TL;DR: State regulators just aligned with the SEC on advisor marketing rules — meaning reviews are now fair game across federal and state lines. But compliant reviews require more than permission. They require five tightly integrated operational components. Here's what firms need to know.
Yext's 2026 Consumer Search Behaviors research found that five of the top six factors influencing a consumer's decision to act are review signals — making reviews the most decisive trust layer for financial professionals. However, until now, a gray area around what was actually allowed made reviews difficult for financial firms to navigate.
For five years, a subtle contradiction has shaped how financial advisors manage their online reputation. The SEC's 2021 Marketing Rule technically opened the door to testimonials, endorsements, and third-party ratings — the kind of social proof every other consumer-facing business has used for a decade. But state-level rules, conflicting guidance, and onerous compliance requirements kept most firms parked on the sidelines.
On May 4th, 2026, NASAA closed that gap. The association's approved model-rule amendments bring state-registered advisor marketing largely in line with the SEC, creating — for the first time — regulatory unity across federal and state lines on what advisors can say, ask for, and respond to. For wealth management, retail financial planning, and life insurance, this is a meaningful shift.
But "allowed" to do something isn't the same as "able."
The SEC's track record over the last five years tells the real story. The regulator has issued hundreds of thousands of dollars in fines for Marketing Rule violations, and many firms have opted not to use performance-based marketing at all — citing guardrails they say aren't clearly defined. In March 2025, the SEC issued additional guidance aimed at clarifying the rule. Even with clarified rules, most firms have stayed on the sidelines because the operational requirements have outpaced what their current systems can support.
What compliant reviews actually require
A compliant reviews program in financial services requires five components that have to work in concert across the full review lifecycle, from the moment a review is captured to the moment it's archived:
Capture across channels: First-party reviews on the firm's website plus third-party reviews from across the web, in a single system compliance can actually see.
Policy-based attestation: Each review and response attested against the firm's policy on compensation, conflicts of interest, client relationship, and paid solicitation — with the resulting disclosures applied to match.
Scalable supervision workflows: Automated lexicon screening plus human-in-the-loop review where policy requires it, running across high review volumes without becoming a bottleneck.
Dynamic disclosures: Required regulatory language appended automatically, with logic for solicited vs. unsolicited contexts, registration type, and jurisdiction.
Archiving for books and records: Every review, response, and compliance action captured and transmitted to the firm's books-and-records system per SEC, FINRA, and state requirements.
Each of these is non-negotiable. Skip one and a firm isn't running a reviews program; it's running a regulatory exposure.
Why DIY is the riskiest path
The temptation right now is real. Reviews are the most authentic signal a firm can build into its digital presence, and the volume is too high to ignore. So firms will try to stitch together a review platform, a compliance tool, a books-and-records archive, and a manual approval queue.
That works until it doesn't. Most violations of the SEC Marketing Rule haven't been malicious; they've been operational. A response sent without the right disclosure. An archive that captured the post but not the action taken on it. A solicited review that wasn't flagged as such. The fines come from the gaps between systems.
The Yext approach
Yext provides an end-to-end compliant reviews workflow purpose-built for SEC-regulated financial services firms.
It collects first-party reviews on the firm's website, syncs third-party reviews from across the web, runs every review and response through a native supervision workflow — attestation, lexicon screening, manual review, boilerplate, archiving — and presents the customer-facing experience that consumers expect from any other business they research online.
The end user sees a normal review experience. The advisor sees a workflow that gets them to "publish" without leaving compliance behind. The compliance officer sees a complete record.
The moment
Regulatory unity is the unlock. But unlocks only matter if you can walk through the door. For firms that have been waiting on clarity — independent advisor networks, multi-state RIAs, life insurers — the question is no longer can we? It's how do we, safely, at scale?
We've spent years building the answer.
Talk to Yext about what a compliant reviews program looks like for your firm.
