How to get compliance sign-off before joining a referral program
Get compliance approval before you register: disclose the outside activity in writing, explain exactly how and when you could be paid, show how conflicts and client confidentiality are handled, and attach the published program terms. Broker-dealers, CPA firms, law firms and advisory firms test different rules, so lead with the one that governs you.
Get approval first, then register
Ask before you register, not after a client shows interest. Send your compliance team a short written request that names the program, describes what you would do, explains how and when you could be paid, and attaches the published program terms. A dated written approval, with any conditions, is the record you want on file before the first introduction.
Keep the request short, because the activity is narrow. SourceX referral partners introduce US companies and pass on basic fit information. They never export, upload or describe confidential records, and they take no part in negotiating price or terms. Any reward comes out of SourceX's fee, not out of the client's proceeds.
What will compliance ask about a referral arrangement?
Expect five lines of questioning whatever kind of firm you work for. Bring a written answer to each.
| Compliance question | Why they ask | What to bring |
|---|---|---|
| Is this an outside activity, and is it investment-related? | Outside activity policies exist to catch paid work beyond your role | One paragraph: you would introduce companies that may license business records to AI labs and data buyers; the transaction is a data license, not an investment, a capital raise or a sale of the company |
| Who pays you, how much and when? | Third-party compensation can pull against duties to clients | The formula from the terms: 25% of the eligible platform fees SourceX actually collects from the referred company's licensing deals, capped at $100,000 per referred company, payable only after the buyer pays and SourceX receives its fee |
| Could the reward conflict with a client duty? | You may already advise the company you would introduce | A list of likely clients and the services your firm provides each |
| What client information leaves the firm? | Confidentiality and privacy obligations | A statement that you share basic fit information only, with client permission, and never records |
| How will clients know you may be paid? | Disclosure is often the condition of approval | Your draft disclosure sentence |
Which rules is your firm actually checking?
The questions are similar everywhere; the rule behind them differs by firm type. Know which one governs you before the meeting.
| Your firm | Rule or policy compliance will apply | What it means for your request |
|---|---|---|
| Broker-dealer | FINRA's outside activity rules. FINRA reports that the SEC approved new Rule 3290 on September 15, 2026, replacing Rules 3270 and 3280, with the effective date to be announced in a Regulatory Notice | Rules 3270 and 3280 apply until that date. Give written notice and wait for the firm's decision; whether the activity counts as investment-related is the firm's call |
| Broker-dealer paying others | FINRA Rule 2040 limits payments by member firms and their associated persons to unregistered persons | It governs FINRA members' payments, not SourceX's, but your firm may raise it |
| CPA firm | AICPA ET 1.520, Commissions and Referral Fees: no commission for recommending a product or service to a client for whom the firm performs an audit, review, certain compilations or an examination of prospective financial information; permitted referral fees must be disclosed | Map attest clients first. State rules can be stricter than the AICPA Code, so check your board |
| Law firm | Your state's version of the ABA Model Rules, including Rules 1.5, 1.8, 5.4 and 7.2 | Each state adopts its own text; your ethics counsel decides how it applies |
| Bank, RIA or advisory firm | The firm's code of ethics, conflicts policy and outside activity policy | Ask for the exact policy section and the form it uses |
One more point for anyone in securities: do not lean on an exemption. The SEC proposed a finder exemption in 2020 but did not finalize it, and it concerned helping companies raise capital, not introducing companies for data licensing. Leave exemptions out of the memo and let compliance classify the activity.
This is general information, not legal, tax or financial advice. Confirm with your own counsel, tax adviser or professional body before acting.
Before you start: what to gather
An hour of preparation saves a round of questions. Collect these first.
- Your firm's outside activity policy and the form it uses
- Your code of ethics or conflicts policy, including any section on third-party compensation
- The published program terms and the program FAQ
- A short list of clients you might introduce, with the services your firm provides each
- Your draft client disclosure sentence
- A note on how tax reporting of any reward would be handled, to confirm with your tax adviser
Step by step: from first email to written approval
- Find the right form and the right approver. Ask which policy covers paid outside activities and who signs off. At a broker-dealer, ask for the outside business activity process; at a CPA firm, start with whoever owns independence and risk management.
- Describe the activity in one paragraph. Name SourceX and say you would introduce US companies with 50+ full-time employees at peak (contractors excluded) that may license operational records. SourceX qualifies each company and runs the inventory, pricing, buyer review, contracting and delivery.
- Quote the compensation exactly as published. Copy the reward formula and payout trigger from the terms. Do not estimate earnings, and say plainly that rewards are not guaranteed.
- Map conflicts client by client. Flag any client for whom your firm performs attest work, acts as a fiduciary, advises on a sale or financing, or serves in a court-supervised role. For those, expect a prohibition or a disclose-and-consent condition.
