I just read that Sarbanes-Oxley requires audit trails for “sensitive” documents. Doesn’t SOX appy only to public companies, meaning share issuing corporations?

Hi martinlw,

In my opinion, it is not necessarily important to use document management software to create an audit trail. I am a former regulator and a compliance consultant with RIA, b/d, as well as SOX experience. While SEC requirements would state what types of documents need to be maintained, they would not state, that I’m aware of, that it is necessary to use document management software. How you keep the required records for the required time period and easily accessible is really a personal preference. It also depends what type of business you’re referring to (an RIA or b/d?) and how large your firm is. For a large firm with many clients that processes many transactions, a document management software may be a good idea, or even a necessity. It’s really a personal preference on how you organize, just as long as the required documents are maintained for the required length of time.

I hope this helps!

Regards,

Tiffany Chamberlain
Managing Director, Polaris Compliance Consulting, LLC
(888) 240-4299
www.polariscompliance.com