Compliance: record keeping that saves you

BF

The BrokerFold Team — Product + Engineering

Last reviewed

On this page
A fountain pen signing a document — permission captured on paper the day it was given

Almost every compliance rule in this track shares a quiet second clause: be able to prove it. Consent to publish, licence to use, evidence for a claim — the rule is only half satisfied when the thing is true; the other half is a record that shows it was true when you acted. Agents rarely lose disputes over what they did; they lose them over what they can no longer demonstrate. This lesson is the short list of files worth keeping, and the discipline that makes keeping them free.

The six files that matter

One: consent records for your database — basis and date per contact, the output of the CASL audit. Two: publication consents — every testimonial, every named transaction in your marketing, in writing, with the original words beside the published version, per the testimonials lesson. Three: licences — photo shoots, video, music in reels, anything created by someone else that appears in your marketing. Four: substantiation — the ranking source, the award letter, the numbers behind any claim currently live under your name. Five: platform records — terms acceptances and gated-data access logs. Six: the brokerage tier — transaction files and FINTRAC identification records, which run on the brokerage’s retention schedule rather than yours.

Know which records write themselves

The platform tier is automatic by design: visitor terms acceptances are stamped server-side and sold-data access is logged append-only, which is precisely what VOW compliance requirements demands — and why the day-to-day VOW lesson tells you to leave those logs strictly alone. Consent captured through your website forms stamps itself too. Automation is the best record keeper you will ever hire; the manual burden that remains is small and specific.

Capture at the moment, not at the memory

The records that go missing are the offline ones: the verbal yes at a closing table, the photographer’s nod about portfolio use, the client’s happy text about the sale announcement. The rule that saves you is capture-at-the-moment — forward the text to the file, confirm the verbal in a one-line email, save the signed page before the folder closes. A record made the same day is evidence; the same fact reconstructed a year later is an argument.

File so future-you can find it

A record you cannot retrieve is functionally a record you do not have. Keep one location per category — a consents folder, a licences folder, substantiation attached to the campaign that uses it — and name files by person and date. When a dispute email arrives, your target is a ten-minute response with attachments, because disputes answered with documents on day one tend to end on day one.

What done looks like

Every live claim, quote, image, and named sale in your marketing has a document behind it that you could produce today. The automated logs run untouched. New permissions get filed the day they are given, and nothing about your evidence depends on anyone’s memory, including yours.

The mistake that costs the most

Keeping records only when something feels risky. The dispute never arrives about the thing you flagged — it arrives about the routine post from two years ago, made on a day nothing felt risky at all. That is the entire case for habit over judgment: file everything in the six categories, every time, and the one record you eventually need will be there with all the boring ones.

Frequently asked questions

How long should I keep marketing-side records?

Match the record to the exposure: keep a consent or licence for as long as the thing it authorizes is published, plus a margin — a testimonial consent matters for as long as the quote is live, and a photo licence for as long as the image could resurface. Transaction and identification records follow brokerage and regulatory retention schedules, which your broker can state precisely.

Are screenshots and emails really good enough as evidence?

A dated email in your own sent folder or a screenshot with visible context is far better than memory and usually sufficient for the marketing-side disputes agents actually face. The upgrades that matter are cheap: keep things in their original form, note the date and channel, and never edit after the fact.

Which records am I personally responsible for versus my brokerage?

Transaction files, trust records, and FINTRAC identification obligations run through the brokerage's compliance regime. The marketing-side files — consents, licences, claim substantiation — attach to advertising published under your name, so building them is your habit even where the brokerage shares liability.

Keep reading

Fold your stack into one.

14 days free. No credit card. Your data stays yours.