
Compliance Services
17a-4 D3P
The Importance of the Designated Third-Party Requirement
Many securities firms have overlooked a critical record keeping obligation: the designated third-party (D3P) rule, also known as the SEC Rule 17a-4. Iron Mountain's comprehensive D3P compliance service is available for all types of electronic records, including computer output to laser disc (COLD), back-office, imaged, voice recording and transactional records, as well as email and messaging communications.
Online or Onsite Access
You can choose from two distinct options, so you can have the solution that best fits your needs:
- D3P Online Access: for secure remote access to your archive systems by Iron Mountain
- D3P Onsite Access: Iron Mountain’s compliance experts retrieve records from archive Electronic Storage Media (ESM) at your facility
The Deliverables: Analysis, Validation, and Peace of Mind
Your compliance organization is provided with tremendous insight into your systems.
The service includes:
- A Letter of Intent to regulators informing them that you contracted a Designated Third-Party Provider
- A System Configuration Plan (SCP) explaining access to your records
- An annual test and report to show continual compliance while your technology goes through upgrades
- A letter of Undertaking to file with the SEC and self-regulating organizations
- Two D3P status reviews each year to validate accountability
- Peace of mind knowing that you are fully compliant with the D3P rule
MAINTAINING COMPLIANCE WITH THE SEC DESIGNATED THIRD PARTY RULE
Do you know about the Designated Third Party (SEC) rule regarding the preservation of electronic records? This short video breakdowns everything you need to know to maintain compliance.

Contact Iron Mountain
Our Customer Support section can help provide you with the quickest answers to your questions, or feel free to contact us at your convenience.