How to get compliance sign-off before joining a referral program

Get compliance approval before you register: disclose the outside activity in writing, explain exactly how and when you could be paid, show how conflicts and client confidentiality are handled, and attach the published program terms. Broker-dealers, CPA firms, law firms and advisory firms test different rules, so lead with the one that governs you.

Get approval first, then register

Ask before you register, not after a client shows interest. Send your compliance team a short written request that names the program, describes what you would do, explains how and when you could be paid, and attaches the published program terms. A dated written approval, with any conditions, is the record you want on file before the first introduction.

Keep the request short, because the activity is narrow. SourceX referral partners introduce US companies and pass on basic fit information. They never export, upload or describe confidential records, and they take no part in negotiating price or terms. Any reward comes out of SourceX's fee, not out of the client's proceeds.

What will compliance ask about a referral arrangement?

Expect five lines of questioning whatever kind of firm you work for. Bring a written answer to each.

Compliance questionWhy they askWhat to bring
Is this an outside activity, and is it investment-related?Outside activity policies exist to catch paid work beyond your roleOne paragraph: you would introduce companies that may license business records to AI labs and data buyers; the transaction is a data license, not an investment, a capital raise or a sale of the company
Who pays you, how much and when?Third-party compensation can pull against duties to clientsThe formula from the terms: 25% of the eligible platform fees SourceX actually collects from the referred company's licensing deals, capped at $100,000 per referred company, payable only after the buyer pays and SourceX receives its fee
Could the reward conflict with a client duty?You may already advise the company you would introduceA list of likely clients and the services your firm provides each
What client information leaves the firm?Confidentiality and privacy obligationsA statement that you share basic fit information only, with client permission, and never records
How will clients know you may be paid?Disclosure is often the condition of approvalYour draft disclosure sentence

Which rules is your firm actually checking?

The questions are similar everywhere; the rule behind them differs by firm type. Know which one governs you before the meeting.

Your firmRule or policy compliance will applyWhat it means for your request
Broker-dealerFINRA's outside activity rules. FINRA reports that the SEC approved new Rule 3290 on September 15, 2026, replacing Rules 3270 and 3280, with the effective date to be announced in a Regulatory NoticeRules 3270 and 3280 apply until that date. Give written notice and wait for the firm's decision; whether the activity counts as investment-related is the firm's call
Broker-dealer paying othersFINRA Rule 2040 limits payments by member firms and their associated persons to unregistered personsIt governs FINRA members' payments, not SourceX's, but your firm may raise it
CPA firmAICPA ET 1.520, Commissions and Referral Fees: no commission for recommending a product or service to a client for whom the firm performs an audit, review, certain compilations or an examination of prospective financial information; permitted referral fees must be disclosedMap attest clients first. State rules can be stricter than the AICPA Code, so check your board
Law firmYour state's version of the ABA Model Rules, including Rules 1.5, 1.8, 5.4 and 7.2Each state adopts its own text; your ethics counsel decides how it applies
Bank, RIA or advisory firmThe firm's code of ethics, conflicts policy and outside activity policyAsk for the exact policy section and the form it uses

One more point for anyone in securities: do not lean on an exemption. The SEC proposed a finder exemption in 2020 but did not finalize it, and it concerned helping companies raise capital, not introducing companies for data licensing. Leave exemptions out of the memo and let compliance classify the activity.

This is general information, not legal, tax or financial advice. Confirm with your own counsel, tax adviser or professional body before acting.

Before you start: what to gather

An hour of preparation saves a round of questions. Collect these first.

  • Your firm's outside activity policy and the form it uses
  • Your code of ethics or conflicts policy, including any section on third-party compensation
  • The published program terms and the program FAQ
  • A short list of clients you might introduce, with the services your firm provides each
  • Your draft client disclosure sentence
  • A note on how tax reporting of any reward would be handled, to confirm with your tax adviser

