At Nuxeo, we believe in the cloud and all of its benefits: efficiency, scalability, cost-savings and more.
Now, we’re proud to give SEC-regulated financial firms even more reason to trust our technology, especially when it comes to information and record-keeping.
Nuxeo recently validated its Content Services Platform (CSP) with the electronic records requirements of the U.S. Securities and Exchange Commission (SEC) Rule 17a-4(f) using Amazon Simple Storage Service (Amazon S3) Object Lock, a cloud storage service.
Why is having a validated cloud storage service so important? It means broker-dealers and other SEC-regulated financial firms now have a modern alternative to the traditional, on-premises storage offerings they’ve been relying on for so long. (Too long!)
In other words, we can now attest that any information about trades and transactions being stored in our system cannot, and will not, be changed or altered in any way – a common concern that often prevented SEC-regulated firms from migrating to the cloud.
What is SEC Rule 17a-4?
It’s a compliance regulation outlining requirements for data retention, indexing, and accessibility for financial services companies. Under SEC Rule 17a-4, these companies must retain and index transactional records for a specific period of time, as well as keep duplicate records at an off-site location. The regulation has fundamentally changed compliance expectations around record keeping for the financial services industry.
Amazon S3 Object Lock enables enterprises to enforce retention policies as an added layer of data protection or for regulatory compliance for content and data stored in the cloud. Amazon S3 Object Lock has been assessed for SEC Rule 17a-4(f), FINRA Rule 4511, and CFTC Regulation 1.31 by Cohasset Associates, Inc., an independent management consulting firm specializing in records management and information governance. Cohasset Associates also conducted the assessment of the Nuxeo Platform.
In an increasingly digital world, enterprise organizations must protect their most valuable asset: their information, or face hefty fines and compliance challenges. Achieving Amazon S3 Object Lock compliance with SEC Rule 17a-4(f) validates our ability to support financial firms, and protect sensitive information about trade transactions.
By providing secure content management systems, test, and deploy highly secure and mission-critical applications, we are now uniquely positioned to serve the complex content services needs of SEC-regulated companies that manage and store content and data in the cloud.
Go Further
- Read the full compliance assessment from Cohasset Associates, Inc.
- Read the press release announcing Nuxeo Cloud’s validation with Amazon S3 Object Lock for SEC Rule 17a-4(f)
- Learn more about the Nuxeo approach to content security and how we protect the content and data of its customers.
- Learn more about Retention Management
Frequently Asked Questions
It’s a compliance regulation outlining requirements for data retention, indexing, and accessibility for financial services companies. Under SEC Rule 17a-4, these companies must retain and index transactional records for a specific period of time, as well as keep duplicate records at an off-site location. The regulation has fundamentally changed compliance expectations around record keeping for the financial services industry.