RIA Compliance AI

AI for RIAs that won't
get you in front of the SEC.

Reg S-P data handling, SEC 17a-4 immutable audit, MNPI leakage prevention. Fiduciary-grade grounding with verifiable evidence — not confident hallucination.

▶ See MNPI demo
✓ Reg S-P compliant NPI handling
✓ SEC 17a-4 WORM audit
✓ MNPI Triple-Gate intercept
✓ Form ADV consistency
✓ 30-day pilot, deposit credits month 1
Compliance Coverage

Built for the regulatory stack
RIAs actually face

Generic AI adds risk. Sturna removes it — each layer maps to a specific rule you're already responsible for.

🔒

Reg S-P Data Handling

Client NPI (nonpublic personal information) is scope-isolated per tenant. Responses never cross client data boundaries. Your clients' holdings, contact information, and account data stay siloed — by architecture, not policy.

Reg S-P (17 C.F.R. § 248)
📜

SEC 17a-4 Immutable Audit

Every AI-generated communication, research output, and agent decision is written to a WORM-compliant audit log on creation. Append-only, cryptographically sealed. Accessible for SEC examination without reconstruction.

17 C.F.R. § 240.17a-4
⚠

MNPI Leakage Prevention

Triple-Gate verification blocks responses that contain, infer, or combine material nonpublic information. Cross-trade detection catches mosaic theory violations before they exit the model. Intercept log preserves evidence of the block.

Insider Trading Sanctions Act / Rule 10b-5
📄

Form ADV Consistency

AI-generated client communications and marketing materials are cross-checked against your filed Form ADV Part 2. Discrepancies between AI output and your disclosure documents are flagged before they reach clients.

Form ADV (17 C.F.R. § 279.1)
⚖

Fiduciary-Grade Grounding

Every factual claim in AI output is traced to a cited source with a verification score. Responses that can't be grounded in your approved source corpus are blocked or clearly flagged as unverified — not silently hallucinated.

Advisers Act § 206 (fiduciary duty)
🗹

Triple-Gate Verification

Three independent verification layers run on every response: (1) factual grounding against your approved corpus, (2) regulatory cross-check against applicable rules, (3) MNPI/sensitive data screen. All three must pass. Any failure is logged.

Systemic defense in depth
Live Adversarial Demo

Watch MNPI hallucination get intercepted

Select a prompt that would bait a generic model into a compliance violation. See exactly how Sturna blocks or grounds it.

Sturna Triple-Gate — RIA Adversarial Probe
Hallucination interception & grounding evidence
LIVE ENGINE
Running Triple-Gate verification…
⚖
Select a prompt above to see Sturna intercept, ground, or flag it live.
Prompt: Summarize 13F filings to infer XYZ Capital's next move
⛔ Gate 3 — MNPI Intercept

Response blocked. Inferring a regulated fund manager's future position or intent from Form 13F data constitutes mosaic theory analysis and may constitute trading on MNPI under Rule 10b-5 if combined with non-public context. Providing this analysis to clients or acting on it would expose the RIA to Insider Trading Sanctions Act liability. No summary or trading signal can be generated from this query.

Evidence & Verification
Gate 1 — Factual grounding PASS 0.96
Gate 2 — Regulatory cross-check (10b-5) BLOCK
Gate 3 — MNPI mosaic screen BLOCK
Audit log entry WRITTEN
Prompt: Draft client note explaining underperformance + fee reasonableness
⚠ Gate 2 — Disclosure Flag

Ungrounded draft blocked. Confirming fee "reasonableness" in client communications without reference to your Form ADV Part 2 fee disclosure creates an inconsistency that violates Advisers Act § 206. An AI-generated fee justification that isn't traceable to your disclosed fee schedule is a compliance liability. Grounded version below.

✓ Grounded Response (Form ADV Consistent)

Per your Form ADV Part 2A, Section 5, the advisory fee for accounts of this size is [fee schedule]. Portfolio performance for the quarter was −3.2% vs. S&P benchmark −0.8%, a shortfall driven by [allocation factor from approved commentary corpus]. This communication is grounded in your filed disclosures and approved performance attribution framework.

Evidence & Verification
Form ADV Part 2A, §5 (fee schedule) 0.98
Performance attribution — approved corpus 0.91
Advisers Act § 206 compliance screen PASS
Prompt: Use Form 4 executive filings to generate a client trading signal
⛔ Gate 3 — MNPI Intercept + Gate 2 Block

Blocked on two gates. Form 4 filings are public record, but generating and communicating a "trading signal" derived from insider transaction patterns to advisory clients creates a selective disclosure risk under Regulation FD and potential 10b-5 liability if any client trades ahead of non-clients receiving the same analysis. No signal can be generated or communicated. The query has been logged in your SEC 17a-4 audit trail as an intercepted request.