Step by step: from first email to written approval

  1. Find the right form and the right approver. Ask which policy covers paid outside activities and who signs off. At a broker-dealer, ask for the outside business activity process; at a CPA firm, start with whoever owns independence and risk management.
  2. Describe the activity in one paragraph. Name SourceX and say you would introduce US companies with 50+ full-time employees at peak (contractors excluded) that may license operational records. SourceX qualifies each company and runs the inventory, pricing, buyer review, contracting and delivery.
  3. Quote the compensation exactly as published. Copy the reward formula and payout trigger from the terms. Do not estimate earnings, and say plainly that rewards are not guaranteed.
  4. Map conflicts client by client. Flag any client for whom your firm performs attest work, acts as a fiduciary, advises on a sale or financing, or serves in a court-supervised role. For those, expect a prohibition or a disclose-and-consent condition.
  5. Draw the confidentiality line. You share approximate headcount, years in operation, the kinds of systems in use and the sponsor's contact details, and only with the client's permission. Redaction and de-identification are settled between the company and SourceX before any work begins; you never touch records.
  6. Propose your disclosure. Offer the sentence you will give clients in writing before any introduction, for example: "If your company licenses data through SourceX, SourceX may pay me a referral reward out of its own fee. It does not reduce what your company receives, and you are under no obligation to proceed."
  7. Submit and ask for conditions in writing. Request a dated approval listing any conditions, such as excluded clients, pre-clearance of each introduction or annual re-attestation.
  8. Calendar a re-review. Revisit the approval when your role changes, when you move firms, or when a rule changes, for example when FINRA announces the effective date of Rule 3290.

A one-page memo outline you can adapt

Replace the braces, attach the terms, and send it as a single page.

Common mistakes that slow approval

MistakeWhy it hurtsFix
Registering first and asking laterAn introduction made before approval can breach policy even if approval followsGet written approval before you register
Calling yourself a finder or brokerThose words carry securities meaning that compliance then has to work throughDescribe the activity plainly and let compliance classify it
Estimating what you might earnIt reads as a sales pitch and invites questions nobody can answerQuote the published formula and say rewards are not guaranteed
Leaving out the client listCompliance cannot assess conflicts without itList likely clients and your firm's services for each
Offering to "share details" with SourceXIt signals a confidentiality problemState that you pass on basic fit information only, with permission
Treating approval as permanentRules, roles and firms changeAsk how often to re-attest and put it in the calendar

Illustrative example

Illustrative and fictional: Dana is a transaction-advisory director at a regional CPA firm. Two advisory clients have long operating histories: a freight brokerage with about 180 full-time staff and an IT services firm with about 90. Her firm also audits the brokerage.

Dana sends her risk management partner the memo outline above with both names flagged. The firm approves the arrangement with three conditions: no introductions of attest clients, written disclosure to each client before an introduction, and re-attestation every year. Dana introduces only the IT services firm, after giving its CEO the disclosure sentence in writing, and files the approval with her partner records.

Next step

Once you hold written approval, register as a partner and keep a copy of the approval with your records. If compliance asks how the formula behaves, the referral earnings calculator shows it using the published program.

Some roles bring extra questions. Restructuring professionals working in court-supervised matters should read what creditors' committees ask before an estate licenses records. Operating partners can expect an investment committee to ask about reputational risk when portfolio companies license data. If your real question is the ethics rather than the paperwork, read the ethics of taking a referral fee on a client's data deal first, and the FAQ covers the rest.

  1. Step 1Share your linkSend your personal link to a company you know.
  2. Step 2Company appliesThe company applies itself at /apply.
  3. Step 3Buyer selects and paysThe buyer selects and pays for the data and SourceX receives its fee.
  4. Step 4You get your rewardYour share of SourceX fees becomes payable.

Common questions

Do I need approval if I only plan to make one introduction?

Assume yes and ask before the first one. Whether a single paid introduction needs approval is a question your firm's policy answers, not the program's. The cleanest record is a written approval dated before any client is introduced, rather than one sought after a reward becomes payable, which can look like a breach that was fixed after the fact.

What if compliance says no?

Respect the decision and keep the written answer. Depending on your firm's policy, you may still be allowed to mention SourceX to a client without any compensation, and the company can always apply directly. Credit goes to the first valid referrer, so if you cannot be paid, do not register and do not use a referral link for that client.

Can my firm, rather than me personally, be the partner?

Some firms prefer that any referral compensation be paid to the firm rather than to an individual. Whether that structure is available is set by the program terms and your partner agreement, so raise it with SourceX and your compliance team before registering.

How often should the approval be renewed?

Follow your firm's attestation cycle and revisit it whenever something material changes: a new role, a move to another firm, a client becoming an attest client, or a rule change such as FINRA announcing the effective date of Rule 3290. Ask compliance to state the renewal trigger in the approval itself.

What documents can I show compliance about the program?

Start with the published program terms and the program FAQ, which set out the reward formula, the payout trigger and the partner's role. If compliance needs something more specific, such as how attribution works or how payments are reported, ask SourceX directly and pass the written answer on rather than paraphrasing it.

Free resources

By SourceX Partnerships Team · Published 2026-10-09 · Updated 2026-10-09

Know a US company with valuable proprietary data?

Become a referral partner from anywhere we support, get your link and introduce an owner or authorized decision-maker.

Refer a company →

I own a business

Explore licensing your company's data to AI developers worldwide. Start a short assessment; no uploads needed.

Start an assessment