Can a financial advisory firm license its business records to AI companies?

Updated October 25, 2026 · How we research

Why is this industry different?

Most of an advisory firm's records are about clients' money. Regulation S-P, the SEC's privacy rule for registered investment advisers, broker-dealers, and funds, limits sharing of clients' nonpublic personal financial information with outside companies, and requires privacy notices and opt-out rights before certain sharing. The FTC (Federal Trade Commission) notes that the Gramm-Leach-Bliley Act also requires financial institutions to explain how they share customer information and to safeguard it.

Recordkeeping rules add another layer. The SEC's books and records rule for investment advisers requires keeping written communications about advice and recommendations, generally for at least five years. FINRA Rule 4511 requires member firms to keep required records, generally for six years where no other period applies, in formats that meet SEC rules. Licensing would not remove those obligations, and your compliance team will need to be involved.

What systems does an advisory firm usually run on?

Typical systems include a CRM (customer relationship management software) for client relationships, portfolio management and reporting tools, custodian platforms, financial planning software, an email and messaging archive kept for compliance, document storage, and accounting. Much of this data sits at custodians or vendors under their own terms.

Because almost every one of these systems is built around client accounts, there is little separation between the business process and the client data. That is the practical reason the licensable set is so small: the workflow records that interest buyers in other industries are, in an advisory firm, client records.

Which records might be of interest, and which are realistic?

AI buyers interested in finance often want advice conversations, planning work, and account servicing. For an advisory firm, those are exactly the records that are regulated and client-confidential, so they are generally not realistic to license. The narrow set that may be possible looks more like this:

• Internal operations procedures and checklists with no client details.
• Training materials your firm created.
• General market commentary your firm published or wrote internally.
• Back-office workflows (vendor management, IT, HR process) cleaned of personal data.
• Project records for internal initiatives that never touched client accounts.

What has to be excluded?

In practice, the exclusion list covers most of the firm. It typically includes the following.

• All client records: names, account numbers, holdings, balances, and transactions.
• Advice communications, financial plans, and meeting notes about clients.
• Compliance archives of email, chat, and text messages.
• Custodian and portfolio system data.
• Records of complaints, regulatory exams, and trade errors.
• Anything that could reveal a client's identity, even indirectly.

Does de-identification solve the problem?

Not reliably. Financial records are hard to de-identify because combinations of account sizes, dates, and life events can point back to a specific person, especially for smaller firms with well-known clients. Regulation S-P excludes aggregate information without personal identifiers, but deciding what qualifies is a legal question. Do not rely on de-identification without advice from your compliance team and lawyer.

How should an advisory firm approach this?

Start with your chief compliance officer, not with the data. If they see a path, list only the internal, non-client records that might qualify and confirm whether any recordkeeping or privacy rule applies to them. Expect that for many firms the honest answer will be that there is little to license.

• Read the guide on what can be excluded.
• Read the guide on employee and customer privacy.
• Read the guide on whether your company qualifies.
• Read the guide on whether an offer is legitimate, if someone has already approached you.

General information, not legal, tax or financial advice.