CCO before you start, not during an exam. State-registered advisers follow their state securities regulator's books-and-records rule instead.

Broker-dealers and their reps

SEA Rule 17a-4(b)(4) covers originals of all communications received and copies of all communications sent "relating to its business as such," kept for three years, the first two easily accessible. Electronic records must either keep a complete, time-stamped audit trail of changes and deletions or sit in non-rewriteable, non-erasable (WORM) storage. FINRA Rule 4511 adds a six-year default for FINRA records with no other specified period. The broker-dealer rule says "all communications," not "written communications," and dual registrants live under both.

What FINRA has said about AI

Regulatory Notice 24-09 (June 2024) says FINRA's rules are technology neutral and apply whether a firm builds a tool or uses a third party's, including AI features embedded in existing products, and that firms should evaluate such tools before deploying them. The 2026 Annual Regulatory Oversight Report gives generative AI its own section: existing obligations, including supervision, communications and recordkeeping, apply to it, and the top use case FINRA sees among member firms is "Summarization and Information Extraction." Its suggested practices include keeping prompt and output logs and having humans review outputs.

The same report's books-and-records findings read like a warning about unvetted meeting tools. They include firms that didn't do enough due diligence on whether third-party vendors could meet recordkeeping requirements, and written procedures too general to specify which communication platforms were permitted or prohibited.

A note taker is not a compliance archive

Most of the confusion in this category comes from treating two different products as one. They do different jobs for different people.

So the workflow that holds up is boring. The note taker drafts, the advisor reviews, and anything that counts as a record goes into the system your firm already uses to capture records. In practice that often means sending the reviewed recap from firm email, which is already captured, and logging it in the CRM.

If you supervise advisors, the question shifts from "is the summary good" to "can we show what happened." That means the tool named in your written supervisory procedures, a rule for which meetings get recorded, periodic sampling of summaries against transcripts, and a quick way to pull one client's meetings when an examiner or a complaint asks.

Client consent, and the calls you shouldn't record at all

Recording consent comes from wiretap law, federal and state, not from SEC or FINRA rules. Federal law allows recording with one party's consent, but about a dozen states require everyone's, and when caller and client sit in different states, follow whichever law is stricter. Those states are listed in our rundown of call recording laws. With clients in several states, asking every time is simpler than working out which law governs each call.

In the advisory agreement: "We may record and transcribe meetings with an AI tool so our notes are accurate. Recordings are processed by [vendor]; reviewed summaries are kept in your client file. We will ask before each recorded meeting, and you can decline."

At the start of a review: "Before we look at the numbers, I'd like to run my note taker so I can listen instead of writing. I check the notes, and a summary goes into your file. Is that OK with you?"

Some conversations shouldn't be recorded whatever the client says:

• Calls with FINRA staff. If you're with a FINRA member firm, Regulatory Notice 24-10 says members and associated persons may not record calls or meetings with FINRA staff during exams, investigations or related oversight, explicitly including tools that automatically capture the content. Switch off any auto-join bot before those calls.
• Account numbers and identity details. Amended Regulation S-P lists Social Security numbers, and a client's name or user name paired with something like an access code, as examples of sensitive customer information. Collect them through your secure channel, not out loud on a recording.
• Health-heavy planning. Long-term care and disability conversations put medical details into a transcript. Decide in advance whether that belongs in a vendor's cloud.
• Anyone who says no. Then take notes by hand and dictate the file note afterwards.

What to ask a vendor (your CCO will add more)

Vendor diligence isn't optional here. Under the 2024 amendments to Regulation S-P, SEC-registered advisers and broker-dealers need written policies to oversee service providers that handle customer information, including due diligence and monitoring, reasonably designed so providers notify the firm within 72 hours of becoming aware of a breach. Larger firms had to comply by December 3, 2025; smaller ones by June 3, 2026.

• Breach notice. Will the contract commit the vendor to tell you within 72 hours of becoming aware of a breach?
• Training. Are client recordings or transcripts used to train models, and can you opt out in writing?
• Location and sub-processors. Which cloud and region hold the data, and who else processes it?
• Security evidence. Encryption in transit and at rest, and which SOC 2 report (Type I or Type II) with what date.
• Export to your archive. Can transcripts and summaries leave in a format your archive or CRM accepts, with dates and participants intact?
• Edits and deletion. Can summaries be changed after the meeting, is there a history of changes, and is "archived" the same as "deleted"?
• Admin control. Can the firm add and remove advisors, set sharing defaults and keep a departing advisor's meetings?
• Capture and auto-join. Is capture done by a visible bot or on the advisor's own device, and can automatic joining be restricted to chosen meetings?

See how one product answers that list: download Laxis for free and review its export, sharing and auto-join settings with your compliance team.

