FINRA's answer is short: "Firms are responsible for their communications, regardless of whether they are generated by a human or AI technology." An AI-written email from a registered representative is correspondence like any other. It has to meet Rule 2210's content standards, name the firm, go through the firm's supervision, and be kept under SEC recordkeeping rules. For investment advisers, SEC Rule 204-2 asks for copies of written communications about advice and orders. An AI agent that sends on its own adds two jobs: say it is an AI, and send through a channel the firm captures.
This is general information about FINRA and SEC rules, not legal or compliance advice. Your firm's written supervisory procedures and compliance team decide how these apply to you. Applying them to agent-sent email is our reading.
| Rule | What it says | What it means for AI email |
|---|---|---|
| FINRA Advertising FAQ D.8 | Firms are responsible for AI-generated communications, including supervision, recordkeeping and content standards | AI wrote it, the firm owns it |
| FINRA Rule 2210(a) | Email to 25 or fewer retail investors in 30 days is correspondence; to more than 25, a retail communication | An agent mailing many clients can create a retail communication |
| FINRA Rule 2210(b)(1)(A) | A registered principal approves each retail communication before use | Bulk AI emails need approval before they go out |
| FINRA Rule 2210(d)(1) | Communications must be fair and balanced; no "false, exaggerated, unwarranted, promissory or misleading" claims | Check AI drafts for promises and missing risks |
| FINRA Rule 2210(d)(3) | Correspondence must "prominently disclose the name of the member" | The firm name belongs in every agent's signature |
| FINRA Rule 3110(b)(4) | Written procedures for reviewing incoming and outgoing correspondence | Agent-sent email goes into the review queue |
| SEC Rule 17a-4(b)(4) | Broker-dealers keep copies of "all communications sent" about the business, for at least three years | The agent must send through an archived channel |
| SEC Rule 204-2(a)(7) | Advisers keep written communications about advice, funds and orders | Same for RIAs, for five years |
FINRA: the rules are technology neutral
FINRA Regulatory Notice 24-09 (June 27, 2024) reminded firms that "FINRA's rules - which are intended to be technology neutral - and the securities laws more generally, continue to apply when member firms use Gen AI or similar technologies". The notice says it does "not create new legal or regulatory requirements".
Two entries in the Advertising Regulation FAQ, both posted May 10, 2024, apply this to AI:
- D.8, AI created communications. Asked whether a firm is responsible for content created with AI, FINRA answers yes, and that firms must ensure AI-generated communications comply with "supervision requirements, applicable FINRA and SEC recordkeeping requirements, as well as the applicable content standards in FINRA Rules 2210 and 2220". A footnote adds that if AI makes a recommendation to a retail customer, Regulation Best Interest applies.
- B.4, chatbots. AI chatbot messages may be "correspondence, retail communications, or institutional communications" depending on who receives them and how many, and firms supervise them under Rule 3110(b)(4).
Correspondence or retail communication: count the recipients
Rule 2210 sorts written communications by audience. "Correspondence" is one "distributed or made available to 25 or fewer retail investors within any 30 calendar-day period"; a "retail communication" goes to more than 25. The difference matters for an agent, because a retail communication needs a registered principal's approval "before the earlier of its use or filing".
A rep's agent answering one client's question is sending correspondence. An agent that sends the same market note to the rep's whole book can cross into a retail communication. A firm running agents needs to know which side each workflow sits on, and to keep the second kind behind an approval step.
Agent-sent email goes into the same supervision queue
Rule 3110(b)(4) requires "procedures for the review of incoming and outgoing written (including electronic) correspondence". Mail an agent sends from a rep's mailbox is that rep's outgoing correspondence and belongs in the same review.
FINRA's 2026 Annual Regulatory Oversight Report (December 2025) has a section on AI agents, defined as "systems or programs that are capable of autonomously performing and completing tasks on behalf of a user". Among the risks it lists:
- "Autonomy: AI agents acting autonomously without human validation and approval."
- "Scope and Authority: Agents may act beyond the user's actual or intended scope and authority."
- "Auditability and Transparency: Complicated, multi-step agent reasoning tasks can make outcomes difficult to trace or explain, complicating auditability."
The report suggests firms consider "where to have 'human in the loop' agent oversight protocols or practices" and "how to track agent actions and decisions". For email, an approval step before send and a sent copy in the firm's archive answer both.
Recordkeeping: send where the archive can see it
SEC Rule 17a-4(b)(4) requires broker-dealers to preserve "copies of all communications sent (and any approvals thereof) by the member, broker or dealer [...] relating to its business as such" for at least three years, the first two in an easily accessible place. For investment advisers, Rule 204-2(a)(7) covers written communications sent about recommendations and advice, funds and securities, and orders, kept for five years from the end of the fiscal year, the first two in an appropriate office.
