StratiFi Blog — Insights for RIAs and Broker-Dealers

Hybrid RIA Compliance: A Handbook for RIAs

Written by Akhil Lodha | 7/31/26, 7:32 AM

Running a hybrid RIA means operating under two rulebooks simultaneously. The advisory side answers to the SEC and the Advisers Act. The brokerage side answers to FINRA. The supervision requirements, disclosure obligations, books-and-records standards, and examination cycles are different under each regime.

Most compliance failures at hybrid firms do not come from ignoring one rulebook. They come from treating the two as separate, rather than managing the points where they intersect. This post covers exactly those intersection points and what a defensible hybrid compliance program looks like in 2026.

What is a Hybrid RIA?

A hybrid RIA is a firm, or an advisor within a firm, that is dually registered: operating as an investment adviser registered with the SEC or a state securities regulator under the Investment Advisers Act of 1940, and simultaneously registered as a broker-dealer with FINRA, or affiliated with one.

For purposes of Form CRS and its instructions, a dual registrant is a firm dually registered as a broker-dealer under Section 15 of the Securities Exchange Act and an investment adviser under Section 203 of the Advisers Act that offers services to retail investors as both a broker-dealer and an investment adviser.

In practice, this means:

The advisory activity is governed by the Investment Advisers Act, the SEC’s 2019 fiduciary interpretation (Release No. IA-5248), and Rule 206(4)-7. The brokerage activity is governed by FINRA rules, including Rule 3110 (Supervision), Rule 3120 (Supervisory Control System), Rule 4511 (Books and Records), and Regulation Best Interest for retail recommendations under the Securities Exchange Act.

Two parallel regulatory relationships, two examination cycles, and two sets of supervisory obligations run simultaneously. The compliance failure mode specific to hybrid firms is not noncompliance with one regime in isolation. It is the gap that opens at the intersection of the two, where the same advisor, the same client, and the same account create overlapping and sometimes competing obligations.

The Two-Rulebook Problem: Where IA Obligations and BD Obligations Run in Parallel

Fiduciary duty vs. Reg BI

On the advisory side, the SEC’s 2019 fiduciary interpretation established that investment advisers owe clients both a duty of care and a duty of loyalty across the entire advisory relationship. The duty is ongoing. It does not attach only to specific recommendations. It governs the full scope of the advisory relationship, including portfolio management, fee structures, and conflict disclosure.

On the brokerage side, Regulation Best Interest, effective June 30, 2020, requires broker-dealers to act in the best interest of retail customers when making a recommendation of a securities transaction or investment strategy.

Reg BI imposes a heightened standard of care at the time of a recommendation to a retail customer and does not impose an ongoing duty to monitor existing accounts, contrasting it with the fiduciary duties of investment advisers.

The hybrid compliance gap this creates is specific and consequential. Whether Reg BI or the IA fiduciary standard applies to a particular recommendation made or advice provided by a dually registered firm and financial professional depends on a facts and circumstances analysis, with no one factor being determinative.

The Commission considers, among other factors, the type of account, how the account is described, the type of compensation, and the extent to which the firm and financial professional made clear to the customer the capacity in which they were acting.

The practical implication: a hybrid advisor making a recommendation to a client with both brokerage and advisory accounts must determine which standard applies to that specific interaction, document that determination, and comply with the applicable standard. The documentation of that determination is itself a compliance obligation.

Supervision: Rule 206(4)-7 vs. FINRA Rule 3110

On the IA side, Rule 206(4)-7 requires registered investment advisers to maintain written compliance policies and procedures, conduct an annual review of their adequacy and effectiveness, and designate a CCO with full responsibility and authority to administer the compliance program.

On the BD side, FINRA Rule 3110 requires member firms to establish and maintain a system to supervise the activities of each associated person that is reasonably designed to achieve compliance with applicable securities laws and FINRA rules. This includes written supervisory procedures (WSPs), designated supervisors for each business line, regular review of transactions, and annual branch inspections for OSJ locations.

The hybrid complexity: both supervisory frameworks must run in parallel. The CCO responsible for Rule 206(4)-7 compliance and the designated supervisory principal responsible for Rule 3110 compliance may or may not be the same person. Whether they are or not, the documentation requirements for each are different.

