How Long Must a FINRA Member Firm Keep Complaint Files?

A FINRA member firm must keep complaint files for at least four years. That’s the floor set by FINRA Rule 4513, and it covers both the written customer complaint itself and any record of what the firm did in response.1Financial Industry Regulatory Authority. FINRA Rule 4513 – Records of Written Customer Complaints Four years is a minimum, not a target, and several other rules can extend the effective retention period well beyond it.

What Triggers the Four-Year Clock

Rule 4513 defines a customer complaint as any written grievance from a customer, or someone authorized to act on the customer’s behalf, involving the firm’s activities or the conduct of an associated person. The grievance has to relate to the solicitation or execution of a transaction, or to the handling of the customer’s securities or funds.1Financial Industry Regulatory Authority. FINRA Rule 4513 – Records of Written Customer Complaints

The format doesn’t matter. A letter, an email, a text message, or a social media post directed at the firm all qualify if they express dissatisfaction with a securities-related activity. What matters is the customer’s intent to raise a grievance, not the channel or the tone. A firm can’t dismiss a message as too informal to count.

This creates a practical problem when complaints arrive on personal devices or unapproved messaging apps. Between 2021 and 2024, 77 FINRA member firms settled enforcement actions with the SEC for failing to maintain business-related communications sent through off-channel means.2Financial Industry Regulatory Authority. SEC Off-Channel Communications Settlements – SRO Collateral Consequences The recordkeeping obligation attaches to the complaint whether or not the firm has set up a system to capture the channel it arrived on.

What the File Has to Contain

Two things go in the file for the full four years: the written complaint, and a record of any action the firm took in response. That’s true even if the firm investigates and concludes the allegation has no merit, and true even if the matter resolves quickly. Both pieces stay.

Rule 4513 also dictates where the file has to be accessible. Complaint records must be maintained at each Office of Supervisory Jurisdiction to which they relate. A firm can meet this either by physically storing the file at the OSJ or by keeping it elsewhere and making it promptly available to the OSJ on request.1Financial Industry Regulatory Authority. FINRA Rule 4513 – Records of Written Customer Complaints

The clock doesn’t reset or stop if the associated person named in the complaint leaves the firm. The record must be preserved for the full four years regardless of departures.

When Four Years Isn’t Long Enough

Four years is the floor. Two situations regularly push the effective retention period higher.

The first is active litigation or regulatory inquiry. If a complaint has generated ongoing legal or regulatory activity, the firm should keep the records until those matters fully close, even if that stretches past year four.

The second is that surrounding records live under longer retention rules. SEC Rule 17a-4 requires preservation of core business records like blotters, ledgers, and trade confirmations for at least six years, with the first two years in an easily accessible place.3eCFR. 17 CFR 240.17a-4 – Records to Be Preserved by Certain Exchange Members, Brokers and Dealers A separate category under the same rule, including copies of business communications, written agreements, and powers of attorney, must be kept for at least three years. FINRA Rule 4511 adds a catch-all: any FINRA-required books and records without a specific retention period elsewhere must be preserved for at least six years, and all records must be maintained in a format that complies with SEC Rule 17a-4.4Financial Industry Regulatory Authority. FINRA Rule 4511 – General Requirements

The practical result: a firm that destroys a complaint file at year four but still holds the trade confirmations and account statements behind it may find itself answering questions about a transaction with two years’ worth of underlying documentation and no complaint file to explain what happened.

Electronic Storage Rules

Most firms store complaint records electronically, which brings SEC Rule 17a-4’s storage standards into play. The rule historically required a write-once, read-many (WORM) format that prevented any alteration or deletion. An SEC amendment now lets firms choose between WORM and an audit-trail alternative.5U.S. Securities and Exchange Commission. Amendments to Electronic Recordkeeping Requirements for Broker-Dealers

Under the audit-trail option, the recordkeeping system must preserve a complete, time-stamped audit trail for the full retention period. That trail has to capture every modification or deletion, the date and time of each change, the identity of the person who made it, and enough information to reconstruct the original record.5U.S. Securities and Exchange Commission. Amendments to Electronic Recordkeeping Requirements for Broker-Dealers

Whichever method is used, Rule 17a-4 imposes several additional requirements. A duplicate copy of each electronic record has to be maintained separately from the original. Both originals and duplicates must be organized and indexed, and both the records and their indexes must be available for regulator examination at any time. The firm has to be able to produce records promptly in a usable electronic format on request. And firms that store any part of their records exclusively in electronic form must designate at least one third party who files an undertaking with the firm’s examining authority, agreeing to furnish regulators with access to those records on reasonable request.3eCFR. 17 CFR 240.17a-4 – Records to Be Preserved by Certain Exchange Members, Brokers and Dealers

Retention Is Separate From Reporting and Disclosure

Keeping a complaint on file isn’t the same as reporting it. FINRA Rule 4530 imposes separate obligations to report certain complaints to FINRA on 30-day and quarterly cycles, and a firm that maintains its four-year file perfectly can still face discipline for failing to report.6Financial Industry Regulatory Authority. FINRA Rule 4530 – Reporting Requirements

The four-year retention period also doesn’t govern how long a complaint stays visible on an individual broker’s record. Sales-practice complaints disclosed on Form U4 have their own reportability window (two years, subject to settlement thresholds and litigation triggers), and CRD/BrokerCheck disclosure timelines run independently of the firm’s file retention.7Financial Industry Regulatory Authority. Form U4 and U5 Interpretive Questions and Answers Compliance with Rule 4513 answers only the recordkeeping question. Reporting and broker-level disclosure are handled elsewhere.