Agent library / Compliance and risk / Annual compliance review
Annual compliance review
PitCrew gathers the year's testing, findings and follow-ups and drafts your annual compliance review report. Your CCO writes the conclusions.
When it runsEach year
Who approvesThe CCO
Works withTesting workpapers, run history, policy library
How it works
4 steps. A person decides at the end.
- Gathers the yearTesting, findings, follow-ups
- Checks last year's itemsDone or still open
- Drafts the reportBy policy area
- A person approvesCCO writes conclusionsAnd signs off
What it reads and what it produces
Reads
- Workpapers
- Prior-year findings
- Run history
Produces
- A draft report
- Open prior-year items
Rules it follows
- Never concludesThe CCO writes the conclusions.
- Flags open itemsFrom last year.
Questions firms ask
Last updated: October 2026
How long does it take to set up?
5 working days from data access to the first production run. PitCrew experts connect your systems and enter your firm's rules.
More in Compliance and risk
See all of Compliance and risk →
Document review, ADV consistencyChecks Form ADV Part 1, Part 2 and your actual practice against each other before you file.Communication reviewReviews flagged emails and messages and routes the real issues to compliance.Policy change impact reviewWhen a policy or rule changes, finds the documents and processes that now need updating.Branch auditPrepares and works through branch office inspections and drafts the findings.Policy and regulation Q&AAnswers routine staff questions from your firm's policies, with the section cited.Compliance calendarKeeps every filing and recurring task on the calendar, and reminds owners ahead of each deadline.Supervision and escalationLogs issues that need supervision and routes each one to the right person with a deadline.SEC exam readiness checkChecks your records against what examiners commonly request and lists the gaps.Exam and audit response packageMaps each request on an exam or audit list to your records and assembles the response.Compliance evidence reportsTurns your agents' run history into reports organized by policy area.Vendor security reviewTracks vendors with client data, reads their security reports and flags exceptions and expiries.Disaster recovery test recordsKeeps the records of your disaster recovery and backup tests, and flags tests that are overdue.Breach notification (Reg S-P)Keeps your incident playbook ready and drafts notices and deadlines if an incident happens.Cybersecurity policy auditChecks your written cybersecurity policies against the rules and your own procedures.
Don't see your work?
Tell us the taskWe build it with you, from data access to the first production run in 5 working days.