AI Search for Financial Advisors: What Compliance Teams Should Know

Ask ChatGPT for a fee-only financial advisor in your city, or type the same question into Google, and you’ll often get an answer rather than a list of links. A few names, a sentence about each, sometimes a note on fees or specialisms. For a growing number of prospects, that answer is their first impression of you.

For most experts, getting into those answers is a marketing question. For financial advisors, it’s also a compliance question. Reviews, “top advisor” lists, client comments and even a screenshot of a flattering AI answer can all touch rules your firm already lives by.

This guide explains how the SEC Marketing Rule and FINRA Rule 2210 apply to the things that feed AI answers, which practices raise questions and which are generally lower risk. It’s written for advisors and the compliance teams who sign off on their marketing.

Why AI search is now a compliance question

AI assistants answer questions by drawing on what’s published across the web and in their own search indexes. Google, for example, says there are no special requirements for appearing in AI Overviews or AI Mode beyond being indexed and eligible to show a snippet in normal Search¹. In practice, that means the same material prospects already find when they search your name: your website, your profiles, directories, press coverage, review sites and third-party lists.

An answer written by ChatGPT or Google’s AI isn’t something you published. That matters, because advertising rules apply to communications by you and your firm. But you influence much of what those tools read, and many of the obvious ways to influence it involve content that regulators already have views on: testimonials, endorsements, ratings and material written by others.

No regulator has issued guidance on “showing up in AI answers” as such. What follows applies existing rules and guidance to the inputs AI tools rely on. Where we connect the two, we say so, and we frame it as a question rather than an answer.

If you want the broader picture of how AI tools decide which experts to name, our guide on how ChatGPT recommends coaches covers the mechanics for professionals generally.

The two rulebooks in play

Which rules apply depends on how you and your firm are registered. Many advisors are covered by one set. Dually registered professionals may be covered by both.

The SEC Marketing Rule

The SEC adopted the amended Rule 206(4)-1 under the Investment Advisers Act on 22 December 2020. It took effect on 4 May 2021², with an 18-month transition period before compliance was required³. It applies to advisers registered, or required to be registered, with the SEC, and it replaced the old advertising rule and the cash solicitation rule. A September 2022 Risk Alert from the SEC’s Division of Examinations confirmed the compliance date as 4 November 2022, said advertisements disseminated from that date are subject to the rule, and set out the areas examiners would review⁴.

The rule defines an advertisement broadly. It covers communications to more than one person that offer advisory services, and it treats any paid testimonial or endorsement as an advertisement too. It then sets seven general prohibitions, including untrue statements of material fact, claims you can’t substantiate if the SEC asks, and anything otherwise materially misleading⁵.

FINRA Rule 2210

FINRA Rule 2210 governs communications with the public by FINRA member broker-dealers and their registered representatives. It sorts communications by audience. Correspondence goes to 25 or fewer retail investors within any 30 calendar-day period. Retail communications go to more than 25 retail investors in that window. Institutional communications go only to institutional investors⁶.

Retail communications generally need approval by an appropriately qualified registered principal before the earlier of use or filing with FINRA, and some types must be filed⁶. FINRA’s social media guidance distinguishes static content, such as a profile, which needs pre-approval, from real-time interactive posts, which need supervision but not pre-approval⁷.

	SEC Marketing Rule	FINRA Rule 2210
Who it covers	SEC-registered investment advisers	FINRA member firms and their registered representatives
What it governs	Advertisements, including paid testimonials and endorsements	Correspondence, retail and institutional communications
Testimonials	Permitted in advertisements only if disclosure, oversight and other conditions are met	Retail communications and correspondence must carry prominent disclosures
Third-party content	Can be attributed to the adviser through adoption or entanglement	Can be attributed to the firm through adoption or entanglement
Review and approval	The adviser’s written compliance policies and procedures	Principal approval of retail communications; supervision of correspondence

Source: Rule text and regulator guidance⁵⁶⁷

State-registered advisers follow their state securities regulator’s rules, which this article doesn’t cover. If that’s you, start with your state’s requirements.

