Compliance Documentation After a Client Death — The Financial Advisor's CRM and Audit Trail

When FINRA or the SEC examines how your firm handled a deceased client's estate transition, they aren't reading your memory of events. They're reading your CRM entries, email chains, and compliance logs. What isn't documented didn't happen — and what is documented poorly looks like something to hide.

What the Regulators Actually Review

Regulatory examinations of estate transitions focus on a specific question: did the firm follow its own written supervisory procedures, and did it comply with applicable rules? The evidence they pull comes from three sources.

CRM records. Every interaction with the decedent's family, executor, estate attorney, or other parties should be time-stamped and detailed. Regulators look for gaps — long periods between the death notification and the account freeze, or distribution requests that were processed without documented verification of the executor's authority.

Communication archives. Under SEC Rule 17a-4, all written and electronic business communications must be preserved. This includes emails to and from the executor, internal compliance memos about the account, and even text messages if your firm uses a compliant archiving platform. The retention requirement is at least three years, with the two most recent years maintained in an easily accessible location.

Account activity logs. The custodian's transaction history shows what happened and when. If a trade was executed in the account between the date of death and the date the executor's authority was verified, the examiner will ask to see the authorization — and your CRM notes had better explain it.

Building the Documentation Trail in Real Time

The compliance trail starts the moment your firm receives notification of the death, and it should capture every material event in the estate transition sequence.

Death notification entry. Record how the firm learned of the death (incoming call from spouse, email from estate attorney, obituary notice), who took the notification, and the exact date and time. Note the immediate actions taken: compliance notified, custodian notified, account freeze initiated, open orders canceled.

Account freeze confirmation. Document that the freeze was applied, which accounts it covers, and confirmation from the custodian that their side is frozen. If there was any delay between notification and freeze, explain why.

Communication log entries. Every phone call, email, and in-person meeting with the family or estate professionals gets its own entry. For phone calls, record the date, time, duration, participants, and a summary of what was discussed. For distribution requests, record what was requested, by whom, what documentation was provided, and the decision (approved, pending documentation, denied).

Document receipt log. When the death certificate arrives, log it. When the letters testamentary arrive, log the date received, the issuing court, the named executor, and the date of issuance. When the executor's KYC/CIP verification is completed, log the verification method and outcome.

Decision documentation. Any decision that involved judgment — whether to accept slightly expired letters testamentary, whether a distribution request from one co-executor is valid without the other's signature, whether a trusted contact should be called about exploitation concerns — needs a CRM note explaining the decision, the reasoning, and who made it.

Six Years for Core Account Records

SEC Rule 17a-4(c) requires broker-dealers to retain all account cards, customer agreements, and records relating to the terms and conditions of an account for a minimum of six years after the account is closed. For a deceased client's account, the six-year period runs from the closing of that account; the date of death is not a substitute for the account's close date.

For firms that also operate as registered investment advisers, the SEC's books and records rule (Rule 204-2 under the Advisers Act) imposes additional, record-specific retention periods. Its general period is five years, with the first two years in an appropriate office of the adviser.

Your compliance department should maintain a deceased-client file — physical or digital — that bundles all documentation for the estate transition in one reviewable location. This includes the death certificate, letters testamentary, KYC documents for the executor and beneficiaries, all distribution authorizations, date-of-death valuation reports, and the complete CRM communication log.

Common Documentation Failures

The mistakes that create regulatory exposure are usually omissions, not fabrications:

Undocumented verbal authorizations. An executor calls and verbally approves a distribution, and the advisor processes it without a written record of the call. If the distribution is later disputed, there's no evidence the instruction was received from an authorized person.

Missing freeze timestamps. The account was frozen, but nobody logged exactly when — creating ambiguity about whether transactions executed in the interim were authorized or not.

Incomplete KYC for beneficiaries. Assets were transferred to beneficiary accounts that were opened without full identity verification, creating AML compliance gaps.

The Financial Advisor's Deceased Client Protocol includes a pre-built compliance documentation template that maps every required CRM entry to its regulatory basis — so nothing falls through the cracks during the operational pressure of an estate transition.