FINRA compliance at scale means managing Rule 2210 review, approval, and record-keeping across a growing volume of marketing content and channels – not just knowing the rule itself. For a broker-dealer, almost everything marketing produces counts as a communication with the public, which means almost all of it falls under FINRA Rule 2210. Most firms know the rule well enough. Where FINRA compliance at scale gets difficult is in the day-to-day operation of it: a rising volume of content, spread across more channels, each piece needing the right level of review and approval before it goes out, and a clean record once it has. This guide walks through how Rule 2210 works, and how a firm achieves FINRA compliance at scale – moving marketing through review, approval, and record-keeping as volume grows.

What is FINRA and what does it regulate?

The Financial Industry Regulatory Authority is the self-regulatory organization that oversees broker-dealers in the United States. It writes rules, examines firms, and brings enforcement actions.

For marketing and communications teams, the rule that matters most is Rule 2210, which governs communications with the public. It sets the standards for content, the level of review required, and the filing and record-keeping that follow.

Rule 2210: communications with the public

Rule 2210 sorts communications into three categories, and the category determines the obligations. 

• Retail communications: content distributed or made available to more than 25 retail investors within any 30-day period. This is where most marketing sits, including websites, ads, brochures and most social content.

• Correspondence: written or electronic communication to 25 or fewer retail investors within any 30-day period.

• Institutional communications: content distributed only to institutional investors, not retail.

Across all categories, the content standards are consistent. Communications must be fair and balanced, must provide a sound basis for evaluating any product or service, and must not be misleading or omit material information. Projections of performance are prohibited with narrow exceptions, and exaggerated or unwarranted claims are prohibited outright.. 

Approval, filing and record-keeping

The category drives the process.

Retail communications generally require approval by an appropriately qualified principal before use. Specific retail communications must also be filed with FINRA, in some cases before first use and in others within a set window afterwards, depending on the content and the firm's history. 

Underneath all of it sits record-keeping. Firms are expected to retain communications, along with the name of the principal who approved them and the dates of approval and use, for the required retention period. 

The rules that shape broker-dealer marketing, at a glance.

If your firm also operates on the adviser side, the SEC Marketing Rule governs that activity in parallel. For the wider context, see the financial services industry page and our guide to fintech marketing compliance.

Common FINRA marketing violations

The recurring enforcement themes are less about exotic rule breaches than about ordinary content moving faster than review can keep up. The most common is the claim that leads with upside and underweights risk, or reaches for promissory or exaggerated language; fair and balanced is the standard, and it is the first thing to slip under marketing pressure. Close to it sits performance shown without the context, balance or disclosure the rule requires, which is a frequent source of findings in examinations. And underneath both is the procedural failure that makes them possible, a piece that goes live without the principal sign-off it needed, usually because it shipped through a channel that sat outside the formal review path. That last one is the bridge to the real subject, which is the workflow itself.

Social media and FINRA

Social media is where the categories get tested. A static firm post is one thing. Interactive comments, shared third-party content, and material posted by registered representatives on their own accounts raise questions about what counts as a retail communication, what needs prior approval, and what has to be retained. 

The practical problem is surface area. Every channel a firm adds multiplies the volume of communications that need the right review and a retained record, and informal channels are exactly where content tends to escape the workflow.

Scaling FINRA communications review

The real test of FINRA compliance is applying Rule 2210 consistently to a rising volume of content while keeping principal review from becoming a bottleneck. It helps to follow a single piece through the workflow that should catch it.

A draft starts life somewhere in marketing. The first thing a working process settles is which category it belongs to, because a retail communication, a piece of correspondence and an institutional communication carry different obligations, and that classification sets everything that follows. Before the piece reaches a principal, the content standards are applied at the draft stage, where fair and balanced presentation, the right disclosures and any exaggerated or promissory language can still be corrected cheaply. The principal then approves what those standards have already cleared, spending their time on the genuine judgement calls. As the piece goes out, the record forms alongside it: who approved it, when, and on what basis, retained and retrievable for the period the rules require. The same path has to hold on every channel the firm uses, social included, since the communications that escape the workflow are the ones that surface later as findings.

Haast sits inside that workflow. It is an AI marketing compliance platform that reviews communications against your firm's own reading of Rule 2210, tuned to the risk posture your compliance team has chosen, and built to support the sequence above rather than stand outside it. It checks a draft before use, hands the principal content that has already passed the repeatable checks, keeps watching live and social channels for drift after approval, and writes each step into a retained, examination-ready record as it happens.

What that changes operationally is where the time goes. The exaggerated or unbalanced claim is caught before a principal opens the draft, so review hours land on judgement rather than obvious fixes, and performance content missing its required context is flagged at that same stage instead of in an examination. Social posts stay under continuous watch, which closes the channel where communications most often slip past review. Haast carries the repeatable load and keeps the approval trail consistent, while your principals stay responsible for the decisions and the legal calls. Implementation is run by Haast's in-house legal team, who encode your policies and risk posture into the platform.

See how Zurich cut compliance review times by 50% using the same compliance AI platform. If you are weighing up options, read our guide to the best marketing compliance software.

To see how Haast supports FINRA 2210 review and principal-approval workflows, book a product tour today.

Frequently asked questions

What is FINRA Rule 2210? The rule that governs broker-dealer communications with the public. It sets content standards and sorts communications into retail, correspondence and institutional categories, each with its own approval and filing obligations.

What is the difference between retail communications and correspondence? Broadly, a retail communication reaches more than 25 retail investors in a 30-day period, while correspondence reaches 25 or fewer. Retail communications generally require principal approval before use.

Do retail communications need to be filed with FINRA? Some do. Depending on the content and the firm's filing history, certain retail communications must be filed before first use or within a set window afterwards.

Does Rule 2210 apply to social media? Yes. Social content can be a retail communication, and questions of prior approval and record-keeping depend on whether it is static or interactive and who posts it.

What records do firms need to keep for FINRA communications? Firms are expected to retain the communication, the approving principal, and the relevant dates, for the required retention period.