- Draw the confidentiality line. You share approximate headcount, years in operation, the kinds of systems in use and the sponsor's contact details, and only with the client's permission. Redaction and de-identification are settled between the company and SourceX before any work begins; you never touch records.
- Propose your disclosure. Offer the sentence you will give clients in writing before any introduction, for example: "If your company licenses data through SourceX, SourceX may pay me a referral reward out of its own fee. It does not reduce what your company receives, and you are under no obligation to proceed."
- Submit and ask for conditions in writing. Request a dated approval listing any conditions, such as excluded clients, pre-clearance of each introduction or annual re-attestation.
- Calendar a re-review. Revisit the approval when your role changes, when you move firms, or when a rule changes, for example when FINRA announces the effective date of Rule 3290.
A one-page memo outline you can adapt
Replace the braces, attach the terms, and send it as a single page.
Common mistakes that slow approval
| Mistake | Why it hurts | Fix |
|---|---|---|
| Registering first and asking later | An introduction made before approval can breach policy even if approval follows | Get written approval before you register |
| Calling yourself a finder or broker | Those words carry securities meaning that compliance then has to work through | Describe the activity plainly and let compliance classify it |
| Estimating what you might earn | It reads as a sales pitch and invites questions nobody can answer | Quote the published formula and say rewards are not guaranteed |
| Leaving out the client list | Compliance cannot assess conflicts without it | List likely clients and your firm's services for each |
| Offering to "share details" with SourceX | It signals a confidentiality problem | State that you pass on basic fit information only, with permission |
| Treating approval as permanent | Rules, roles and firms change | Ask how often to re-attest and put it in the calendar |
Illustrative example
Illustrative and fictional: Dana is a transaction-advisory director at a regional CPA firm. Two advisory clients have long operating histories: a freight brokerage with about 180 full-time staff and an IT services firm with about 90. Her firm also audits the brokerage.
Dana sends her risk management partner the memo outline above with both names flagged. The firm approves the arrangement with three conditions: no introductions of attest clients, written disclosure to each client before an introduction, and re-attestation every year. Dana introduces only the IT services firm, after giving its CEO the disclosure sentence in writing, and files the approval with her partner records.
Next step
Once you hold written approval, register as a partner and keep a copy of the approval with your records. If compliance asks how the formula behaves, the referral earnings calculator shows it using the published program.
Some roles bring extra questions. Restructuring professionals working in court-supervised matters should read what creditors' committees ask before an estate licenses records. Operating partners can expect an investment committee to ask about reputational risk when portfolio companies license data. If your real question is the ethics rather than the paperwork, read the ethics of taking a referral fee on a client's data deal first, and the FAQ covers the rest.
- Step 1Share your linkSend your personal link to a company you know.
- Step 2Company appliesThe company applies itself at /apply.
- Step 3Buyer selects and paysThe buyer selects and pays for the data and SourceX receives its fee.
- Step 4You get your rewardYour share of SourceX fees becomes payable.
Common questions
Do I need approval if I only plan to make one introduction?
Assume yes and ask before the first one. Whether a single paid introduction needs approval is a question your firm's policy answers, not the program's. The cleanest record is a written approval dated before any client is introduced, rather than one sought after a reward becomes payable, which can look like a breach that was fixed after the fact.
What if compliance says no?
Respect the decision and keep the written answer. Depending on your firm's policy, you may still be allowed to mention SourceX to a client without any compensation, and the company can always apply directly. Credit goes to the first valid referrer, so if you cannot be paid, do not register and do not use a referral link for that client.
Can my firm, rather than me personally, be the partner?
Some firms prefer that any referral compensation be paid to the firm rather than to an individual. Whether that structure is available is set by the program terms and your partner agreement, so raise it with SourceX and your compliance team before registering.
How often should the approval be renewed?
Follow your firm's attestation cycle and revisit it whenever something material changes: a new role, a move to another firm, a client becoming an attest client, or a rule change such as FINRA announcing the effective date of Rule 3290. Ask compliance to state the renewal trigger in the approval itself.
What documents can I show compliance about the program?
Start with the published program terms and the program FAQ, which set out the reward formula, the payout trigger and the partner's role. If compliance needs something more specific, such as how attribution works or how payments are reported, ask SourceX directly and pass the written answer on rather than paraphrasing it.
Related pages
Free resources
- Days sales outstanding calculator — How many days customers take to pay.
- Business succession planning assessment — Ten questions on successor, transition and documentation.
- NPV calculator — Net present value with a discounted cash flow table.
- All free tools · MCP resource center
By SourceX Partnerships Team · Published 2026-10-09 · Updated 2026-10-09
Know a US company with valuable proprietary data?
Become a referral partner from anywhere we support, get your link and introduce an owner or authorized decision-maker.
Refer a company →I own a business
Explore licensing your company's data to AI developers worldwide. Start a short assessment; no uploads needed.
Start an assessment