1. 25 January 2010

   FINRA’s first social media guidance

   Regulatory Notice 10-06 sets out static versus interactive content and the adoption and entanglement tests for third-party posts.⁷

2. 18 August 2011

   More social media guidance

   Regulatory Notice 11-39 adds that recordkeeping depends on content, not device, and covers links to third-party sites.⁸

3. April 2017

   Sharing, liking and directories

   Regulatory Notice 17-18 addresses sharing third-party content, unsolicited comments and correcting directory listings.⁹

4. 22 December 2020

   SEC adopts the Marketing Rule

   The amended Rule 206(4)-1 is adopted and takes effect on 4 May 2021.²

5. 4 November 2022

   Marketing Rule compliance date

   Advertisements disseminated by SEC-registered advisers from this date are subject to the Marketing Rule.⁴

6. 10 May 2024

   FINRA FAQs on AI

   FINRA says firms are responsible for AI-generated communications, and that chatbot communications may fall under its communications rules.¹⁰

7. 16 December 2025

   SEC Risk Alert on testimonials and ratings

   Examiners publish detailed observations on testimonials, endorsements and third-party ratings.¹¹

Adoption and entanglement: the idea that matters most

If you take one concept to your compliance team, make it this one. Both the SEC and FINRA use it to decide when content written by someone else counts as yours.

The SEC’s adopting release explains that third-party information can be attributed to an adviser in two ways. Adoption happens when the adviser explicitly or implicitly endorses or approves the information after it’s published. Entanglement happens when the adviser involves itself in preparing it³. FINRA has applied the same two tests to social media since 2010⁷⁸.

The SEC release gives practical examples worth reading closely³:

• Letting anyone post comments on your website or social page doesn’t, by itself, make those comments yours, as long as you don’t selectively delete, alter or reorder them and aren’t involved in preparing them.
• Deleting negative comments or pushing positive ones to the top would make the remaining comments yours.
• Editing under pre-set, objective criteria documented in your policies, such as removing profanity or spam or correcting a factual error, doesn’t count as endorsing what’s left, provided the criteria aren’t designed to favour or disfavour you. A policy of removing only negative comments doesn’t qualify.
• Merely allowing “like” or “share” features on a platform isn’t treated as implicating the rule.
• Linking to third-party content calls for the same adoption and entanglement analysis, and linking to content you know is false is a problem in its own right.

FINRA’s guidance runs along the same lines and is explicit about sharing and liking. Regulatory Notice 17-18 says that sharing or linking to specific content means the firm has adopted it. It also says that a representative who likes or shares favourable comments on a business social media page has adopted them, so the testimonial, supervision and recordkeeping rules apply⁹. Notice 11-39 adds that a firm can’t link to a site it knows or has reason to know is false or misleading, and that co-branding a third-party site makes the firm responsible for all of it⁸.

An AI answer about you is someone else’s words. It becomes your problem when you put it to work.

How this might apply to AI answers (our reading, not regulator guidance)

Regulators haven’t addressed AI answers specifically. This section is our own reading of the guidance above, so treat it as a framework for discussion with your compliance team, not as guidance or advice. An AI tool describing you is a third party. If you quote it on your website, post a screenshot of it, or say “ChatGPT ranks us the top advisor in Denver”, you’re likely adopting it. That raises the same questions as any testimonial, endorsement or rating, plus a practical one: can you substantiate what it says?

Entanglement is the other side. If you arrange for content to be published about you so that AI tools will repeat it, such as paid “best advisor” articles, seeded forum posts or reviews you’ve shaped, ask whether that involvement makes the content yours. For comparison, FINRA’s advertising FAQ says a firm or representative that paid for, arranged or was otherwise involved in a third-party-hosted presentation is entangled with it¹⁰.

Reviews and testimonials: where the questions start

Online reviews are public, so AI tools can read them along with everything else. They’re also an area where the Marketing Rule changed what SEC-registered advisers may do.

Before the Marketing Rule, SEC-registered advisers were broadly barred from using testimonials in advertising³⁹. Under the Marketing Rule, an advertisement may include testimonials (from current clients or private fund investors) and endorsements (from anyone else) only if the adviser meets conditions⁵:

• Clear and prominent disclosure of whether the person is a client, whether they were paid and any material conflicts, plus the material terms of any compensation.
• Oversight, meaning a reasonable basis to believe the testimonial or endorsement complies.
• A written agreement with anyone paid for a testimonial or endorsement, unless the total paid is de minimis ($1,000 or less over the preceding 12 months), or the person is the adviser’s own personnel or an affiliate and that relationship is readily apparent or disclosed.
• No payment to ineligible persons, such as people with certain disqualifying events in the past ten years.

The SEC’s adopting release says these clear and prominent disclosures must be at least as prominent as the testimonial or endorsement and included within it, and that using a hyperlink for the disclosures the rule requires isn’t consistent with that standard³.

