This guide is general legal information, not legal advice, and does not create an attorney–client relationship. Rules change and vary by state — verify current requirements with official sources or a licensed attorney.
Automating advice does not change its legal character. A platform that, for compensation, advises others about securities is an investment adviser under the Investment Advisers Act, whether the advice comes from a human in an office or from a model running on a server. The registration question that follows is not whether, but where — with the SEC or with one or more states.
The second question is harder and more interesting: how does a fiduciary duty, developed for relationships built on conversation and judgement, apply to a product where the entire client interaction is a questionnaire and a dashboard? Regulators have been working through that problem for a decade, and the answers shape product design as much as compliance documentation.
Key takeaways
- Providing securities advice for compensation makes a platform an investment adviser; automation neither creates nor removes that status.
- Registration is split by size: advisers below the statutory thresholds register with states, mid-sized advisers generally register with the state if that state registers and examines advisers, and advisers at or above the upper threshold register with the SEC.
- The internet adviser exemption in Rule 203A-2(e) was narrowed by amendments adopted in 2024; it now requires advice provided exclusively through an operational interactive website at all times, with the former allowance for a small number of non-internet clients removed.
- Fiduciary duty comprises a duty of care and a duty of loyalty, and it cannot be disclaimed — though the scope of the relationship can be shaped by full and fair disclosure and informed consent.
- Disclosure runs through Form ADV and, for firms serving retail investors, a relationship summary; conflicts arising from affiliated products, order routing, and cash sweeps are the recurring problem areas.
When a platform becomes an adviser
The statutory test asks whether a person, for compensation, engages in the business of advising others as to the value of securities or the advisability of investing in them. Each element does work. "For compensation" includes indirect economic benefit, so a free tool monetized through affiliated products can still qualify. "Engaged in the business" is a facts-and-circumstances inquiry that a regular, product-integrated service will usually satisfy. And "as to securities" excludes advice limited to insurance, commodities, or bank deposits, though mixed products complicate that line.
Tools that merely provide data, calculators, or general educational content typically fall outside the definition. The moment output becomes personalized — a recommended portfolio, an allocation tailored to answers about goals and risk tolerance, an automated rebalance — the analysis flips. Publishers may in some circumstances rely on a separate exclusion, but it is narrow and depends on the impersonal, general nature of the content.
Where to register
| Regulatory assets under management | Usual outcome |
|---|---|
| Below the lower statutory threshold | State registration in the state or states where the adviser operates and has clients |
| Mid-sized band | State registration if the adviser's home state registers and examines advisers; otherwise SEC registration |
| At or above the upper threshold | SEC registration, with buffers that prevent firms from switching regulators on small fluctuations |
| Any size, if an exemption applies | SEC registration may be permitted or required notwithstanding size — the internet adviser exemption is the one most relevant to automated platforms |
State registration is not a lighter version of the federal regime. State securities administrators impose their own books-and-records, financial, and examination requirements, often license individual investment adviser representatives through a qualifying examination, and differ from one another on advertising, custody, and net capital. A platform registered in one state cannot assume its policies satisfy the next state, and multi-state registration multiplies both filings and examinations.
The internet adviser exemption, after the 2024 amendments
Rule 203A-2(e) has long allowed advisers operating through the internet to register with the SEC regardless of assets under management — an attractive route for a national digital platform that would otherwise face registration in dozens of states. The SEC adopted amendments in 2024 that tightened the conditions considerably.
- The adviser must provide investment advice to all of its clients exclusively through an operational interactive website, and that website must be operational at all times.
- The previous accommodation permitting advice to fewer than 15 clients through other means during the preceding 12 months was eliminated.
- Advisers relying on the exemption must include a representation of eligibility in Form ADV.
- The rule became effective in July 2024, with a compliance date in March 2025 for the Form ADV representation.
Practical note: The tightened conditions matter most to hybrid models. A platform that offers automated advice plus occasional human consultations no longer fits the exemption cleanly, and may face state-by-state registration instead. Decide which side of that line the product sits on before building the human-advice feature, not after.
