It is Tuesday morning and your client’s CCO calls. A prospect forwarded a Perplexity answer that named the firm — and quoted a 2019 Reddit comment misstating the fee schedule, framed as if the firm had said it. The CCO is asking three questions: where did that come from, how do we get it corrected, and is any of this captured for the books-and-records file. If you are the marketing agency on the other end of that call, the answer to all three has to already exist before the call started.
Across the industry, 77% of brands are invisible to ChatGPT, Claude, Gemini and Perplexity per Loamly’s February 2026 analysis of 2,089 brands. 94% of B2B buyers use LLMs to research vendors per 6sense. And in wealth management, where Cerulli projects RIAs will manage roughly a third of US advisor assets by 2026, those AI answers are now inside the consideration set for affluent prospects who used to start with a Barron’s list and a warm introduction.
The mechanics of AEO are not what makes this hard. The hard part is running it inside the SEC Marketing Rule, Rule 204-2 books-and-records, FINRA 2210 (for dual-registrants), and the May 2026 NASAA model-rule alignment — without putting the client in violation. What follows is the agency-side playbook for that work, structured in five phases over a 90-day onboarding window. Nothing here is legal advice; every implementation routes through the firm’s CCO and counsel.
Start your 14-day free trial
Run the playbook with GenPicked
Growth plan free for 14 days. Five AI engines. Full agency dashboard.
Start free trialWhat makes RIA AEO different from every other vertical
An HVAC agency helping a client get cited by ChatGPT has a marketing problem. An RIA-focused agency may have a marketing problem and an advertising-rule problem under Rule 206(4)-1. Three reasons that gap matters before you draft a single piece of content.
206(4)-1 reaches further than ads. The rule captures any communication offering investment advisory services to prospective or current clients. A founder podcast clip, a branded blog post, a Reddit comment by a principal — and arguably the AI summary that pulls from those sources — can sit inside the rule’s scope. The SEC’s 2024 enforcement sweep against nine RIAs, totaling roughly $1.24M in penalties, hit untrue or unsubstantiated statements and missing testimonial, endorsement, and third-party-rating disclosures — the exact categories an AEO program touches.
AI engines surface implied testimonials. When Perplexity answers “is XYZ Wealth a good fiduciary advisor?” with a Reddit comment saying “I’ve been with XYZ for two years and love them,” that snippet starts to look like an unattributed testimonial. The SEC Division of Examinations’ December 16, 2025 Risk Alert — the third Marketing Rule risk alert from the staff — specifically flagged gaps in disclosure, due diligence, and oversight on testimonials, endorsements, and third-party ratings. Your monitoring layer is what catches these before an examiner does.
The books-and-records trail extends to AEO artifacts. 17 CFR 275.204-2 requires retention of advertisements and the materials supporting their factual or performance claims for at least five years, the first two on-site. An AEO program produces a continuous stream of artifacts. Your agency should preserve them to the standard the client preserves theirs, and hand the archive over at termination.
Your agency is not the registrant. Your client is. The agency’s job is to design AEO content that does not put the client in violation, retain the artifacts the way the client must retain theirs, and route every program through the CCO. Describe the rules — never opine on application.
The four rule sets every program touches
Every RIA-focused AEO program touches at least three rule sets — sometimes four, if the client’s parent or affiliate is a broker-dealer or its IARs are dual-registered. Use this as a map, not legal advice.
- ▸ SEC Rule 206(4)-1: advertising by SEC-registered investment advisers. Branded content, founder media, AI-summarized firm pages, and testimonials all flow through it.
- ▸ SEC Rule 204-2: books-and-records retention. Five-year minimum, first two on-site. Citation reports, screenshots, content drafts, schema configs all become part of the trail your agency should preserve.
- ▸ FINRA Rule 2210: communications by FINRA-member broker-dealers. Applies if the parent or affiliate is a B/D or IARs are dually registered. FINRA’s Feb 2026 re-proposal aligns it closer to 206(4)-1.
- ▸ NASAA model rules: state-registered IA advertising and recordkeeping, modernized May 4, 2026. Each state adopts independently — verify state by state.
The opportunity inside that pressure is documented. CFA Institute’s 2026 Next-Gen Investors study (n=2,400+ across six wealth markets) found human advisers remain the most-trusted source of investment guidance, even as nearly 70% of young investors with paid advisers interact monthly while also using digital and AI tools to validate. The affluent prospect uses ChatGPT to validate the advisor — not replace them. Visibility in the validation layer is the new top-of-funnel.
The five-phase compliance-aware playbook
Five phases across a 90-day onboarding window. Phase 1 sets the baseline; Phases 2 and 3 build the earned-mention and content architecture; Phase 4 is the monitoring layer; Phase 5 is the reporting cadence that keeps the program defensible at the next exam. Five engines throughout: ChatGPT, Perplexity, Gemini, Claude, and Google AI Overviews.
