REGCF.AGENCY
Learn Reg CF

SEC, FINRA and State Oversight of Crowdfunding

Reg CF is a federal securities exemption with a regulated intermediary requirement, not a government endorsement of an offering. The SEC oversees the federal framework, FINRA has a role with member broker-dealers and funding portals, and state-law questions still deserve attention.

RegCF Agency Team · Nov 11, 2026 · 14 min read
SEC, FINRA and State Oversight of Crowdfunding
{"title":"The short answer","points":["Reg CF is a federal securities exemption with a regulated intermediary requirement, not a government endorsement of an offering. The SEC oversees the federal framework, FINRA has a role with member broker-dealers and funding portals, and state-law questions still deserve attention.","Confirm applicable requirements with securities counsel and the selected intermediary.","Not legal advice; rules and facts require case-specific review."]}

Reg CF is a federal securities exemption with a regulated intermediary requirement, not a government endorsement of an offering. The SEC oversees the federal framework, FINRA has a role with member broker-dealers and funding portals, and state-law questions still deserve attention. The right approach depends on the security, issuer facts, offering terms, and current Regulation Crowdfunding requirements. This guide explains the practical decisions founders should surface early, without replacing individualized legal advice.

The SEC and the federal framework

The SEC adopted Regulation Crowdfunding under the Securities Act and administers federal filing and disclosure requirements. Issuers generally file Form C and conduct transactions online through an SEC-registered intermediary, either a broker-dealer or funding portal. SEC filings are not an approval, endorsement, or finding that an investment is safe. Issuers remain responsible for accurate disclosure and antifraud compliance. 1

A founder should treat compliance as part of the campaign design, not as paperwork to clean up after marketing begins. The company, its officers, counsel, accountant, and selected intermediary each have distinct jobs. Assign an owner for every disclosure and operational task, maintain a dated source file, and resolve inconsistencies before the public campaign goes live. An efficient process is not a shortcut around securities laws; it is a way to catch errors while they are still cheap to fix.

Build the disclosure from verifiable company records. Keep the current capitalization table, governing documents, financial statements, material contracts, intellectual-property records, litigation information, and use-of-proceeds assumptions together. If a claim appears in the offering statement, pitch video, advertising, email, or social post, identify who verified it and which record supports it. Marketing language must not contradict formal disclosure, and a disclaimer will not cure a misleading statement or omission. When the underlying fact changes, assess both the filing and every public-facing version.

The practical failure mode is often not a dramatic legal theory. It is a stale number repeated across a dozen assets, an employee answering investor questions from memory, an unapproved promise in a founder interview, or a change communicated only on social media. Create a single approved fact sheet with the offer terms, risks, financial figures, dates, and permitted descriptions. Give the same current version to the founders, agency, platform contact, and anyone authorized to speak about the offering.

Choose a review cadence that matches the campaign. Before launch, have the responsible people review the complete package together, not as separate documents assembled at the last minute. During the raise, check for developments that may make a statement inaccurate, including financing changes, material customer or supplier events, litigation, leadership changes, and revised projections. At close, preserve final versions, filing receipts, intermediary communications, and investor notices. Afterward, calendar ongoing reporting duties and track who is responsible if the original team changes.

A short written escalation rule helps: pause a scheduled campaign communication when a material fact is uncertain; send the issue to the designated company lead and securities counsel; document the decision; and update the relevant filing or investor communication where required. Do not ask a marketer to decide whether an event is legally material. They can spot a changed fact, preserve the draft, and route it to the people qualified to decide.

Founders should also separate process questions from legal conclusions. The platform can explain its workflow and counsel can advise on obligations, but neither a campaign calendar nor a portal checklist guarantees the issuer has met every requirement. Confirm current rules and filing instructions rather than relying on old blog posts, screenshots, or another company's precedent. The SEC's issuer guidance is a useful starting point, but expressly describes itself as staff guidance rather than a binding rule or legal advice. 1

{"title":"At a glance","columns":["Question","Key consideration","Founder action"],"highlight":1,"rows":[["Starting point","Reg CF is a federal securities exemption with a regulated intermediary requirement, not a government endorsement of an offering. The SEC oversees the federal framework, FINRA has a role with member broker-dealers and funding portals, and state-law questions still deserve attention.","Document assumptions"],["During campaign","Facts can change","Escalate promptly"],["After close","Obligations continue","Calendar follow-up"]],"note":"Illustrative framework, not a legal determination."}

FINRA and the intermediary

A funding portal must register with the SEC and become a FINRA member; broker-dealers are subject to their applicable registration and regulatory framework. The intermediary performs defined gatekeeping and operational functions, but it does not take over the issuer’s disclosure responsibility. Understand the portal’s review process, communication policies, and escalation path. SEC intermediary guidance summarizes core obligations but is staff guidance, not a substitute for rules. 3

A founder should treat compliance as part of the campaign design, not as paperwork to clean up after marketing begins. The company, its officers, counsel, accountant, and selected intermediary each have distinct jobs. Assign an owner for every disclosure and operational task, maintain a dated source file, and resolve inconsistencies before the public campaign goes live. An efficient process is not a shortcut around securities laws; it is a way to catch errors while they are still cheap to fix.

Build the disclosure from verifiable company records. Keep the current capitalization table, governing documents, financial statements, material contracts, intellectual-property records, litigation information, and use-of-proceeds assumptions together. If a claim appears in the offering statement, pitch video, advertising, email, or social post, identify who verified it and which record supports it. Marketing language must not contradict formal disclosure, and a disclaimer will not cure a misleading statement or omission. When the underlying fact changes, assess both the filing and every public-facing version.

