Built for the Advisers Act Rule 204-2 · 206(4)-1 · 206(4)-7

Enterprise-grade
compliance for RIAs.
For $99 a month.

Turret archives every email and every website change, then AI helps surveil your outbound mail for compliance.

No setup fee · $99/mo · 15-day free trial · Cancel anytime

Attestation Example
SHA-256
All records intact
94,658
verified
04:21 7b4f9a82ee1d…c01a9e
04:21 a92d6c43bb09…fe33b1
04:21 f018b71e5a32…8d2c47
04:21 2c5ea1f49d77…91ba30
04:21 8b1d3f02ce64…4ec7f9
verifier.run — 4d ago /operator
How we compare

Priced and built for a firm your size.

The incumbents are built for banks and broker-dealers with hundreds of seats — and priced that way. Here’s an honest look at where Turret fits, and where it doesn’t.

Turret
Small RIAs
Smarsh Global Relay RIA in a Box/ ComplySci
Built forSmall RIAsEnterpriseBanks & broker-dealersRIAs (enterprise skew)
Public pricing$99/moQuote onlyQuote onlyQuote only
Setup feeNoneYes (est.)~$995 + 10-mbx min (est.)Quote only
ContractMonth-to-monthMulti-yearAnnual committedAnnual
Free trial & self-serve15-day, self-serveNoNoDemo only
Time to live~10 minutesWeeks + servicesSales + setup60–90 days
Email archive (Rule 204-2)
AI triage (confidence + reasoning)AI supervisionAI supervisionRules-based
Website snapshots (Marketing Rule)
Off-channel (SMS/WhatsApp/social/voice)Email + website onlyLimited
Compliance-program suite (code of ethics, trading, ADV)

Turret’s pricing is public. The incumbents don’t publish pricing — competitor figures are approximate, drawn from resellers and review sites. Where a competitor is genuinely broader (more capture channels, a full compliance-program suite), the table says so: Turret wins on fit, price, and simplicity for a 2–20-person firm. If you need mobile-text capture or a code-of-ethics module today, an incumbent may be the better choice.

Why now

Being small was never being invisible.

The SEC’s recordkeeping and off-channel enforcement sweep didn’t stop at the big banks — it reached stand-alone investment advisers too. The question an examiner asks is simple: can you produce the records?

$2B+

in SEC penalties across 100+ firms for recordkeeping failures since 2021.

$6.5M

paid by a single stand-alone RIA in April 2024 — the first case of its kind.

$390M+

from 26 firms in a single day in August 2024 — investment advisers included.

The headline sweep has since cooled — but Advisers Act Rule 204-2 hasn’t moved an inch: preserve every business communication, email included, for at least five years, and produce it on demand. A gap you find during an exam is the expensive way to learn that. Turret closes it before the request ever comes. Figures from SEC enforcement press releases and public settlement orders, 2021–2024.

Enterprise compliance tools solve this for banks — per-seat pricing, a five-figure setup, a deployment project. A small firm needs the same core coverage without the overhead. That’s what Turret is.

$99 /month

Includes 5 mailboxes · +$25 per monitored mailbox after · no setup fee · 15-day free trial.

Enterprise archiving vendors charge per-seat on annual contracts, plus a hefty setup fee. Turret is $99/mo, month to month, no setup fee, and you can start it yourself in minutes.

The components

Built like infrastructure, not a settings page.

Interactive previews of the real product surfaces — the same layouts and vocabulary compliance officers work in every day, shown here with demo data.

Scanning live Demo data

Alerts

AI-triaged outbound mail. Filter, escalate, resolve.

16,656 messages scanned this month · 39 alerts · 7 high-confidence pending /alerts

AI Triage

Click a pattern below to see how Turret scores it — Claude Haiku.

Confidence 0%

Archive search

Search every word across your full 7-year retention, instantly.

16,800
Indexed: subject + body · attachment text coming soon /archive

Archive integrity

SHA-256 attestation across every archived message.

SEC Rule 204-2
All 16,800 records intact
Last verified 3 days ago · 0 mismatches

Here’s something most archiving tools — cheap or enterprise — skip entirely.

Website archive

Your website is an advertisement, too.

Under the SEC Marketing Rule (206(4)-1) your public website is an advertisement, and Rule 204-2(a)(11) says you have to keep a copy of every one. Turret snapshots your pages on a schedule and saves a dated version whenever one changes.

  • Screenshot + saved HTML. Every version stored as a full-page image and its underlying source.
  • Change detection. A new version only when the page actually changes — not on every crawl.
  • SHA-256 attestation. The same cryptographic integrity proof as your email archive.

Advertising has its own clock — Rule 204-2(e)(3) runs five years from the fiscal year a page was last used. Turret keeps the dated history so you don’t have to.

Under the hood

What Turret is
built from.

The pattern library, the role model, and the read-only connection that the surveillance, archive, and audit-log surfaces sit on top of — plus how your data is protected. The pieces an examiner asks about: who can see this, and how is access controlled?

01 Patterns

Compliance rules, encoded.

