Compliance infrastructure
for RIAs.

Email surveillance, archive, and SEC-compliant recordkeeping in one place. Built specifically for small RIA firms.

Set up in under 5 minutes — no long IT project, no setup fee.

$99/mo · 15-day free trial · or book a demo

BUILT FOR SEC 17a-4 · 204-2 · 206(4)-1 · 206(4)-7
Attestation Example
SHA-256
All records intact
94,658
verified
04:21 7b4f9a82ee1d…c01a9e
04:21 a92d6c43bb09…fe33b1
04:21 f018b71e5a32…8d2c47
04:21 2c5ea1f49d77…91ba30
04:21 8b1d3f02ce64…4ec7f9
verifier.run — 4d ago /operator
Why this exists

Most RIA firms patch together compliance with spreadsheets, PDFs, and IT consultants. It works until the SEC asks for records.

Enterprise compliance tools are built for broker-dealers with hundreds of employees. Their pricing reflects that.

Small firms need the same compliance posture for a fraction of the cost. That's what Turret is.

$99 /month

Includes 5 users · +$25/user after · no setup fee · 15-day free trial.

Enterprise archiving vendors charge per-seat on annual contracts, plus a hefty setup fee. Turret is $99/mo, month to month, no setup fee, and you can start it yourself in minutes.

The components

Built like infrastructure, not a settings page.

Interactive previews of the real product surfaces — the same layouts and vocabulary compliance officers work in every day, shown here with demo data.

Scanning live Demo data

Alerts

AI-triaged outbound mail. Filter, escalate, resolve.

16,656 messages scanned this month · 39 alerts · 7 high-confidence pending /alerts

AI Triage

Click a pattern below to see how Turret scores it — Claude Haiku.

Confidence 0%

Archive search

Search every word across your full 7-year retention, instantly.

16,800
Indexed: subject + body + attachment text /archive

Archive integrity

SHA-256 attestation across every archived message.

SEC Rule 204-2
All 16,800 records intact
Last verified 3 days ago · 0 mismatches
Latest activity

Audit log

Every alert action recorded as an immutable activity row. Per-alert audit timeline at /alerts/:id. Cryptographic integrity attestation across the full archive.

APPEND-ONLY
System AI-triaged 92% 2m
j.chen@northpoint.example Reviewed REVIEWED 14m
s.ali@beacon.example Escalated ESCALATED 31m
j.chen@northpoint.example Reverted to NEW 58m
System Created NEW 2h
System Verified HASH OK 1d
Every row hashable to a SHA-256 attestation · examiner-ready under SEC Rule 17a-4 Append-only audit tables
From signup to first review

How it works.

Three steps from authorizing your Workspace to your reviewer seeing their first flagged email. About thirty minutes, end to end.

01 Connect

Connect your Workspace.

Authorize Turret to read outbound mail. About thirty minutes with a guided setup wizard — no IT lift required.

setup status complete
Workspace authorized · read-only
02 Scan

Patterns and AI find what matters.

We scan outbound mail continuously and flag potential issues. AI triage rates each alert so reviewers see signal, not noise.

flagged HIGH · 92%
HIGH Performance guarantee language
03 Review

Review, mark, and resolve.

Your compliance team reviews each alert, marks the disposition, and escalates when needed. Every action is logged for audit defensibility.

activity logged
Marked REVIEWED · 14m ago

Less noise. More signal.

Most surveillance products dump noise on your compliance officer. Turret hands them a prioritized list with explanations. Here's how it works.

AI Triage Assessment

92%

Email explicitly promises "absolutely guarantee double-digit returns" and claims "zero risk" — direct violations of SEC Marketing Rule 206(4)-1 prohibiting performance guarantees and misleading risk statements. This is not routine business language or a legal footer.

claude-haiku-4-5-20251001

2026-04-29 22:09:54 UTC

HIGH Performance guarantees / forbidden marketing language NEW

Q4 strategy update — what to expect

Message Details

From
david@acme-capital.example.com
To
mrodriguez@example.com
Sent
2026-04-29 14:09:44 UTC
Match in
BODY

Matched Snippet

will absolutely guarantee double-digit returns this year. There's zero risk

AI Triage Assessment

5%

DHL tracking numbers are 10–11 digits; this appears to be a formatted tracking number coincidentally matching the credit card regex. No PCI/PII violation indicated.

claude-haiku-4-5-20251001

2025-08-22 01:00:31 UTC

HIGH Credit card pattern NEW

DHL shipment confirmation — documents

Message Details

From
david@acme-capital.example.com
To
lwilson@example.com
Sent
2025-08-22 01:00:26 UTC
Match in
BODY

Matched Snippet

Tracking number: 9012 3847 2910 4821

Two real outputs from Turret's AI triage. Confidence scores reflect genuine model output — we don't manufacture them for marketing.

What Turret is built on

What Turret is
built from.

Three capabilities the surveillance + archive + audit-log components above sit on top of — the pieces an examiner cares about when they ask "who can see this, and how is access controlled?"

01 Patterns

Compliance rules, encoded.

Marketing rule violations. MNPI references. PII exposure. Off-channel signals. Pre-configured, extensible.

defaults 11 · custom OK
HIGHPerformance guarantees
HIGHMNPI / Insider information
MEDOff-channel communication
02 Roles

Scoped access for outside reviewers.

Invite your compliance consultant or fractional CCO. They review alerts and archive without ever touching your Workspace.

role 3 levels
ADMINmanage all
USERreview
VIEWERread-only
03 Connection

Read-only, by design.

Google Workspace (Domain-Wide Delegation) or Microsoft 365 (an admin-consented app). We can read, we cannot send or modify. Revoke from your admin console at any time.

access scope read-only
Read outbound mail
Send, modify, or delete
Revoke anytime — your admin

How your data is protected

One simple price.

Everything included — 7-year SEC-compliant archive, AI-triaged alerts, and a full audit log. Monthly, cancel anytime, and no setup fee, ever.

$99 / month

Includes 5 users · +$25/user after that.

No setup fee 15-day free trial Cancel anytime
  • Every mailbox in your firm monitored
  • Subject + body scanning with AI-triaged alerts
  • 7-year archive + full-text search (SEC 204-2 / 17a-4)
  • 11 pre-configured RIA compliance patterns
  • Append-only audit log + SHA-256 integrity attestation
Start free trial or pay annually — 2 months free

No setup fee, no per-seat contract. Enterprise archiving tools typically charge a hefty implementation fee and lock you into an annual contract — Turret is $0 to start and month to month. Larger firm or custom compliance needs? Talk to us.

Frequently asked questions

Do I need to install anything?

No. Turret connects through your Google Workspace or Microsoft 365 admin controls. No agents, no browser extensions, no employee downloads.

Do you support Google Workspace and Microsoft 365?

Both. Turret connects to Google Workspace (via Domain-Wide Delegation) and to Microsoft 365 (via an admin-consented Microsoft Graph app). Either way access is read-only, authorized by your admin, and revocable at any time.

How long does setup take?

About 30 minutes for the initial Workspace authorization. Your historical scan completes in 1–3 hours depending on mail volume. We're with you on a screen-share for the first onboarding.

Is this enough for an SEC exam?

Turret captures, indexes, and preserves email per SEC Rule 204-2(a)(7). Export tools let you respond to information requests quickly. We're not a substitute for a compliance officer or attorney — we're the infrastructure that makes their job easier.

Start monitoring in minutes

15-day free trial. Or book a 30-minute demo — no commitment.