Before you turn on Claude for Financial Advisors, check these three places in Microsoft 365

On September 14, 2026, Anthropic released Claude for Financial Advisors, a plugin for its Claude Enterprise plan that connects the model to the systems an RIA already runs on (claude.com). The Schwab connector gives Claude access to Schwab Advisor Services custodial data: balances, positions, transactions, cost basis, alerts, and money-movement status. Other connectors reach Addepar, Orion and Redtail, Envestnet Tamarac and MoneyGuide, SS&C Black Diamond, Wealthbox, iCapital, Wealth.com, Zocks, BlackRock and Vanguard model portfolios, and, from the existing connector list, Microsoft 365 itself. Advisors pick which ones to connect during setup.

The pitch to advisors is meeting prep, client summaries, and draft communications. The fact for the CCO is simpler. An approved connector lets Claude retrieve whatever custodial data the authorizing user can already see. Whether an individual advisor can authorize one depends on how the firm configured Claude and on the custodian’s own controls, and the record of that decision may live somewhere your compliance program has never looked.

This article is for firms that run on Microsoft 365, which is most of you. Two things have changed since August. Anthropic became a Microsoft subprocessor inside Copilot, which makes one path into your firm much easier to govern. And the custodian connectors arrived, which opened a path the tenant cannot see at all. The check below shows what Microsoft records on its own, what it records only after the firm configures it, and what still needs evidence from the custodian.

The rest of the article separates the three ways Claude reaches client data (the Copilot model, Anthropic’s own apps and add-ins, and the custodian connectors and browser), explains which one is already under the Microsoft agreement, which one Purview reaches only after a connector is configured, and which one it cannot see, maps each path to Reg S-P 248.30(a)(3) and (a)(5), Rule 204-2, Rule 206(4)-7, and the Marketing Rule, and closes with the 15-minute check: three Microsoft 365 screens and one custodian report, written so a CCO can hand it to the MSP.

The rest of this article is free to read with a BrainTrust account. Free members also get every Insight, the Securing Compliance exam report, the Mock SEC Cyber Exam, and the Document Review Matrix. Name and email, no card.

Create your free account   Already a member? Sign in

Done For You

Need it handled for you? One-time engagements and retainer support for RIAs →