Every RIA firm and adviser that joins a custodian's platform or referral network must be vetted before they join and watched after they do. Done by hand, that work consumes most of a compliance team's time and grows in step with the network.
The Problem
A custodian that onboards RIA firms onto its platform and into an affiliated referral network faces three compounding pressures:
- Manual due diligence: public-records research, regulatory filing review, adverse-media searches and flag write-ups take most of the team's time, leaving less for the judgment calls only licensed professionals can make.
- Growth that needs headcount: every new firm adds the same manual work, so growing the network means growing the compliance team at the same rate.
- Many teams, many hand-offs: sales, set-up, compliance, network vetting, marketing and client support each own a piece of onboarding. Every hand-off is a place where a firm can stall unseen.
Why It Matters
Onboarding is only the start. A firm that was clean on day one can face a new enforcement action, a sanctions match, adverse media or a material Form ADV change months later, and a periodic manual review will not catch it in time. Meanwhile, rushed or inconsistent vetting exposes the network to the wrong firms, and slow vetting costs growth because good firms stall in hand-offs. Regulators expect firms to show that every decision was reasoned, consistent and on record. Checklists and spreadsheets rarely hold up to that standard.
How SurgeONE Compliance Solves It
SurgeONE Compliance runs one lifecycle, from invitation to ongoing monitoring. AI does the gathering, screening and first-pass analysis. Your licensed compliance professionals make every decision.
- Journeys that fit the firm. One "start onboarding" step records who the firm is: an existing client or a new one, joining the platform, the referral network or both, and whether it comes through a particular clearing relationship. Those answers choose the journey, so nobody assembles steps by hand. Each step lands with the team that owns it, the next team is notified when it is their turn, and agreements are signed electronically inside the journey. Why it matters: hand-offs stop being places where firms stall unseen.
- Self-service intake with AI pre-fill. The firm completes its own profile and uploads documents through a secure link, and each adviser gets an invitation and portal. From a CRD number, Form ADV, Form CRS and IAPD registration and disclosure data are pulled in automatically. Missing documents are requested and tracked until they arrive. Why it matters: no re-keying by your team.
- Consistent, explainable screening. Every submission is checked against your own red- and yellow-flag criteria for firms and advisers. Each flag carries a plain-language reason tied to its criterion, and the firm is rated red, yellow or green. Compliance manuals, cybersecurity policies and business continuity plans are assessed for gaps against SEC Rule 206(4)-7, Regulation S-P and the NIST Cybersecurity Framework. Why it matters: the same standard applies to every firm, every time.
- People decide. Reviewers see every flag and the AI's reasoning, then confirm or override with the reason recorded. Licensed experts from MGL Consulting can support escalations and overflow as an option. Firms go to a multi-member approval committee, nothing is rejected automatically, and exceptions and appeals have their own route. Approved firms get their own workspace, and approved advisers are set up under them. Why it matters: AI output is decision support, and final supervisory decisions stay with your licensed principals.
- Continuous monitoring with tiered alerts. After approval, SurgeONE re-checks filing changes (SEC EDGAR and IAPD), sanctions and PEP status (World-Check), adverse media (LexisNexis), web and social search, entity details (Experian) and document or condition expiry, on cadences you set per check. Alerts sort themselves: Tier 1 is auto-cleared with the AI's reason logged, Tier 2 goes to your reviewers to confirm or dismiss, and Tier 3 is escalated for full investigation, such as a confirmed sanctions match. A material change can send a firm back for re-review. Why it matters: your team spends time only on alerts that need judgment.
- Built for the exam. Each firm has a document library with version history, and a tamper-evident audit trail records every data pull, AI finding, flag, review, override, approval and alert. Monthly reports cover the alert summary, auto-clear rate, data-query usage, expert hours and an exportable activity log. Paid data sources run on your own vendor subscriptions with encrypted credentials, and a check that cannot reach its source says so rather than reading as "all clear". Why it matters: every finding is explained and every decision is attributed and on record.
How It Works in Practice
Onboarding a new firm. A firm accepts its secure invitation, completes its profile and enters a CRD number. SurgeONE pulls its filings and disclosures, requests any missing documents and checks everything against your red- and yellow-flag criteria. Your reviewers open a firm rated yellow, read the plain-language reason behind each flag, confirm or override it, and send the firm to the approval committee. Once approved, the firm gets its workspace and its advisers are set up beneath it.
Monitoring an approved firm. Months later, a name mismatch in a monthly screening is auto-cleared with the AI's reason logged, and nobody spends time on it. A new adverse-media hit goes to your reviewer queue to confirm or dismiss. A confirmed sanctions match is escalated for full investigation, and the firm can go back for re-review. Every step is attributed and on the record.
The result is more time for judgment, room to grow without a matching rise in manual workload, one clear picture of where every firm and adviser stands, and decisions you can defend.
See SurgeONE Compliance in Action
Ready to onboard faster, monitor continuously and keep every decision on record? Book a SurgeONE Compliance demo or write to info@surgeone.ai.