Phase 1
Days 1-14 — Baseline, intent map, and canonical record
Before a single piece of content goes to draft, three artifacts have to exist: a five-engine baseline, an intent map of the queries that matter, and a canonical record pulled from the firm’s Form ADV. Everything later in the program diffs against these three documents.
- ▸ Five-engine baseline run. Score the firm’s domain, principals, and key service lines on ChatGPT, Perplexity, Gemini, Claude, and Google AI Overviews. Capture per-engine score, share-of-voice vs. named competitors, and the citation-source map for every query. Conductor’s benchmarks place AI-referred visitor time-on-site 68% above traditional search; you want to know which engines you already win and which are blind.
- ▸ Query intent map across five buckets: local fee-only (“best fee-only RIA in [city]”), specialty (tech execs, physicians, business owners, exit planning), comparison (“[client] vs [competitor]”), educational (“fiduciary vs suitability”), and service-line (“tax-loss harvesting RIA,” “concentrated stock position management”). Each query is tagged with a compliance flag before it enters the content backlog.
- ▸ Canonical record from IARD. Pull the current Form ADV Part 2A and extract performance language, principals, fees, registrations, disciplinary history. This becomes the diff target for the hallucination layer in Phase 4.
- ▸ Kickoff call with the firm’s CCO scheduled inside Day 7. Walk them through the baseline, the intent map, and the disclosure-block library you are about to build. The point of the call is short questions, not surprises.
Phase 2
Days 15-30 — Earned-mention sprint
ZipTie’s case-study research found domain authority outweighs schema roughly 3.5 to 1 in ChatGPT citation evaluation: a site with no schema and 3,200 referring domains pulled 68% of citations vs. 12% for a site with perfect schema and 420 referring domains. For RIAs, the high-authority targets are well known — your job is to make pitching them a recurring deliverable that does not cross testimonial lines.
- ▸ Investopedia, Kitces, Barron’s. Top citation sources across all five engines. Pitch founder bylines, expert sourcing on regulatory news, op-eds on macro themes. CCO pre-clearance on talking points before the journalist call; substantiation file built before the article runs.
- ▸ ThinkAdvisor, Financial Advisor Magazine, WealthManagement.com. Easier door than Barron’s, and AI engines weight them well on advisor-channel queries. Use the same pre-clearance workflow.
- ▸ WSJ Wealth Management, InvestmentNews. Institutional credibility, harder pitch, disproportionate authority. Treat as quarterly placement targets, not monthly.
- ▸ Anonymized aggregate data contributions. Publish year-over-year trend data (never client-attributable) and pitch the dataset to reporters. Clear of testimonial framing; high citation utility.
- ▸ Reddit founder presence on r/personalfinance, r/Bogleheads, r/financialindependence, r/fatFIRE, r/ChubbyFIRE. Educational responses with role disclosure, weekly comment cadence not posts, every comment routed through the same content-review workflow as a blog post.
Do not promise the client “ChatGPT will cite us inside 90 days.” AI citation timelines are non-deterministic. The winnable promise is inputs: number of earned-mention pitches placed, number of pieces published, AEO Citation Score directionality, time-to-correction on flagged items. Put that in writing in the scope; never write “we’ll get you cited” or “rank you #1.”
Phase 3
Days 31-60 — Compliance-safe content architecture
Three content patterns scale cleanly across an RIA portfolio without bottlenecking compliance review. The first two carry almost no advertising-rule exposure; the third is where most agencies make their first mistake.
- ▸ Educational pillar pages. “What is a fee-only fiduciary,” “fiduciary vs suitability standard,” “how RIA fees work.” FAQ-structured, 50-150 word chunks, standing disclaimers, no firm-specific performance claims. Describes the industry, not the firm’s services. Highly citable across all five engines.
- ▸ Attribute-rich firm schema. FinancialService + LocalBusiness + Organization JSON-LD covering legal entity, CRD number, registrations, fee model, service lines, account minimums, and key personnel credentials. Every attribute traces to Form ADV Part 2A so the schema and the regulatory filing never diverge.
- ▸ Disclosure-paired insights. Performance, projections, and hypotheticals paired with CCO-pre-approved disclosure blocks. Build the library once, route through the firm’s CCO once, reuse across multiple posts. Aligns to the 206(4)-1 substantiation requirement.
- ▸ Every draft moves draft → in_review → published. Nothing auto-publishes. The agency owns the workflow; the CCO owns the publish button.
Phase 4
Days 31-90 — The hallucination monitoring layer
The most differentiated service an agency can wrap around AEO for an RIA is misrepresentation monitoring. Not because hallucinations are constant — they are not. Because when one happens to a regulated firm, the cost is uniquely high: an examiner can read an inaccurate AI summary and ask the firm to substantiate something the firm never said.
- ▸ Weekly five-engine sweep. Queries naming the firm, the principals, and each service line. Tracked over time, not single snapshots, because AI answers fluctuate run-to-run.
- ▸ Diff against the canonical record from Phase 1. Material factual errors, implied testimonials, unverifiable performance claims, and registration misstatements all get flagged.