A supervisory record that satisfies 206(4)-7 does not automatically satisfy Rule 3110, and vice versa. Hybrid firms that maintain a single compliance manual and treat it as satisfying both regimes are producing a document that likely fully satisfies neither.

Books and records: SEC Rule 204-2 vs. FINRA Rule 4511 and SEC Rule 17a-4

On the IA side, SEC Rule 204-2 requires advisers to maintain books and records covering client accounts, advisory contracts, trade orders, and communications related to advisory activities, with defined retention periods for each category.

On the BD side, FINRA Rule 4511 and SEC Rule 17a-4 require broker-dealers to maintain records in a tamper-evident format meeting WORM (Write Once Read Many) storage requirements, with preservation and accessibility standards that differ from the IA recordkeeping regime.

The critical point: a shared technology environment between the RIA and BD operations of a hybrid firm does not mean that records are compliant under both regimes. Each legal entity must meet its own retention format and accessibility standards. Records maintained in a system that is compliant for IA purposes but does not meet Rule 17a-4 WORM format requirements for BD communications remain non-compliant on the BD side, regardless of the firm’s intent.

Disclosure Obligations: Form ADV, Form CRS, and the Conflict Documentation Problem

Most hybrid compliance failures that surface in examinations do so in the disclosure record. Three specific areas account for the majority of disclosure deficiencies at dual-registrant firms.

Form ADV accuracy

Form ADV Part 2 requires advisers to disclose all material conflicts of interest with sufficient specificity for a client to understand their significance. The standard is not a general disclosure. It is a specific, client-understandable disclosure. Saying that the firm “may” engage in certain activities is misleading when the firm is already doing them. Disclosures must accurately describe the conflicts as they exist, not as they might hypothetically arise.

The most common ADV deficiency at hybrid firms: compensation arrangements are described in general terms without connecting them to the specific recommendations affected. Revenue sharing from mutual fund companies is disclosed somewhere in the ADV, but not identified in connection with the specific funds recommended to affected clients.

Form CRS and the consistency requirement

The 2026 SEC examination priorities state that examinations will review the content of a broker-dealer's Form CRS, particularly how the broker-dealer describes relationships and services offered to retail investors, fees and costs, conflicts of interest, and whether the broker-dealer accurately discloses its and its financial professionals’ disciplinary history.

For dual registrants, Form CRS adds a consistency obligation. The combined Form CRS for a dual registrant may not exceed four pages. More importantly, what it says about compensation, conflicts, and services must be internally consistent with what Form ADV says and what marketing materials say. Inconsistencies across these documents are among the most common disclosure deficiencies examiners find.

Action for CCOs: treat Form ADV, Form CRS, and all marketing materials as a single disclosure ecosystem. Every update to any one document must trigger a consistency review across all related documents before the updated version is filed or distributed.

Conflict documentation: The BD-IA arbitrage risk

The SEC’s 2026 examination priorities explicitly flag dually registered adviser/broker-dealers as a conflict-of-interest examination focus, specifically reviewing dual registrants’ account allocation and selection practices and their processes for identifying and mitigating or eliminating conflicts of interest where dual registrants receive financial compensation or other incentives.

A specific conflict pattern the SEC has pursued in recent enforcement: moving client assets from commission-based brokerage accounts to fee-based advisory accounts in a way that benefits the advisor economically without a documented, client-interest basis.

A directly relevant primary source: in February 2025, the SEC charged One Oak Capital Advisors and its investment adviser representative with violations of Advisers Act Sections 204, 206(2), and 206(4) after the firm converted client brokerage accounts to advisory accounts, charging AUM-based advisory fees based on assets, including U.S.

Treasuries and cash, without adequate disclosure that the representatives would receive increased compensation as a result of the conversions. The SEC’s order also found that One Oak violated Rule 204-3 and Rule 206(4)-7.

Documentation requirement for every account migration from brokerage to advisory: a written rationale showing the move was in the client’s best interest at the time it was made, not driven by the advisor's compensation incentive. That rationale must exist in the compliance record before the account is converted.