A day-to-day workflow that survives an exam

Firm-level rules belong in your written policies and supervisory procedures. At the advisor's desk, the routine looks like this:

1. Get approval first. The tool should be on the firm's approved list, with the plan and settings compliance signed off.
2. Disclose twice. Once in the client agreement, then again at the start of each recorded meeting; note the answer in the CRM.
3. Keep identifiers off the recording. Account numbers and ID numbers go through your secure channel.
4. Review the same day. Check the summary against the transcript, starting with figures, names and anything that reads like a recommendation.
5. Send and log from firm systems. Email the reviewed recap from your captured firm account and attach it to the client record. Our client meeting notes template gives the recap a consistent shape.
6. Delete on schedule, never before archiving. Follow the firm's retention rule for what stays in the note taker, and don't remove anything that may be a record until it's safely captured elsewhere.

Check the numbers first: A misheard percentage in an internal note is an annoyance. The same error in a recap you've emailed to a client is now a communication about advice, sitting in your archive for years.

Keeping several clients' material apart, and never forwarding a raw transcript, are habits from our consultant's guide to AI note takers that carry over to advisors unchanged.

Where Laxis fits in an advisory practice

Laxis is a note taker and a dictation tool. It is not a compliance archive: users can edit and delete their own meetings, and it isn't designed for WORM retention or supervisory review, so your firm's archiving system still has to capture whatever counts as a record. Export to TXT, Word or PDF, with timestamps and speakers, and CRM sync are how notes reach the systems that do that job. CRM sync covers HubSpot and Salesforce, and our help center also lists Wealthbox; it's on the Business plan, along with team admin.

Other limits to put on the table: processing happens in the cloud, with Google Cloud Platform named as the provider in our privacy policy. There's no HIPAA compliance and no BAA. Capture is bot-free by default, which keeps reviews natural but leaves disclosure entirely to you, and the optional bot's auto-join can be restricted to the calls you pick. The Laxis help center reports a SOC 2 Type I certification and says data is encrypted both in transit and at rest; request the report as part of your Reg S-P diligence. Enterprise adds SSO/SAML sign-on, data residency, and retention policies you can customize.

What it does well for advisors: accurate notes from reviews and planning meetings, with action items and owners so follow-ups don't slip; in-person capture on the mobile app for clients who come to the office; transcription in 100+ languages for clients who prefer one other than English, plus live translation on Premium; a Personal Dictionary for client, fund and product names; and the Voice Keyboard for dictating a file note into your CRM after a call you chose not to record. Meetings, dictation and translation share one monthly pool of minutes. Free covers 300 minutes with 45-minute recordings. Paid plans: Premium at $15.99 a month ($9.99 when billed yearly) and Business at $29.99 ($19.99 yearly). More on our Laxis for financial advisors page.

Law firms face the opposite pressure, keeping less rather than more; see our piece on AI note takers for lawyers.

Run it on an internal meeting first. Check export, sharing and auto-join against your firm's policy before a client sees it. 14-day Premium trial, no credit card. Test Laxis with your team

Frequently asked questions

Can financial advisors use AI note takers?

Yes, if the firm approves the tool and the workflow keeps required records in the firm's archive. FINRA says its rules are technology neutral and apply to third-party AI tools, and SEC books-and-records rules still govern what you keep. Get compliance sign-off, disclose recording to clients, and review every summary before it is sent or filed.

Are AI meeting notes considered books and records?

AI meeting notes may be records, depending on what they contain and how your firm uses them. SEC Rule 204-2 requires advisers to keep written communications relating to advice, and SEA Rule 17a-4 requires broker-dealers to keep communications relating to their business. Your chief compliance officer should decide which transcripts, summaries and recaps count.

Do clients have to consent to a financial advisor recording a meeting?

Recording consent rules come from federal and state law, and about a dozen states require every participant to agree. Asking every time is the simplest practice, since it avoids guessing which state's law applies to a client. Put the disclosure in your advisory agreement, ask again at the start of each recorded meeting, and note the answer in the CRM.

Is an AI note taker the same as a compliance archive?

No. A note taker helps you capture and follow up on a conversation, and its summaries are drafts meant to be edited. A compliance archive preserves required records unaltered or with an audit trail, applies retention schedules and holds, and lets supervisors search them. Most advisors need both, connected by export or CRM sync.

Can I use an AI note taker on a call with FINRA?

If you work for a FINRA member firm, not without FINRA's express permission. Regulatory Notice 24-10 says members and associated persons may not record calls or meetings with FINRA staff during exams, investigations or related oversight, including with tools that automatically capture the content. FINRA says members shouldn't expect it to consent, so switch off any bot or auto-join first.

Does Laxis sync meeting notes to Salesforce, HubSpot or Wealthbox?

Laxis syncs meeting notes and action items to a CRM on its Business plan. HubSpot and Salesforce are supported, and the Laxis help center also lists Wealthbox, with one CRM connected at a time. The free and Premium plans do not include CRM sync, and a CRM is not a compliance archive either.