FINRA’s rule is different. Under Rule 2210(d)(6), retail communications and correspondence that include a testimonial about investment advice or performance must prominently disclose that it may not be representative of other customers’ experience, that it’s no guarantee of future performance or success and, if more than $100 in value was paid, that it’s a paid testimonial⁶. FINRA has also said that unsolicited third-party opinions or comments on a representative’s supervised business social media page are not the firm’s communications, but that liking or sharing them adopts them⁹.

What SEC examiners actually found

The SEC’s December 2025 Risk Alert is useful here because it describes practices examiners observed that did not appear to meet the testimonial, endorsement and third-party rating conditions¹¹. Among them:

• The most common problem: required disclosures missing at the moment a testimonial or endorsement appeared, often on advisers’ websites, including websites run under a team or trading name.
• Advisers bringing current-client testimonials or former-client endorsements from third-party websites onto their own sites without clearly and prominently disclosing that they came from current or former clients.
• Advisers giving clients gift cards to write reviews on third-party websites, without a basis to believe the paid-testimonial disclosures were made.
• Lead-generation firms, social media influencers, referral networks and refer-a-friend programmes, in some cases without the adviser recognising that the arrangement created an endorsement or testimonial.
• Disclosures placed behind hyperlinks, or set in smaller or lighter type than the testimonial.
• Advisers treating payments as de minimis because each was under $1,000, when the total over the preceding 12 months was higher.

Risk Alerts are staff views, not rules. Each one states that, like all staff statements, it has no legal force or effect and creates no new obligations¹¹. They do show what examiners have been looking at.

“Top advisor” lists and third-party ratings

Rankings and awards are usually published on the open web, where AI tools can find them, and the Marketing Rule treats them specifically. A third-party rating is a rating or ranking of an adviser by an unrelated person who provides such ratings in the ordinary course of business⁵. To include one in an advertisement, the adviser needs⁵:

• a reasonable basis to believe any questionnaire or survey behind it made favourable and unfavourable answers equally easy and wasn’t designed to produce a set result; and
• clear and prominent disclosure of the date of the rating and the period it covers, who created and tabulated it, and whether the adviser paid anything to obtain or use it.

The December 2025 Risk Alert found ratings on websites, social media profiles, brochures, press releases, newsletters and blogs that fell short¹¹. Examiners saw advisers linking to a rating provider’s page that carried no disclosures, logos that didn’t identify who created the rating, award years listed in which the adviser hadn’t received the award, and undisclosed payments for logo rights, reprints, priority placement, referral links and fees just to be considered.

Enforcement has followed. In September 2024, the SEC announced settled charges against nine advisers for Marketing Rule violations (the firms neither admitted nor denied the findings), including ratings advertised without dates or periods (some more than five years old), testimonials and endorsements without required disclosures, and claims the firms couldn’t substantiate¹².

9

Advisers in the SEC’s September 2024 Marketing Rule settlements¹²

$1.24M

Combined civil penalties in those settlements¹²

$1,000

Most an adviser can pay a promoter over 12 months and still count as de minimis⁵

Our reading of what this means for AI visibility: if a paid list or award helps you appear in AI answers, and you then refer to that award anywhere in your marketing, the third-party ratings conditions are in play. And the rule requires disclosure of any compensation provided in connection with obtaining or using a rating, so ask how a listing fee would need to be disclosed wherever you use it.

AI-written content and claims about AI

Two more strands of guidance matter if your firm uses AI tools to produce marketing, or talks about AI in it.

FINRA says its rules are technology neutral. Regulatory Notice 24-09, from June 2024, reminds firms that content standards apply whether a communication is written by a person or generated by a tool, and it creates no new requirements¹³. FINRA’s advertising FAQs, updated in May 2024, say firms are responsible for AI-generated communications just as for human-written ones, and that chatbot communications may be correspondence, retail or institutional communications depending on who receives them¹⁰. FINRA’s 2026 oversight report adds effective practices such as making sure AI-assisted communications comply with the rules, supervising and retaining chatbot sessions, and describing AI use accurately in retail communications¹⁴.

The SEC has acted against what it calls AI washing. In March 2024 it settled charges against two advisers, Delphia and Global Predictions, for false and misleading statements about their purported use of AI, with $400,000 in combined penalties. Both were also charged with violating the Marketing Rule, and neither admitted nor denied the findings¹⁵. Its examination priorities for fiscal 2026 say staff will review the accuracy of firms’ representations about their AI capabilities¹⁶.

So if an AI tool drafts your bio, your blog posts or your FAQ page, those words are still your firm’s communications. And if you describe your own practice as “AI-powered”, expect someone to ask what that means.