Fiduciary duty when the adviser is software
An investment adviser owes a fiduciary duty comprising a duty of care and a duty of loyalty. The duty of care requires advice in the client's best interest based on a reasonable understanding of the client's objectives, seeking best execution where the adviser selects brokers, and monitoring over the course of the relationship where that is part of the arrangement. The duty of loyalty requires the adviser not to place its interests ahead of the client's, and to eliminate or fully and fairly disclose conflicts so the client can give informed consent.
Applying this to an automated model raises specific questions that regulators have flagged for years:
- Client information. Is the intake questionnaire capable of producing a reasonable understanding of the client's objectives, or is it too short and too leading to support the recommendations built on it?
- Inconsistent answers. Does the system detect contradictory or implausible inputs and respond, rather than silently producing a portfolio?
- Algorithm oversight. Who tests the model, how often, and what happens when market conditions fall outside its assumptions? Code changes are compliance events.
- Conflicts embedded in the model. Does the algorithm favour affiliated funds, generate revenue through cash sweeps or payment for order flow, or apply fee structures that are not obvious to the client?
- Scope clarity. Is the client told plainly what the service does not do — tax planning, retirement advice beyond the account, held-away assets?
- Disclosure placement. Are key disclosures presented where the decision is made, or buried in a document nobody opens during onboarding?
The disclosure point deserves emphasis. Fiduciary duty cannot be waived by fine print, and a conflict disclosed in a way that a reasonable client would not notice is not fully and fairly disclosed. Design and compliance are the same workstream here.
Filings, policies, and the compliance programme
Registered advisers file Form ADV, whose Part 1 collects structured data and whose Part 2 brochure describes services, fees, conflicts, disciplinary history, and business practices in plain English. Firms serving retail investors also deliver a short relationship summary designed for comparability across firms. Beyond filings, a registered adviser must adopt and annually review written compliance policies, appoint a chief compliance officer, maintain a code of ethics governing personal trading, keep prescribed books and records, and comply with the marketing rule that governs advertisements, testimonials, endorsements, and performance presentation.
Two adjacent regimes routinely catch digital platforms. Custody rules apply if the adviser holds client assets or has authority to withdraw them, a subject we take up in our article on digital asset custody and safeguarding duties. And if the platform also executes trades, operates a matching venue, or receives transaction-based compensation, broker-dealer registration and FINRA membership questions arise on top of adviser status. Privacy and security obligations follow the client data throughout, as described in fintech data privacy and cybersecurity.
Frequently asked questions
We do not charge for advice — are we still an adviser?
Possibly. The compensation element is read broadly and includes indirect benefit, such as revenue from affiliated products, referral arrangements, or a bundled subscription. Free-to-the-user tools that monetize downstream are a common source of unintended adviser status, and the analysis should be done before launch.
Can disclosure cure any conflict?
No. Some conflicts must be eliminated or mitigated rather than merely disclosed, and disclosure only works if it is full, fair, and specific enough for a client to give informed consent. Generic statements that conflicts "may" exist, when they plainly do, will not satisfy the duty of loyalty.
Does the internet adviser exemption let us skip state rules entirely?
Registering with the SEC preempts state registration for the firm, but states retain anti-fraud authority and may require notice filings and fees. Individual representatives may still face state requirements. Confirm each state's position rather than assuming federal registration ends the analysis.
How much documentation does algorithm oversight require?
Enough to show what the model was designed to do, how it was tested, who approved changes, and how deviations were detected and addressed. Examiners increasingly ask to see model governance records. Treat versioning, change approval, and testing evidence as compliance artefacts from the start.
What if we advise on crypto as well as securities?
Advice about assets that are not securities falls outside the Advisers Act, but a mixed offering rarely stays cleanly separated, and holding client crypto raises custody questions. As of mid-2026 the treatment of many digital assets remains contested, so document the classification analysis for each asset you touch.
Putting it together
Build the registration answer first, because it determines which rulebook governs everything else. Then treat fiduciary duty as a product requirement rather than a legal overlay: intake design, conflict architecture, disclosure placement, and model governance are all fiduciary questions expressed in engineering terms. Firms that separate these functions tend to discover the mismatch during an examination, when fixing it is expensive. Because the internet adviser conditions and the marketing rule have both changed within recent years, verify current requirements directly with the SEC or your state administrator. The broader oversight picture appears in our U.S. fintech regulatory map and across the fintech law topic hub. This article is general information, not legal or investment advice.