Marketing rule violations. MNPI references. PII exposure. Off-channel signals. Pre-configured, extensible.

defaults 11 · custom OK
HIGHPerformance guarantees
HIGHMNPI / Insider information
MEDOff-channel communication
02 Roles

Scoped access for outside reviewers.

Invite your compliance consultant or fractional CCO. They review alerts and archive without ever touching your Workspace.

role 3 levels
ADMINmanage all
USERreview
VIEWERread-only
03 Connection

Read-only, by design.

Google Workspace (Domain-Wide Delegation) or Microsoft 365 (an admin-consented app). Both capture sent and received mail. We can read, we cannot send or modify.

access scope read-only
Read your email
Send, modify, or delete
Revoke anytime — your admin
Security

How your data is protected.

Read-only access to your email. Turret cannot send, modify, or delete messages.
Credentials and tokens encrypted with AES-256-GCM. Data at rest is protected by our database platform; data in transit is protected with TLS.
Tenant isolation — your data never mixes with another firm’s.
Revoke access instantly from your Workspace or Microsoft 365 admin console.
Alert actions and archive writes recorded in append-only audit tables with SHA-256 integrity attestation. Our staff sees operational metadata, not your email content.
SOC 2 Type 1 readiness assessment planned — we’ll say when it’s done, not before.

One simple price.

Everything included — a 7-year books-and-records archive built to Rule 204-2 (two years past the five-year minimum), email and website archiving, AI-triaged alerts, and a full audit log. Month to month, cancel anytime, and no setup fee — ever. The price on this card is the price; no sales call to see it.

$99 / month

Includes 5 mailboxes · +$25 per monitored mailbox after that.

No setup fee 15-day free trial Cancel anytime
  • Every mailbox in your firm monitored
  • Subject + body scanning with AI-triaged alerts
  • 7-year archive + full-text search (SEC Rule 204-2)
  • Website archiving — dated snapshots of every page (Marketing Rule)
  • 11 pre-configured RIA compliance patterns
  • Append-only audit log + SHA-256 integrity attestation
Start free trial or pay annually — 2 months free ($990)

No setup fee, no per-seat contract. Enterprise archiving tools typically charge a hefty implementation fee and lock you into an annual contract — Turret is $0 to start and month to month. Larger firm or custom compliance needs? Talk to us.

Frequently asked questions

Do I need to install anything?

No. Turret connects through your Google Workspace or Microsoft 365 admin controls. No agents, no browser extensions, no employee downloads.

Do you support Google Workspace and Microsoft 365?

Both, always read-only and revocable, and both capture sent and received mail. Straight talk: on either platform, surveillance is outbound-focused by design — we pattern-match and alert on what your firm sends, and archive inbound mail for recordkeeping.

Why is Turret so much cheaper than Smarsh or Global Relay?

Because we do less on purpose. The enterprise platforms capture voice, texts, and dozens of chat channels, run e-discovery suites, and price for banks — with setup fees and annual contracts to match. A small RIA whose regulated communications are email and its website doesn't need most of that. Same obligation met; none of the enterprise tax.

Is $99/mo really enough coverage for an SEC exam?

Turret captures, indexes, and preserves all your email — sent and received — under Rule 204-2(a)(7), archives your website as advertising under the Marketing Rule, and gives you full-text search and export to answer an information request fast. It's the recordkeeping and supervision infrastructure — not a replacement for your CCO or counsel.

How hard is it to switch or get started?

One admin-console authorization, about ten minutes, no IT project. We backfill your recent history automatically, no setup fee, no annual lock-in.

How long does setup take?

About 10 minutes for the initial authorization; your historical scan finishes in 1–3 hours depending on mail volume. We'll screen-share your first onboarding if you want us there.

Why not just use Microsoft 365 or Google Vault?

They'll hold your mail, but they aren't a supervision program: no compliance-pattern library, no AI triage of what to review, no website-advertising records, and no supervision or archive-integrity reports to hand an examiner. Turret sits on top of your existing Google or Microsoft mail and turns it into a reviewable, exam-ready record organized around Rule 204-2.

Do you require a credit card for the trial?

Yes. We ask for a card so your archive keeps running the moment you decide to keep it — no gap in your records. It's a 15-day free trial: cancel anytime before it ends and you're not charged.

What happens to my records if I cancel?

We don't delete your archive the moment you leave — it's the record you're legally required to keep. If you cancel, reach out and we'll arrange to return your records to you. Your data is yours.

Where does my email go, and who can see it?

Access is read-only. Credentials are encrypted with AES-256-GCM, data in transit is protected with TLS, every firm's data is tenant-isolated. Our staff sees operational metadata, not your message content, and you can revoke access instantly. (SOC 2 Type 1 readiness assessment is planned — we'll say when it's done, not before.)

Meet the rule. Skip the enterprise bill.

The recordkeeping obligation is already yours, and the exam that tests it isn't on your calendar yet. Fifteen minutes today beats a scramble later.

No setup fee · $99/mo · 5 mailboxes included · 15-day free trial · Cancel anytime