SOP Management & Workflow Documentation3 min readUpdated September 2026

The Client Onboarding Checklist RIAs Can't Afford to Skip

An advisor opens a new client account, collects most of the required know-your-client information over a phone call, and finishes the file later from memory, missing a risk-tolerance nuance the client actually mentioned. A different advisor posts a client testimonial on social media without routing it through compliance first, not realizing the specific disclosure requirements that apply to that kind of content.

Both mistakes are common, survivable in isolation, and exactly the kind of thing an examiner or a client's own attorney looks for after something else has already gone wrong. RIAs run on trust and on records, and a checklist is what turns 'we always do that' into something you can actually show.

Vendors Covered in this Article

Disclosure: We may earn a commission if you buy through some links on this page. It doesn't change what we recommend.

Making the KYC File Complete Before the Account Opens

A new-client checklist that requires every know-your-client field, investment objectives, risk tolerance, time horizon, liquidity needs, to be captured and attached before an account is opened prevents the file from being finished later from memory, when details have already faded or been generalized. Require the client's own confirmation of the recorded information, not just the advisor's notes from the conversation.

Build in a review step for anything unusual: a client with a concentrated position, an unusual liquidity need, or stated objectives that don't obviously match the products being discussed. That kind of mismatch is easier and cheaper to address at intake than after it shows up in an account review months later, once recommendations have already been made against it.

A new-client checklist should keep the account closed until:

  • Every know-your-client field is captured and attached, including investment objectives, risk tolerance, time horizon, and liquidity needs.
  • The client has personally confirmed the recorded information, so the file does not rest only on the advisor's notes from a call.
  • Anything unusual, such as a concentrated position or objectives that do not match the products discussed, has had a separate review step.
  • The completed file is reviewed while details are fresh, not finished later from memory.

Building the Investment Policy Statement as a Required Step, Not an Afterthought

An investment policy statement drafted quickly to satisfy a compliance requirement, rather than genuinely reflecting the client's actual circumstances, tends to drift out of alignment with what the account is actually doing. A checklist that requires the IPS to be reviewed against the account's current allocation on a fixed schedule, with any mismatch documented and either the account or the IPS updated, keeps the two from quietly diverging over time.

Routing Marketing Content Through Compliance Before It's Public

Marketing communications from an investment advisor, testimonials, performance claims, and general marketing content, carry specific disclosure and substantiation requirements, and what's permissible has changed in recent years as the rules have been updated. A checklist requiring every piece of marketing content, including individual advisor social media posts, to go through a documented compliance review before publication catches a disclosure gap before it's public rather than after a regulator finds it. Confirm the current requirements that apply to your specific content with your compliance counsel, since the rules and their interpretation continue to evolve.

Keeping the Books and Records an Examiner Will Actually Ask For

An advisor's recordkeeping obligations cover more than the account statements themselves, communications with clients, advertising, and the basis for investment recommendations all typically need to be retained and readily producible. A checklist tied to each of those categories, confirming what's been retained and where, turns an examination request into a quick export instead of a scramble across several systems and several people's inboxes. Confirm your firm's specific retention periods and categories with your compliance counsel, since requirements vary by the type of record and have changed over time.

What a Thin Compliance Process Actually Costs a Small RIA

A small RIA often runs with one person wearing the advisor, compliance, and operations hats at once, and that concentration is exactly what a checklist is meant to protect against, not by adding headcount, but by making sure the required steps happen the same way regardless of how busy that one person is in a given week. The firms that handle an examination smoothly are usually the ones where the checklist was already being followed before the examiner asked to see it, not the ones that reconstruct a process retroactively once a letter arrives.

Reconciling Fee Billing Against What the Client Actually Agreed To

An advisory fee calculated against the wrong account value, the wrong tier, or a fee schedule that changed without the client's file being updated is a quiet source of client complaints and, if it happens at scale, a real regulatory problem. A checklist requiring each billing cycle's calculation to be checked against the client's current signed fee agreement, not against whatever the system defaulted to, catches a discrepancy before it goes out on an invoice rather than after a client questions it. Run the same check whenever a fee schedule changes firmwide, since that is exactly the moment a client's file is most likely to be updated late, and the moment a small, honest oversight is most likely to be mistaken for something worse.

Executive Capability Standard

What Good Looks Like

A disciplined RIA completes and confirms a full KYC file before any account opens, reviews the investment policy statement against actual account activity on a fixed schedule, and routes every marketing communication through a documented compliance review before it's public.

Building The Capability (5-Stage Skill Ladder)

1. Learn:Review the last several client files and marketing pieces for anything incomplete, inconsistent, or never formally reviewed, and trace each gap back to the missing step.
2. Do Manually:Collect KYC information and review marketing content informally, relying on the advisor's own judgment about what needs a closer look.
3. Delegate:Assign a compliance-focused role to review every new client file and every marketing piece before it's considered final or published.
4. Automate:Run KYC intake, IPS review, and marketing compliance review as tracked workflows with required confirmations and a fixed review schedule.
5. Buy:Connect the KYC and IPS workflows to your portfolio management system so an account's actual allocation can be compared against its stated objectives automatically.

How to Get Started

Disclosure: We may earn a commission if you buy through some links on this page. It doesn't change what we recommend.

Process Street

Use it to run KYC intake, investment policy statement review, and marketing compliance sign-off as tracked, documented workflows.

Visit Process Street→

Frequently Asked Questions

How much of the KYC process can happen over the phone versus in writing?

The conversation itself can happen by phone, but the final record should be confirmed with the client in writing, so there's a document both sides agree reflects what was discussed. Relying only on the advisor's notes from a call leaves the file vulnerable to gaps or misunderstandings that surface later.

Does every social media post from an advisor need compliance review?

Any content that could reasonably be seen as marketing the advisor's services, which covers most professional posting, should go through review given current disclosure and substantiation requirements. Confirm the specific line your firm draws with compliance counsel, and build that line into the checklist so advisors aren't each interpreting it differently.

How often should an IPS be reviewed against actual account activity?

On a fixed schedule, annually at minimum for most accounts, and sooner after any significant change in the client's circumstances or the account's allocation. A schedule that depends on someone remembering to check tends to slip during busy periods, which is exactly when a mismatch is most likely to go unnoticed.

About the numbers

This guide doesn't quote a sourced benchmark. Figures in it are estimates or general guidance, so check them against your own numbers.

Related Guides