Common Hybrid RIA Exam Findings

Five categories appear consistently in dual-registrant examination findings and enforcement actions:

1. Share class conflicts

Recommending higher-cost mutual fund share classes in advisory accounts when lower-cost institutional or clean share classes of the same fund were available to the client. This is a recurring examination focus with a substantial enforcement history. The conflict is direct: the advisor may receive more compensation from higher-cost share classes while the client receives a lower net return.

2. Inconsistent Form CRS and Form ADV disclosures

Compensation arrangements, conflict descriptions, and service descriptions that contradict each other across the two disclosure documents. This is the most frequently cited disclosure deficiency in recent dual-registrant examinations and is a specific 2026 examination focus.

3. Inadequate conflict identification and mitigation

The 2026 exam priorities specifically call out RIAs that are dually registered as broker-dealers, particularly where advisory representatives are also dually licensed as registered representatives and receive compensation or other financial incentives that may create conflicts of interest that must be addressed, such as account recommendations and allocations.

Inadequate conflict documentation means the firm can identify the conflict in general terms but cannot demonstrate what it did to mitigate or eliminate it in specific client interactions.

4. Supervisory gap between IA and BD oversight

Running the IA supervision and BD supervision as parallel but disconnected programs, with different documentation systems, different review cadences, and no unified view of the firm’s compliance posture across both regimes.

When an examiner asks for the supervisory record for a specific advisor’s activity in both advisory and brokerage accounts, a hybrid firm with disconnected supervision systems cannot produce it as a coherent record.

5. Books-and-records failures

Records maintained in a system compliant with one regime but not the other. Communications captured for IA compliance purposes, but not meeting the format requirements for BD recordkeeping. Electronic communications from platforms are not captured in the archiving system at all.

Building a Hybrid Compliance Program That Works Under Both Regimes

Five operational principles distinguish hybrid compliance programs that hold up under examination from those that produce deficiency findings:

1. Map every client interaction to the applicable standard before it happens

Account type, relationship type, and the nature of the recommendation determine whether the IA fiduciary standard or Reg BI applies. A hybrid firm must document that mapping in its WSPs and train every advisor on it before client contact begins. When an examiner asks which standard applied to a specific recommendation, the answer must be in the written record, not reconstructed from memory.

2. Maintain separate supervisory documentation for IA and BD activity

A single compliance manual that conflates the two regimes does not satisfy either examiner. The supervisory record for advisory activity and the supervisory record for brokerage activity must be separately maintained and separately producible.

This does not require entirely separate systems, but it does require that the documentation within any shared system is clearly attributed to the applicable regulatory regime.

3. Review Form ADV, Form CRS, and all marketing materials as a single disclosure ecosystem at every update cycle

Any update to fees, services, compensation arrangements, or conflicts in any one document must trigger a consistency review across all three. An examiner who finds that Form ADV discloses a compensation arrangement in terms that contradict what Form CRS says about the same arrangement has found a deficiency before looking at a single client account.

4. Monitor share class exposure and account migration rationale continuously

Every position in an advisory account that is a higher-cost share class when a lower-cost alternative exists is a potential examination finding. Every conversion of a brokerage account to an advisory account must have a written, client-interest rationale dated before the conversion. Both require systematic, continuous monitoring rather than periodic sampling.

5. Run your annual compliance review against both rulebooks

Rule 206(4)-7 requires an annual review of the adequacy and effectiveness of the IA compliance program. FINRA Rule 3120 requires an annual supervisory control review on the BD side.

Both reviews must occur, both must be documented in writing, and findings from each must be cross-referenced so that a deficiency identified on one side of the registration is evaluated for its implications on the other.

How StratiFi ComplianceIQ Reduces the Two-Rulebook Burden

The monitoring challenge specific to hybrid firms is that the portfolio-level compliance obligations, share class conflicts, suitability exceptions, IPS drift, and trading activity surveillance run across both advisory and brokerage accounts simultaneously. A compliance infrastructure that monitors only one side of the registration leaves the other side in a manual review process that cannot keep pace with firm activity.

StratiFi’s ComplianceIQ addresses this in three specific ways relevant to the hybrid firm:

Trading activity and inactivity monitoring across both account types

ComplianceIQ monitors trading activity and inactivity across advisor books regardless of whether the account is advisory or brokerage. Churning signals in discretionary advisory accounts implicate the IA fiduciary standard.

