ManifestoWhy compliance needs an open standard

Your entire compliance program.One intelligent system.

The program your firm needs, the program you already run, and a plan to close the gap. Every item traced to the clause it comes from.

One system, three parts

The open standard

CLHEAR Open source

Turns raw regulatory text into compliance blueprints, each item traced to its clause. Help make it the industry standard.

CLHEAR on GitHub
The platform

Reg42 OS

Runs CLHEAR in your own cloud account, on your firm's data, and adds what a program needs day to day: feeds, tasks, evidence, apps and agents.

See Reg42 OS
The intelligence

Solon

The AI model inside Reg42 OS, hosted next to your data. It answers from your firm's blueprint and shows the trail behind every answer.

Ask Solon
Influencer post reviewRuns on each new post
Testimonial disclosuresGap · 2210(d)(6)(B)
Clause watcherRuns on each signed release
Reg42 OS · your cloud account SIMULATED

Example Markets · a fictional US broker-dealer

What would you like to know about FINRA 2210?

Ask Solon about the example firm…
Blueprint · FINRA 2210RequiredIn place
2210(b)(1)(A)2210(d)(1)2210(d)(6)(B)2210(b)(4)(A)3110(b)(1)
Principal approval before useMismatch
Content standardsCovered
Testimonial disclosuresGap
Communications archiveCovered
Supervisory proceduresGap
The story

One firm. One regulation. Eight steps.

Follow Example Markets, a fictional US broker-dealer, from the text of one rule to a plan that closes the gap. Switch the rule at any time.

Example Markets · starting with FINRA Rule 2210
Act I · Chapters 1 to 3

Map.

Pick one rule, describe your firm, and get the program you need.

01Where do I start?

Start with one regulation, not the whole rulebook.

Pick the regulation or licence that matters now. CLHEAR keeps its original text, clause by clause, with the source and date.

SourcesL1
FINRA Rule 2210

Communications with the Public

FINRA Rules · Last amended 16 August 2019
2210(d)(1)(B)

“No member may make any false, exaggerated, unwarranted, promissory or misleading statement or claim in any communication.”

Kept verbatim, with a copy stored for citation

Picture: a shelf of the three starting regulations with the selected one pulled out, showing its official reference, its date and the verbatim text of one clause.

02What makes it apply to us?

Tell CLHEAR who you are. Only this leaves your hands.

Countries, licences, products, clients and channels. These facts decide which obligations apply. Controls, owners and evidence stay in your own systems.

Profile · Example MarketsL4
Countriesjurisdictions
United States
Licencesauthorisations
FINRA member broker-dealer
Productsproducts
StocksETFs
Clientscustomer_base
Retail
Channelschannels
Mobile appPaid influencers

Only these facts go to CLHEAR. Controls, owners and evidence stay in your systems.

Picture: the example firm's profile, with its countries, licences, products, clients and channels lighting up as they are chosen.

03What does compliance require of us?

The program you should have, traced to each clause.

CLHEAR lists what your firm must have: policies, roles, committees, systems and processes. This is your reference blueprint, and every item links back to its clause.

Reference blueprint · FINRA 2210L6
2210(b)(1)(A)A principal approves each retail communication before use
2210(d)(1)Keep communications fair and balanced
2210(d)(6)(B)Disclose testimonials, including paid ones
2210(b)(4)(A)Keep each communication with its dates of use
3110(b)(1)Keep written supervisory procedures
Principal approval before useProcess · 2210(b)(1)(A)
Content standardsDocument · 2210(d)(1)
Testimonial disclosuresDocument · 2210(d)(6)(B)
Communications archiveSystem · 2210(b)(4)(A)
Supervisory proceduresDocument · 3110(b)(1)
What the rule requires

Picture: the reference blueprint. Each required item is drawn with a dashed periwinkle outline and linked to the clause it comes from.

Start with one regulation. We map it with you.