What’s generally lower risk

Much of what helps AI tools describe you correctly is plain factual information about who you are. The split below is our own reading of the guidance above, not a regulator’s classification. “Lower risk” doesn’t mean compliant, and your firm’s policies still apply to all of it.

A few points on the lower-risk column. FINRA’s 2017 guidance says that contacting an unaffiliated directory to fix a factual error, such as a misspelled name or wrong phone number, in a listing you didn’t request, solicit or pay for doesn’t make the corrected listing the firm’s communication⁹. FINRA member firms that serve retail investors must already include a readily apparent reference and link to BrokerCheck on the website page meant for retail investors and on pages profiling registered persons who work with them⁶. And “accurate” has to mean accurate everywhere: an old bio on a conference site that lists a role or credential you no longer hold is the kind of outdated detail an AI tool can repeat.

Consistency also helps search engines understand you as one person, which is the same foundation behind a Google knowledge panel. If you want to mark up your site so machines can read those facts reliably, our guide to structured data in plain English explains how. Even factual pages on your own site promote your services, so expect your compliance team to treat them as advertisements and review them accordingly.

Recordkeeping: keep the receipts

Whatever you decide to publish, keep records. For SEC-registered advisers, Rule 204-2 requires a copy of each advertisement disseminated, a record of testimonial and endorsement disclosures not included in the advertisement, and documentation supporting the adviser’s reasonable basis for believing its testimonials, endorsements and third-party ratings comply¹⁷. These records are generally kept for at least five years, the first two in an appropriate office¹⁷.

For FINRA members, Rule 2210 requires retail and institutional communications to be retained under SEA Rule 17a-4, along with who approved them and when⁶. FINRA has said since 2011 that what matters is the content of a business communication, not the device or platform it was sent from⁸.

In practice, that means a profile update, a reply to a review or a shared post on a business account may all need archiving. The 2026 FINRA report also points to retaining chatbot sessions and influencer posts made on a firm’s behalf¹⁴.

Questions to take to your compliance team

The most productive conversation is a specific one. Bring a list of what you’d like to do and ask how your firm treats each item. These questions are a starting point.

1. 1

   Which rules apply to me?

   Am I covered by the SEC Marketing Rule, FINRA Rule 2210, state rules or several of these, and does that change by channel?

2. 2

   Which of my profiles count as advertisements?

   Website pages, LinkedIn, directory listings, review-site profiles and podcast guest pages: which need pre-approval, and who approves updates?

3. 3

   What’s our policy on reviews?

   Can I ask clients for reviews, may I respond to them, and can any be shown on our website? What disclosures would we need?

4. 4

   How do we handle comments on our pages?

   Do we have documented, objective criteria for removing comments, so that moderation doesn’t look like curation?

5. 5

   Can we use awards or rankings?

   What due diligence do we do on the survey behind a rating, and how do we disclose dates, providers and any fees?

6. 6

   Are any of our arrangements endorsements?

   Referral programmes, influencers, lead-generation services and paid placements: do any of them create endorsements that need agreements and disclosures?

7. 7

   What about AI output?

   May we quote or share what AI tools say about us? Who reviews AI-drafted content before it’s published?

8. 8

   How are we capturing records?

   Are posts, replies, profile edits and any chatbot sessions archived, and for how long?

Where to start

AI search doesn’t come with its own rulebook for advisors. The rules you already follow on advertisements, testimonials, ratings and third-party content still decide what you can publish, share and pay for. What has changed is how much those inputs shape the first answer a prospect sees.

Start with the facts. Make your bio, credentials and firm details accurate and consistent everywhere you control them, and correct errors where others have published them. Then agree with your compliance team how your firm will handle reviews, ratings and anything written by others before you go looking for more visibility.

If you’d like help with the factual groundwork, see how we work with financial advisors, or book a free audit to see what search engines and AI tools can find about you today.

Frequently asked questions

Is an AI answer that mentions me an advertisement?

No regulator has addressed this directly. In our reading, not by itself: ChatGPT or Google’s AI writing about you is a third party’s output. Questions start when you adopt it (for example by sharing, quoting or screenshotting it in your marketing) or become entangled in it (for example by helping to prepare the content it draws on). Ask your compliance team how your firm treats each case.

Can I ask clients to leave Google reviews?

Under the SEC Marketing Rule, which has applied to SEC-registered advisers’ advertisements since 4 November 2022, testimonials can appear in advertisements only if disclosure and oversight conditions are met. Asking for reviews, offering anything in return, or featuring reviews on your own site each raise separate questions. SEC examiners have reported advisers who gave clients gift cards for reviews on third-party sites. Get your compliance team’s answer before you ask.