- ▸ CCO escalation packet: screenshot, source URL the AI cited, recommended correction action, severity tag. Logged with timestamp.
- ▸ Remediate at the source. Correct upstream content where possible, request platform correction where the engine offers it, and strengthen the firm’s canonical pages so AI re-pulls authoritatively. The last lever is the most durable.
- ▸ Retain every flag, every escalation, every correction in the 204-2 archive. Five years minimum, first two on-site, exportable on termination of the engagement.
Phase 5
Days 61-90 — The two reports that keep the program defensible
Two reports run on different cadences for different audiences. The monthly report renews the retainer; the quarterly CCO report survives the examination. Both have to be auditable, both have to align with what 206(4)-1 substantiation supports.
- ▸ Monthly AEO report — client-facing. AEO Citation Score across the five engines, change vs. prior month, top queries gained and lost, top citation sources, content published, compliance review status, hallucination flags and correction outcomes. Web view plus PDF export.
- ▸ Quarterly CCO report — compliance-facing. All advertisements published with substantiation log, testimonial and endorsement disclosure log, third-party rating disclosure log, books-and-records archive index. Aligned to 204-2 retention.
- ▸ The quarterly CCO report is the document that makes the program defensible. It is also the document that keeps the retainer renewed: the CCO who can drop one PDF into a regulator’s file is the CCO who recommends the agency stays.
Reddit visibility, carefully
Reddit dominates Perplexity (46.7% per Discovered Labs); for any RIA whose prospects use Perplexity to validate, Reddit is part of the answer engine even if no one at the firm has ever used it. The compliance line is clear and worth memorizing. What is allowed: founder-attributed educational responses with role disclosure, upvotable thought leadership, answering general questions without recommending the firm. What is forbidden: soliciting, promotional posts, anything reading as testimonial or endorsement, undisclosed paid promotion. Reddit’s self-promotion rules and the SEC’s anti-fraud authority both bite, sometimes simultaneously.
If the firm is dually registered with a broker-dealer, Reddit comments by IARs may be FINRA Rule 2210 communications, requiring pre-use principal approval and supervision. FINRA’s Feb 2026 re-proposal would tighten this further. The agency’s job is to build the workflow; the firm’s principal owns the approval.
How GenPicked operationalizes the playbook
You can run all five phases with manual tracking and a spreadsheet — for one RIA. At three clients, manual stops scaling. GenPicked is the platform agencies use to run the same workflow across 5, 10, 30 RIAs without the compliance archive falling apart.
- ▸ Five-engine ACS scoring. ChatGPT (0.35), Perplexity (0.25), Gemini (0.25), Claude (0.15) weighted; AI Overviews tracked separately. 0-100 score, 30-day rolling, per-engine breakdown. Failed engines drop and weights re-normalize so a Gemini outage never zeros the score.
- ▸ Hallucination flags as alerts. Diff engine classifies every change (new mention, lost mention, position shift, sentiment shift, new competitor, source changed) with severity tags from positive through critical.
- ▸ CCO-routed drafts. Autoblogger produces FAQ + insight content as drafts: draft → in_review → published. Nothing auto-publishes, every draft sits until the CCO clicks through.
- ▸ White-labeled reporting. Web view plus PDF export. Growth and Pro ship agency-branded; Scale ships fully white-labeled with custom templates and resale rights.
- ▸ 204-2-aligned archive. Every citation report, draft, screenshot, and schema config retained and exportable for the firm’s books-and-records file. Hand it over on termination of the engagement.
GenPicked’s agency platform is $97/mo (Starter), $197/mo (Growth, the most common entry), or $397/mo (Scale). Per-brand AEO tiers stack on top at $75-$525 per brand per month. A boutique RIA-focused agency on Growth with three RIA clients on Lite tier runs roughly $422 a month. The 14-day free trial covers one brand fully — an audit-first wedge into a new RIA prospect that does not require a signed scope of work to start.
Where to start this week
- ▸ Run the five-engine baseline on three RIA prospects in your pipeline. Score each on ChatGPT, Perplexity, Gemini, Claude, and Google AI Overviews. Walk one of them through the result and you have an audit-first sales call.
- ▸ Pull Form ADV Part 2A from IARD on each prospect and map the canonical record. Performance, principals, fees, registrations. This is the diff target.
- ▸ Read the December 16, 2025 SEC Risk Alert on the Marketing Rule. It tells you exactly what the Division of Examinations is looking for — testimonial disclosures, due diligence, oversight gaps. Build your monitoring criteria off it directly.
- ▸ Build the disclosure-block library. Pre-approved blocks for each content type, routed through the firm’s CCO once and reused thereafter. This is the artifact that unlocks scale across multiple RIA clients.
The agency that wins RIA retainers is the one whose CCO call goes well. The agency that loses them is the one whose CCO call surfaces a question the agency cannot answer. Build the program so the CCO call is short.
Start your 14-day free trial
Run the playbook with GenPicked
Growth plan free for 14 days. Five AI engines. Full agency dashboard.
Start free trial