Scope a conformance project
Act II · Chapters 4 and 5

Compare.

Map what you run today and see the gap, item by item.

04What do we already do?

The program you actually run, in the same language.

Your documents, systems, people and data feeds form the actual blueprint. It uses the same shapes, so the two can be compared item by item.

Actual blueprint · Example MarketsReg42 OS
DocumentsDocument store
SystemsSocial media archive
Data feedsTeam chat archive
DocumentsShared drive
Chat approvalsProcess · from Team chat archive
Marketing standards v4Document · from Document store
Nothing in placeDocument
Archived posts, dailySystem · from Social media archive
Nothing in placeDocument
Legacy influencer spreadsheetAsset · from Shared drive
What you have in place

Picture: the actual blueprint. The firm's documents, systems and data feeds fill the same slots in solid turquoise. Empty slots show what is missing, and one extra item is marked as surplus.

05Where are we short?

Your gap analysis, item by item, with the reason.

The two blueprints overlay. Covered items fill in, gaps stay open, and mismatches and extras are marked.

Gap analysis · FINRA 2210Reference × actual
2 covered2 gaps1 mismatch1 surplus
Principal approval before use2210(b)(1)(A) · Approved in chat, with no record before useMismatch
Content standards2210(d)(1) · Matches 2210(d)(1)Covered
Testimonial disclosures2210(d)(6)(B) · Posts do not say they are paidGap
Communications archive2210(b)(4)(A) · Each post kept with its dates of useCovered
Supervisory procedures3110(b)(1) · Procedures do not cover influencersGap
Legacy influencer spreadsheetNot traced to any clauseSurplus

Picture: the two blueprints overlaid. Covered items are filled, gaps stay empty, and the mismatch and the surplus item are marked, each with its reason.

Start with one regulation. Compare it on your own firm.

Scope a conformance project
Act III · Chapters 6 to 8

Comply.

Plan the work, prove it with evidence, and stay current.

06What do we do next?

A plan for complete compliance, not a report.

Each gap becomes a task with an owner across the three lines of defence: generate a document, assign a role, install an app or run a workflow.

Scope a conformance project
Action plan · FINRA 22104 tasks
1st line · the business2nd line · compliance3rd line · independent review
Generate a documentAdd influencers to the supervisory proceduresGapSupervisory procedures · 3110(b)(1)HCHead of Compliance2nd line
Install an appRoute every influencer post for approvalMismatchPrincipal approval before use · 2210(b)(1)(A)HMHead of Marketing1st line
Run a workflowCheck testimonial disclosures before postingGapTestimonial disclosures · 2210(d)(6)(B)HMHead of Marketing1st line
Assign a roleName an independent reviewerGapSupervisory procedures · 3110(b)(1)IAInternal Audit3rd line

Picture: the action plan. Each gap becomes a task with an action type, an owner and a line of defence.

07How do we show it’s done?

Every obligation, answered with evidence.

Evidence flows back from production onto the item it proves. The audit trail records who did what, and why.

Evidence · Principal approval before useAudit trail
Principal approval before useProcess · 2210(b)(1)(A)MismatchCovered
From production
  • Post approved before useInfluencer review app · 3 Sep 2026
  • Approver and date archivedSocial media archive · 3 Sep 2026
  • Next program review bookedWorkflow · Sep 2027
Route every influencer post for approvalDoneHMHead of Marketing
  1. Solon checked the postWhy: against 2210(d)(1)
  2. Registered principal approved itWhy: fair and balanced, before first use

Picture: evidence arriving from production onto one item, which turns covered, while its task moves to done and the audit trail records who approved it and why.

Interlude · Solon

Ask the example firm.

A complete, traced blueprint makes precise answers possible. Solon is the AI model inside Reg42 OS. It answers from the firm’s own blueprint graph and shows the trail behind every answer.