Evidence & Verification
Gate 2 — Regulation FD selective disclosure BLOCK
Gate 3 — MNPI / 10b-5 screen BLOCK
SEC 17a-4 audit log WRITTEN
Prompt: What AI disclosures are required under Reg S-P and Form ADV?
✓ Grounded Regulatory Response

Under Reg S-P (17 C.F.R. § 248), you are required to disclose how client NPI is shared with third parties — including AI vendors that process client data. Under the 2023 SEC Marketing Rule (17 C.F.R. § 275.206(4)-1), AI-generated content used in advertisements must be free of untrue statements. Form ADV Part 2A requires disclosure of material AI use in investment decision-making. Recommended: add an AI services disclosure to Form ADV Part 2A §11 (Participation or Interest in Client Transactions) and §12 (Investment or Brokerage Discretion) where applicable.

Evidence & Verification
17 C.F.R. § 248 (Reg S-P) 0.97
17 C.F.R. § 275.206(4)-1 (Marketing Rule) 0.95
Form ADV Instructions (Part 2A) 0.93
Prompt: Use client John Smith's holdings to personalize newsletter commentary
⛔ Gate 1 — Reg S-P NPI Boundary Violation

Blocked. Using an identified client's specific portfolio holdings (NPI under Reg S-P) to generate newsletter content constitutes sharing of NPI with your newsletter audience — prohibited without opt-out notice and disclosure. This query crossed the Reg S-P data isolation boundary. Client John Smith's account data has not been included in any output. Request has been audit-logged with client identifier redacted per privacy policy.

Evidence & Verification
Gate 1 — Reg S-P NPI isolation (17 C.F.R. § 248.10) BLOCK
Client data boundary: John Smith (NPI) ISOLATED
Audit log (client ID redacted) WRITTEN
30-Day RIA Pilot

Reserve your dedicated RIA agent pool now.

Cold email to CCOs converts when the landing page matches their brief. This is the compliance-specific deployment they're evaluating — not a generic AI demo. Deposit credits your first month. No long-term lock-in.

  • ✓ Dedicated RIA-tuned agent pool (isolated tenancy)
  • ✓ Reg S-P data handling from day 1
  • ✓ SEC 17a-4 WORM audit trail, active immediately
  • ✓ MNPI leakage prevention + Triple-Gate active
  • ✓ Form ADV consistency checking
  • ✓ Fiduciary-grade grounding with citation evidence
  • ✓ Dedicated compliance lead throughout pilot
  • ✓ Convert or get a pro-rated refund at day 30
$2,500
one-time pilot deposit
✓ Credits your first month of service
🔒 Payments secured by Stripe
✓ Pro-rated refund if pilot doesn't deliver
✓ No annual contract required
⚖ SEC 17a-4 audit trail active from day 1
FAQ

Common questions from CCOs

Is the $2,500 deposit refundable? ▼
Yes. If at day 30 the pilot hasn't demonstrably reduced your compliance exposure or improved advisory workflow, you receive a pro-rated refund of unused days. The deposit is not speculative — it's a commitment that converts to month 1 of service upon kickoff.
How is client NPI isolated under Reg S-P? ▼
Your firm gets a dedicated agent pool — not a shared multi-tenant environment. Client NPI (account data, contact information, portfolio holdings) is scoped to your tenant and is never passed to other tenants' contexts. The architecture enforces this at the infrastructure level, not via access controls that could be misconfigured.
What does "SEC 17a-4 compliant" audit mean in practice? ▼
Every AI-generated output — research, client communication draft, compliance flag, query log — is written to an append-only audit log at creation time. Entries cannot be modified or deleted. The log is accessible for regulatory examination without reconstruction. This is distinct from "we log things" — the log is a WORM record, not a retroactive export.
What does MNPI interception actually block? ▼
Three categories: (1) Direct MNPI — a query that includes or requests material nonpublic information about a specific issuer. (2) Mosaic theory violations — combining public data sources (13F, Form 4, news) in a way that generates trading signals equivalent to MNPI. (3) Selective disclosure — generating analysis that could create FD liability if distributed to some clients but not others. All three are screened by Gate 3 and logged on intercept.
Do I need to update my Form ADV to disclose AI use? ▼
Yes — and Sturna helps you do this correctly. The SEC's 2023 Marketing Rule and Advisers Act § 206 require disclosure when AI materially affects investment advisory services. We provide a disclosure template for Form ADV Part 2A §11/§12 that your compliance counsel can review. This is part of the pilot kickoff.
How quickly can the pilot start after deposit? ▼
Kickoff call within 3 business days of deposit. Dedicated agent pool provisioned within 24 hours of the kickoff call. Day 1 of the 30-day pilot begins when your pilot scope is confirmed and the pool is live.