The Compliance Tech Retainer. $2,500 a month to start, capped at ten firms. Your Reg S-P and Marketing Rule programs stay true to what the binder says, and you get your weekends back.
What's Covered
When the examiner asks who touches your client data, you hand them a current file instead of starting a scavenger hunt. SOC 2 reports collected, contracts reviewed, refreshed every year.
You can say what data your firm holds, where it lives, and who can see it, and be right.
MFA on everything, a password manager your team actually uses, endpoint protection, encrypted backup, and an on/offboarding checklist that gets run every time, not just when someone remembers.
A plan that names your real systems and your real people, walked through once a year at the table, not a template with someone else's org chart in it.
Your website reviewed and archived the way Rule 204-2 expects, so an old page never becomes a new problem.
The AI tools your team already uses, configured so client data stays out of them, with a written policy that matches how people actually work.
When the document request letter arrives, I assemble the response with you and sit in. A week of pulling files, not a month of panic.
Your website hosted, patched, backed up, and monitored. Folded into the retainer, not a separate bill.
The Rhythm
Week one, the vendor file gets its refresh. New SOC 2 reports come in, and any tool your team adopted last month joins the inventory instead of hiding in someone's browser tabs.
Week two, access review. Every system, every person, MFA confirmed. If the intern who left in June still has a login somewhere, this is the week it dies.
Week three, the website. Marketing Rule review of anything that changed, and the archive updated so Rule 204-2 has what it expects.
Week four, whatever the month surfaced. A new hire to onboard, a tool to configure, a question from your counsel to make true. Each quarter, one bigger piece rotates in: the incident response tabletop, a backup restore test, the annual vendor contract review.
The Cap
I cap the retainer at ten firms so every one of them gets the same person who knows their stack cold and picks up the phone when the exam letter lands. When the cap is full, the list is a wait list.
Thirty minutes. I ask about your setup. You ask whatever you want. If the Reality Check makes sense first, it's credited toward the retainer when you sign within 30 days.
Book a call