The same signals in brokerage accounts implicate Reg BI and FINRA Rule 2111. Both require documented supervisory review. A monitoring system that covers only one account type leaves the other side of the firm’s obligations unsupervised.

Share class conflict detection across the full book

Share class conflicts in advisory accounts are one of the most consistently cited hybrid firm examination findings. ComplianceIQ flags higher-cost share class holdings where lower-cost alternatives exist, surfacing the exception at the account level with the documentation required to demonstrate that the firm identified the issue and acted on it.

This is the monitoring function that manual, periodic compliance sampling consistently fails to provide at scale.

Continuous audit-ready documentation

Compliance evidence captured as advisory and brokerage decisions are made is more defensible than documentation assembled before an examination. ComplianceIQ produces a continuous, timestamped supervisory record across both sides of the registration, so the documentation exists before the examiner asks for it.

If you want to know more about how StratiFi’s ComplianceIQ supports hybrid RIA compliance across both regulatory regimes, book a demo today.

Summing Up

Hybrid RIA compliance fails not because firms ignore the regulations, but because they treat two parallel regulatory regimes as separate programs rather than managing the points where they intersect.

The same advisor, the same client, and the same account can trigger different and overlapping obligations depending on the account type and the nature of the interaction.

Firms that build their compliance program around those intersection points, with clear standard mapping, separate supervisory documentation, a unified disclosure ecosystem, and continuous portfolio-level monitoring, carry substantially less examination risk. The alternative is discovering the gap when an examiner does.

FAQs - Hybrid RIA Compliance

What is a hybrid RIA?

A hybrid RIA is a firm or advisor dually registered as an SEC investment adviser under the Advisers Act and as a broker-dealer with FINRA, offering both advisory and brokerage services to clients simultaneously under two parallel regulatory frameworks.

How is a hybrid RIA different from a pure RIA?

A pure RIA operates solely under the Investment Advisers Act and the SEC’s fiduciary standard. A hybrid RIA also operates under FINRA rules, Regulation Best Interest, and the additional supervisory, disclosure, and books-and-records requirements that apply to registered broker-dealers, running two parallel compliance programs simultaneously.

What regulatory obligations does a hybrid RIA have?

A hybrid RIA must comply with Rule 206(4)-7 (IA compliance program), SEC fiduciary duty, Rule 204-2 (IA books and records), and Form ADV on the advisory side, and with FINRA Rule 3110 (supervision), Rule 4511 (books and records), Regulation Best Interest, and Form CRS on the brokerage side simultaneously.

What is the difference between fiduciary duty and Reg BI for hybrid advisors?

The IA fiduciary standard is ongoing and governs the entire advisory relationship. Reg BI applies at the time of a specific recommendation to a retail customer in a brokerage account and does not impose a continuous monitoring obligation. Which standard applies to a hybrid advisor’s specific interaction depends on the account type, capacity, and nature of the recommendation.

What are the most common compliance findings at hybrid RIA firms?

Share class conflicts, inconsistent Form CRS and Form ADV disclosures, inadequate conflict identification and documentation, supervisory gaps between IA and BD oversight, and books-and-records failures where records meet one regime’s requirements but not the other’s.

What is BD-IA arbitrage, and why is it a regulatory concern?

BD-IA arbitrage refers to moving client assets from commission-based brokerage accounts to fee-based advisory accounts in a way that increases advisor compensation without a documented, client-interest basis. The SEC pursued this pattern in enforcement in February 2025 (One Oak Capital Advisors, SEC Release IA-6855) and named dual-registrant account allocation practices as a 2026 examination focus.

How should a hybrid RIA handle Form CRS and Form ADV disclosure consistency?

Treat both documents and all marketing materials as a single disclosure ecosystem. Every update to any one document must trigger a consistency review across all related documents. Descriptions of compensation, conflicts, and services must be internally consistent across Form ADV, Form CRS, and all client-facing materials before any updated version is filed or distributed.

What supervision requirements apply to the brokerage side of a hybrid RIA?

FINRA Rule 3110 requires written supervisory procedures, designated supervisors for each business line, regular review of transactions, and annual branch inspections for OSJ locations. FINRA Rule 3120 requires an annual supervisory control review.

Both must run in parallel with the Rule 206(4)-7 annual compliance review on the IA side, with separate documentation for each.