Can I show that I was named a top advisor?

A ranking by an unrelated firm is a third-party rating under the Marketing Rule. Using one in an advertisement requires a reasonable basis to believe the survey behind it was fair, and clear and prominent disclosure of the rating date, the period it covers, who produced it and any fees you paid. SEC examiners have reported advisers missing one or more of these.

Can I post a screenshot of ChatGPT recommending me?

Treat it as a question for compliance, not a quick social post. FINRA says sharing third-party content means adopting it, and the SEC treats content an adviser endorses or approves after publication as the adviser’s own. An AI answer may also contain claims you cannot substantiate. No regulator has issued guidance on this exact situation.

Does FINRA have specific rules for AI?

FINRA says its rules are technology neutral. Regulatory Notice 24-09 reminds firms that existing rules, including Rule 2210, apply to generative AI, and FINRA’s advertising FAQs say firms are responsible for AI-generated communications just as for those written by people.

Is fixing my information on a directory site risky?

FINRA’s Regulatory Notice 17-18 says that when a firm or representative asks an unaffiliated publisher to correct a factual error in a directory listing they didn’t request, solicit or pay for, the corrected listing doesn’t become the firm’s communication. That guidance covers factual corrections only, not adding praise or marketing claims, and it’s FINRA’s view for member firms. Check your firm’s policy.

What records do I need to keep?

SEC-registered advisers must keep a copy of each advertisement and records supporting testimonials, endorsements and third-party ratings, generally for at least five years. FINRA members must retain retail and institutional communications under SEA Rule 17a-4. Your compliance team will know how your archiving works.

Sources

1. 1AI features and your websiteGoogle Search Central · Updated 10 Dec 2025↩
2. 2Investment Adviser Marketing (final rule, Release No. IA-5653)U.S. Securities and Exchange Commission · 22 Dec 2020↩
3. 3Investment Adviser Marketing, adopting release IA-5653 (full text)U.S. Securities and Exchange Commission · 22 Dec 2020↩
4. 4Risk Alert: Examinations Focused on the New Investment Adviser Marketing RuleSEC Division of Examinations · 19 Sep 2022↩
5. 517 CFR 275.206(4)-1, Investment adviser marketingElectronic Code of Federal Regulations (eCFR) · Current rule text↩
6. 6Rule 2210, Communications with the PublicFINRA · Current rule text↩
7. 7Regulatory Notice 10-06: Guidance on Blogs and Social Networking Web SitesFINRA · 25 Jan 2010↩
8. 8Regulatory Notice 11-39: Guidance on Social Networking Websites and Business CommunicationsFINRA · 18 Aug 2011↩
9. 9Regulatory Notice 17-18: Guidance on Social Networking Websites and Business CommunicationsFINRA · 25 Apr 2017↩
10. 10Advertising Regulation FAQs (including D.8 and B.4 on AI and chatbots)FINRA · AI FAQs posted 10 May 2024↩
11. 11Risk Alert: Additional Observations Regarding Advisers’ Compliance with the Advisers Act Marketing RuleSEC Division of Examinations · 16 Dec 2025↩
12. 12SEC Charges Nine Investment Advisers in Ongoing Sweep Into Marketing Rule Violations (press release 2024-121)U.S. Securities and Exchange Commission · 9 Sep 2024↩
13. 13Regulatory Notice 24-09: FINRA Reminds Members of Regulatory Obligations When Using Generative Artificial Intelligence and Large Language ModelsFINRA · 27 Jun 2024↩
14. 142026 Annual Regulatory Oversight Report: Communications with the PublicFINRA · Dec 2025↩
15. 15SEC Charges Two Investment Advisers with Making False and Misleading Statements About Their Use of Artificial Intelligence (press release 2024-36)U.S. Securities and Exchange Commission · 18 Mar 2024↩
16. 16Examination Priorities, Fiscal Year 2026SEC Division of Examinations · Nov 2025↩
17. 1717 CFR 275.204-2, Books and records to be maintained by investment advisersElectronic Code of Federal Regulations (eCFR) · Current rule text↩

Keep reading

AI searchHow ChatGPT Decides Which Coaches to RecommendShobin K Jose · 9 Oct 2026 · 14 min readKnowledge PanelsWhat Is a Google Knowledge Panel, and Why Do Some People Get One?Shobin K Jose · 19 Oct 2026 · 23 min readGuidesStructured Data in Plain EnglishShobin K Jose · 18 Sep 2026 · 18 min read