The SEC has shown how seriously it takes the channel. On September 27, 2022, it charged 15 broker-dealers and one investment adviser with recordkeeping failures and over $1.1 billion in combined penalties, because employees "routinely communicated about business matters using text messaging applications on their personal devices" that the firms did not preserve. Those cases were about text messages on personal phones, and the lesson carries over to agents: an agent that sends client email from a mailbox outside the firm's capture, such as a separate agent inbox, may be creating off-channel communications. Sending through the firm's own mailbox, via the Gmail API or Microsoft Graph, keeps each message in Sent Items where the archive already looks.
What the signature on AI-sent client email should carry
Rule 2210 leaves disclaimer wording to the firm, and our FINRA email disclaimer myths guide covers what a disclaimer block does for a firm. Three things belong in the signature on every AI-drafted or agent-sent email:
- The firm's name, prominently, per Rule 2210(d)(3), plus any relationship with another business named, such as a separate advisory firm.
- The firm's standard disclosures, the same ones on the rep's own email.
- Who sent it, when an agent did: its name, that it is an AI, and the representative it works for.
Ada, AI assistant to Daniel Park, Financial Advisor | Harrow Peak Securities, Member FINRA/SIPC | daniel.park@harrowpeak.example
This email was sent by an AI assistant on behalf of Daniel Park, a registered representative of Harrow Peak Securities. It is not a recommendation. Reply to reach Daniel.
Some client emails from Harrow Peak are drafted with AI assistance and reviewed under our supervisory procedures.
The firm and people are fictional; use your own firm's approved disclosure wording. The financial advisor email signature template shows the firm name, license lines and footnote for a whole team.
One approved signature for every rep and every AI assistant
Signatoro keeps the firm's approved signature in one place for people and AI assistants:
- Agentic sending and API fetch. An assistant fetches the current signature when it sends, over Signatoro's MCP server or the signature API, and appends it. The model never types the firm name or the disclosures.
- A compliance footnote only the owner changes. On the larger Company plans, the owner writes the firm's disclosure once and it sits under every signature, reps and agents alike. Every change is recorded: who made it, when, and what it said.
- Each agent as its own person. An agent with its own address gets its own name and title, such as "AI assistant to Daniel Park". See one email signature per AI agent.
Signatoro supplies the signature; capture and supervision stay with your mail system and archive.
The firm's approved signature on every email, AI included
Set the firm name and disclosure footnote once. Every rep and AI assistant fetches the current version with each email it sends.
Frequently asked questions
Can financial advisors use AI to write client emails?
Yes, within the firm's rules. FINRA says firms are responsible for AI-generated communications the same as any other, so AI-written email must meet Rule 2210's content standards, be supervised under Rule 3110 and be kept under SEC recordkeeping rules. Check your firm's written supervisory procedures before using an AI tool on client email.
Does FINRA require disclosing that an email was written by AI?
FINRA's FAQ and Regulatory Notice 24-09 apply the existing rules and add no AI-specific disclosure requirement. An agent that sends on its own should still say it is an AI, because a reader who thinks a person wrote it may be misled, and Rule 2210 prohibits misleading communications. In the EU, the AI Act's Article 50 adds its own disclosure duty for AI agents; see our AI email disclosure guide.
Do AI-generated emails need to be archived?
Yes, when they are business communications. SEC Rule 17a-4(b)(4) requires broker-dealers to keep copies of all communications sent about the business, and Rule 204-2(a)(7) covers advisers' written communications about advice and orders. FAQ D.8 says AI-generated communications fall under these recordkeeping requirements.
Is AI-written email correspondence or a retail communication?
It depends on the audience. Under FINRA Rule 2210, written communications to 25 or fewer retail investors within 30 days are correspondence, and those to more than 25 are retail communications, which need principal approval before use. The same rule applies whether a person or an AI wrote the message.
Who is responsible if an AI email to a client is wrong?
The firm. FINRA's FAQ D.8 says "Firms are responsible for their communications, regardless of whether they are generated by a human or AI technology."
Sources
Checked on 2026-10-07:
- FINRA: Advertising Regulation FAQ, B.4 and D.8, posted May 10, 2024
- FINRA: Regulatory Notice 24-09, Gen AI, June 27, 2024
- FINRA: Rule 2210, Communications with the Public
- FINRA: Rule 3110, Supervision
- FINRA: 2026 Annual Regulatory Oversight Report, December 2025, GenAI section
- Cornell LII: 17 CFR 240.17a-4, records to be preserved by broker-dealers
- Cornell LII: 17 CFR 275.204-2, books and records of investment advisers
- SEC: SEC Charges 16 Wall Street Firms with Widespread Recordkeeping Failures, press release 2022-174, September 27, 2022