  • Hosted in your environment. The model runs inside your cloud account, next to your data.
  • Grounded in your graph. Obligations, blueprint items, evidence and clauses, all linked.
  • Fed by apps and agents. They keep the graph current with live data.
Solon · Example MarketsSIMULATED
What does FINRA require of us for influencer posts?
  1. Reading the firm profile
  2. Resolving the obligations that apply
  3. Walking the blueprint graph
  4. Checking evidence and clauses

Posts that influencers make for Example Markets count as its retail communications under Rule 2210. A registered principal must approve each one before use, the content must be fair and balanced, testimonials must carry the required disclosures, and each post must be kept with its dates of use. Rule 3110 asks for written procedures that cover all of this.

ObligationsApprove each retail communication before useKeep communications fair and balancedDisclose testimonials, including paid onesKeep each communication with its dates of useKeep written supervisory procedures
Blueprint itemsPrincipal approval before use MismatchContent standards CoveredTestimonial disclosures GapCommunications archive CoveredSupervisory procedures Gap
EvidenceNone yet
ClausesFINRA Rule 2210(b)(1)(A)FINRA Rule 2210(d)(1)FINRA Rule 2210(d)(6)(B)FINRA Rule 2210(b)(4)(A)FINRA Rule 3110(b)(1)

A replay on a fictional firm with simulated data. It is an example, not a live client.

08What happens when the rule changes?

When the rule changes, see exactly what changes for you.

A changed clause travels up through the blueprint to the one task it affects, with a named owner.

Change feed · FINRA 2210Watched
  1. 1Clause changes SIMULATEDFINRA Rule 2210(d)(6)Amendment published
  2. 2Obligation updatesDisclose testimonials, including paid onesOBL:finra-2210#d-6-b
  3. 3Item flaggedTestimonial disclosuresNeeds new wording
  4. 4Task createdUpdate the disclosure wordingHMHead of Marketing

Picture: a change feed. A clause change updates an obligation, flags one blueprint item, and creates one task for a named owner.

Zoom out

Start with one. Add the next on the same path.

Each regulation adds its blueprint, and the blueprints join into one program. An item that serves more than one rule appears once.

Start with one regulation. Grow from there.

Scope a conformance project
CLHEAR · the open standard

The rules of compliance, as open records.

CLHEAR is an open standard and an open-source engine. It reads the texts you choose, finds the duties in them, and returns the smallest set of measures that covers them. Each measure points back to its clause. Help make it the industry standard.

L1 SourcesL2 ObligationsL3 Building blocksL4 ProfilesL5 ActivitiesL6 BlueprintL7 PrioritiesL8 Benchmarks
  1. L1SourcesOfficial texts, split into clauses and kept verbatim with their date.
  2. L2ObligationsWho must do what, pinned to the clause it comes from.
  3. L3Building blocksWhat a firm must have: documents, roles, committees, systems, processes, workflows and assets.
  4. L4ProfilesCountries, licences, products, clients and channels, and which obligations reach each profile.
  5. L5ActivitiesWhat the firm does, linked to the obligations that govern it.
  6. L6BlueprintThe leanest complete program for one profile, with an evidence chain for each item.
  7. L7PrioritiesEach obligation scored by how often and how hard regulators act on it.
  8. L8BenchmarksHow a program compares with what regulators found in examinations.

One evidence chain, end to end.

An example from the story, traced from a blueprint item to the words of the law. The digest lets anyone check the clause text.

Blueprint itemPrincipal approval before useProcess · owned by the Head of MarketingBLK-PRINCIPAL-APPROVAL
ObligationApprove each retail communication before useApplies to members that use retail communicationsOBL:finra-2210#b-1-a
ClauseFINRA Rule 2210(b)(1)(A)An appropriately qualified registered principal of the member must approve each retail communication before the earlier of its use or filing with FINRA's Advertising Regulation Department ("Department").
SourceFINRA Rule 2210FINRA Rules · Last amended 16 August 2019
sha256 3abfe13f6421…a98ede1f

Published. The specification, the schemas and the engine code are public, under AGPL-3.0.

