We test capture and retrieval for the channels your CCO and counsel identify, and we fix the configurations we manage.
When the archive vendor says the texts were never in scope, we call them.
Our managed IT has no long-term contract and no onboarding fee, and clients stay for decades anyway.
Our clients' systems are watched around the clock by a staffed security operations center, every day of the year. Very few IT companies offer that to a small business, and we do.
We do not advertise and we do not do hard sells. Almost every client has been with us more than ten years. Most have been with us about twenty.
We resell nothing and take no vendor commissions, so nobody pays us to recommend their product.
Within our scope, we document the domains and administrative accounts your business controls. That documentation is yours whenever you want a copy, including when you leave.
An email archive can be completely current and still miss text messages, WhatsApp and personal email. In one 2024 SEC action, adviser firms admitted their employees had sent and received off-channel messages about recommendations and advice. If your firm has decided a channel must be captured, a business message sent there can still be missing when the connector or the employee's workflow does not preserve it.
The question is not how big the archive is. It is whether the channels you decided to capture are connected and producing retrievable records.
We test those channels and hand the technical results to the people making the compliance decision.
The amended Regulation S-P (SEC Release IA-6604) was published in the Federal Register on 3 June 2024. Larger entities had 18 months, to December 2025; for a registered investment adviser, larger means $1.5 billion or more in assets under management, which the SEC estimated covered 23% of RIAs as of September 2023. Smaller entities had 24 months, to June 2026. Both windows have closed.
Whether your firm, or a particular vendor, system or incident, is covered is your CCO's and counsel's call. If they determine the amendments apply, then within an agreed scope we keep a technical vendor inventory, record the notification contacts and timeframes they identify, and test whether the incident runbook actually reaches the right people.
Your CRM and your portfolio system can share an owner. Redtail is part of Orion, whose platform also covers reporting, trading, planning and compliance. Tamarac and MoneyGuide are part of Envestnet. Rebalancing in Orion Eclipse, Tamarac Trading or iRebal adds one more place where a proposal, a transmitted order and an allocation are three different records.
Each platform tends to manage its own access, so a departed employee's account can stay active if nobody owns that platform's offboarding step. Losing custodian or CRM access can interrupt client service if nobody wrote down the administrative recovery path and the vendor contact.
For the systems in our agreed scope, we manage identity, permissions, Microsoft 365 or Google Workspace, device security, the network and the phones. Know which accounts your firm owns and which a custodian, broker-dealer or other vendor controls, before anybody needs to cross that line.
Ask us anything. One IT question, answered straight, no charge and no pitch.
Tell us which channel worries you and what happens when you try to retrieve its records.
Do you already have someone doing your IT? Ask anyway. If they have it handled, that is what you will hear.
Call (817) 265-5000 or email info@bdunn.com.