Product / Compliance
Compliance built into every call and text
Captured when it's sent or received. Delivered to the archiver you already use.
- SOC 2 Type 2
- 16 archiving and compliance tools
- Retention you set: 6 months to 7 years
Clients text and call. When the approved tool is clunky, advisors drift to personal numbers and iMessage, outside the firm's records.
The same recordkeeping rules apply to these conversations. The record so far: 95 SEC actions and $2.3 billion in penalties for off-channel recordkeeping since fiscal 2022. Source: SEC press release 2026-34, April 7, 2026 (opens in a new tab)
SEC 17a-4(b)(4) · Advisers Act 204-2(a)(7) · FINRA 4511 · FINRA 3110 · FINRA Notice 17-18
How compliance works. CurrentClient captures and delivers. Supervision happens in your archiver.
Capture
Captured when it's sent or received. Calls and texts on a CurrentClient business number are captured at the source, not swept up later.
- A call or text from our apps, the API, or Outreach Engine, and on Text + Phone from an advisor's own phone through cell-bridge
- Stored immutably on AWS S3 Object Lock
- Kept as long as you set: 6 months, or 1 to 7 years, on every plan, with audit trails
- Fed to your archiver automatically, with archive receipts
Controls
Controls and policies. The rules your firm needs enforced, applied to every text on every plan.
- DLP that stops the send, for typed texts, Outreach Engine mass texts, and AI-drafted texts
- TCPA and unsubscribes handled, including API and Outreach Engine messages
- 10DLC registration filed for you, with a one-time $50 fee
- Business numbers, not personal numbers, with cell-bridge on Text + Phone
- MFA and inbox permissions, so each person signs in with their own login
- Records you can take with you, including if your firm leaves
Calls
Calls are on the record too. Every call through your CurrentClient number is captured: recordings, call logs, voicemails, and AI transcripts and summaries if your firm adds them.
- Text + Phone: calls run in the app, or on an advisor's own phone through cell-bridge
- Text + Forwarding: calls ring the advisor's cell, and are logged, recorded, and archived
- Text: no calling in CurrentClient, so your firm keeps calls on its current line
Security
Security, independently audited. Encrypted everywhere, continuously monitored, and least-privilege by default.
- AES-256 at rest, TLS 1.3 in transit
- Drata monitors 100+ security controls, with independent SOC 2 audits and annual employee security training
- MFA enforced, privileged accounts restricted
Diligence
Regulation S-P, handled. Amended Regulation S-P is in effect. As your service provider, CurrentClient maintains safeguards, a 72-hour incident commitment, and documented response plans.
- Administrative, technical, and physical safeguards for customer information
- A commitment to notify your firm within 72 hours of a confirmed security incident
- Incident Response, Business Continuity, and Disaster Recovery plans, plus the SOC 2 Type 2 report, available on request on every plan
How we meet Regulation S-P →Get the vendor diligence package →
Archiving
Delivered to your archiver
Calls and texts feed your archiver automatically. We integrate with 16 archiving and compliance tools.
Archiving and compliance tools
What we handle, what your firm handles. Compliance depends on your firm's policies as well as your tools.
CurrentClient handles
- Capture of calls and texts (including recordings, voicemails, AI transcripts, and Outreach Engine messages)
- Immutable storage
- Retention at the period you set
- Delivery to your archiver
- DLP enforcement
- 10DLC registration
- Opt-in/unsubscribe handling
- Security controls
- Record export
- Vendor documentation
Your firm handles
- Written policies and procedures
- Choosing the retention period
- Supervision and review (in your archiver)
- Approving the tools staff may use
- Choosing the plan and setup that keeps advisors' client conversations on the firm's numbers
- Deciding how to keep records of files shared with clients (CurrentClient archives the text, not the file)
- Training staff to keep client conversations on approved channels
It finally gives advisors a modern way to communicate with clients without sacrificing compliance.
Sanay Patel
Purpose Wealth
Questions compliance teams ask.
Do you replace our archiver?
No. CurrentClient captures calls and texts and delivers them to your archiver. We integrate with 16 archiving and compliance tools. See archiving integrations
Do you supervise or review messages?
No. CurrentClient has no review or supervision features. Supervision happens in your archiver, which we deliver calls and texts to.
How long are records kept?
As long as your firm sets. Choose 6 months, or 1, 2, 3, 4, 5, 6, or 7 years, on every plan.
What's captured from calls?
Call recordings, call logs, voicemails, and AI transcripts and summaries, all sent to your archive. This applies to both calling plans, Text + Forwarding and Text + Phone. Transcripts and summaries come with the AI Transcription + Summaries add-on.
What if an advisor wants to use their own phone?
It depends on the plan. On Text + Phone, cell-bridge routes the advisor's calls and texts through their CurrentClient number, so they're captured on a personal handset. On Text + Forwarding, calls ring the advisor's cell and are logged, recorded, and archived. Capture covers calls and texts through the CurrentClient number, not messages sent from a personal number or other apps.
Are mass texts and API messages captured?
Yes. Outreach Engine mass texts go out as individual texts to each client. Those texts, and messages sent through the API, are archived and honor unsubscribes like any other text.
Are files shared with clients archived?
No. Files advisors share with clients through Outreach Engine aren't archived. The text message sent with the file is.
What happens to our records if we leave?
You can export them. Data export is on every plan.
How do we get the SOC 2 report and diligence package?
Request them on our vendor diligence page. Customers find their access code in Settings → Reports. Get the vendor diligence package