Runnable. Anyone can run it on their own sources, on a laptop or in a private network.

Reviewed in public. Changes arrive as pull requests anyone can read.

Reg42 OS · the platform

Where the standard becomes a working program.

Reg42 OS runs CLHEAR natively in your own cloud account and adds what a program needs to run day to day. Client data stays in your account.

Official regulatory sourcesLaws, regulations and standards
Signed CLHEAR releasesVerified before they go live
Your cloud account
Reg42 OSYour program, gaps, plans, workflows and evidence.
CLHEAR engineBuilds the reference blueprint from the sources.
Your data feedsOrders, documents, people and communications.
SolonThe AI model, hosted in your environment.
Apps and agentsJobs that read the blueprint and write evidence back.

Only official sources and signed releases come in. Your data stays inside.

Actual blueprintBuilt from your data feeds and what people enter.
Gap analysisWritten in the CLHEAR standard, item by item.
Action plansEach gap becomes work with an owner.
WorkflowsProcesses across the three lines of defence.
Apps and agents storeJobs that read the blueprint and write evidence back.
Document generationDrafts that start from the items you are missing.
Evidence and audit trailWhat ran, who approved it, and why.
Engine updatesVerified, tested and approved before they go live.

BETABuild: a design partner can assemble an app from the blueprint.

Apps and agents, working on the blueprint.

Examples on the fictional firm.

Agent
Influencer post review
WATCHES
New influencer posts
RUNS
On each new post
READS
Social media archive
SERVES
FINRA Rule 2210(b)(1)(A), 2210(d)(1)
App
Best execution monitor
WATCHES
Execution quality
RUNS
Each trading day
READS
Orders and executions
SERVES
FINRA Rule 5310(a)(1), 5310.09
Agent
Clause watcher
WATCHES
Official sources
RUNS
When a signed release arrives
READS
Source texts and their versions
SERVES
Every obligation from that source
Agent
Model log collector
WATCHES
Credit model decisions
RUNS
Each day
READS
Scoring service logs
SERVES
EU AI Act Art. 12

Your operations, connected.

The feeds in the example firm.

Order management Document store Social media archive Team chat archive HR system Scoring service Model registry
Built differently

Four foundations.

01The CLHEAR standard

Eight layers of open records, from the verbatim clause to the leanest program.

02Your blueprint graph

Items, obligations, clauses and evidence for one firm, linked in one graph.

03Your cloud

The platform runs in your own cloud account, so your data stays there.

04Named approval

Agents act only after a named person approves, and the record keeps the name.

Start

Start with one regulation.

A conformance project, scoped and priced per regulation. Reg42 people run it with your team, and the same path works for the next rule.

01

Scope one rule

Choose the regulation or licence to start with.

02

Map both blueprints

Reg42 maps your firm and builds the reference and the actual blueprint in your instance.

03

Keep the plan

You get the gap analysis and the plan, and you keep the platform running.

Accountability and security

Accountable by design.

Four gates on every app and agent, and a hard boundary around your data.

Security guardrails

Limits on what a model can access and change, set in the architecture.

An audit trail

Each action records what was done, on what data, and why.

Accuracy, evidenced

Checked against evaluation sets before anything is trusted in production.

A named person decides

The model drafts. A named person decides, and every change carries that name.

Your data stays in your cloud account. Only official sources and signed CLHEAR releases come in.

Contact

See it on your firm.

Tell us the regulation. We reply about fit and the first step.

Avner Yoffe, FounderFormerly Head of RegTech Surveillance at eToro. Ten years in compliance technology, as a buyer and as a provider. Regulators didn’t raise the barrier for us. They raised it for everyone who treats AI as a demo.

Pick the regulation. We reply about fit and the first step.

We reply by email.