The practical failure mode is often not a dramatic legal theory. It is a stale number repeated across a dozen assets, an employee answering investor questions from memory, an unapproved promise in a founder interview, or a change communicated only on social media. Create a single approved fact sheet with the offer terms, risks, financial figures, dates, and permitted descriptions. Give the same current version to the founders, agency, platform contact, and anyone authorized to speak about the offering.

Choose a review cadence that matches the campaign. Before launch, have the responsible people review the complete package together, not as separate documents assembled at the last minute. During the raise, check for developments that may make a statement inaccurate, including financing changes, material customer or supplier events, litigation, leadership changes, and revised projections. At close, preserve final versions, filing receipts, intermediary communications, and investor notices. Afterward, calendar ongoing reporting duties and track who is responsible if the original team changes.

A short written escalation rule helps: pause a scheduled campaign communication when a material fact is uncertain; send the issue to the designated company lead and securities counsel; document the decision; and update the relevant filing or investor communication where required. Do not ask a marketer to decide whether an event is legally material. They can spot a changed fact, preserve the draft, and route it to the people qualified to decide.

Founders should also separate process questions from legal conclusions. The platform can explain its workflow and counsel can advise on obligations, but neither a campaign calendar nor a portal checklist guarantees the issuer has met every requirement. Confirm current rules and filing instructions rather than relying on old blog posts, screenshots, or another company's precedent. The SEC's issuer guidance is a useful starting point, but expressly describes itself as staff guidance rather than a binding rule or legal advice. 1

{"title":"A disciplined review","items":[{"title":"Identify","body":"Describe the fact, decision, or obligation precisely."},{"title":"Verify","body":"Check primary records and current SEC materials."},{"title":"Escalate","body":"Consult counsel and the intermediary as appropriate."},{"title":"Record","body":"Save the decision, date, owner, and resulting action."}]}

What states do and do not do

Federal preemption limits certain state registration requirements for securities sold under Section 4(a)(6), but it does not mean every state-law issue disappears. State securities regulators may retain antifraud and enforcement authority and other state requirements can apply. Corporate, tax, consumer-protection, employment, and privacy matters may also remain relevant. Get advice based on issuer and investor facts.

A founder should treat compliance as part of the campaign design, not as paperwork to clean up after marketing begins. The company, its officers, counsel, accountant, and selected intermediary each have distinct jobs. Assign an owner for every disclosure and operational task, maintain a dated source file, and resolve inconsistencies before the public campaign goes live. An efficient process is not a shortcut around securities laws; it is a way to catch errors while they are still cheap to fix.

Build the disclosure from verifiable company records. Keep the current capitalization table, governing documents, financial statements, material contracts, intellectual-property records, litigation information, and use-of-proceeds assumptions together. If a claim appears in the offering statement, pitch video, advertising, email, or social post, identify who verified it and which record supports it. Marketing language must not contradict formal disclosure, and a disclaimer will not cure a misleading statement or omission. When the underlying fact changes, assess both the filing and every public-facing version.

The practical failure mode is often not a dramatic legal theory. It is a stale number repeated across a dozen assets, an employee answering investor questions from memory, an unapproved promise in a founder interview, or a change communicated only on social media. Create a single approved fact sheet with the offer terms, risks, financial figures, dates, and permitted descriptions. Give the same current version to the founders, agency, platform contact, and anyone authorized to speak about the offering.

Choose a review cadence that matches the campaign. Before launch, have the responsible people review the complete package together, not as separate documents assembled at the last minute. During the raise, check for developments that may make a statement inaccurate, including financing changes, material customer or supplier events, litigation, leadership changes, and revised projections. At close, preserve final versions, filing receipts, intermediary communications, and investor notices. Afterward, calendar ongoing reporting duties and track who is responsible if the original team changes.

A short written escalation rule helps: pause a scheduled campaign communication when a material fact is uncertain; send the issue to the designated company lead and securities counsel; document the decision; and update the relevant filing or investor communication where required. Do not ask a marketer to decide whether an event is legally material. They can spot a changed fact, preserve the draft, and route it to the people qualified to decide.

Founders should also separate process questions from legal conclusions. The platform can explain its workflow and counsel can advise on obligations, but neither a campaign calendar nor a portal checklist guarantees the issuer has met every requirement. Confirm current rules and filing instructions rather than relying on old blog posts, screenshots, or another company's precedent. The SEC's issuer guidance is a useful starting point, but expressly describes itself as staff guidance rather than a binding rule or legal advice. 1

{"title":"Compliance checkpoints","items":[{"label":"Before launch","title":"Prepare","body":"Reconcile disclosures, records, approvals, and platform requirements."},{"label":"While open","title":"Monitor","body":"Review developments and communications for accuracy."},{"label":"At close","title":"Preserve","body":"Retain final documents and notice records."},{"label":"After close","title":"Calendar","body":"Track reporting and investor-relations responsibilities."}]}

Avoiding the approval myth

Neither an SEC filing number nor a platform listing means the SEC or FINRA approved the issuer, checked every statement, or guaranteed a return. Never imply governmental endorsement. Investors should understand that securities are risky and may be illiquid. The issuer should avoid using a regulator’s presence as a marketing claim.

A founder should treat compliance as part of the campaign design, not as paperwork to clean up after marketing begins. The company, its officers, counsel, accountant, and selected intermediary each have distinct jobs. Assign an owner for every disclosure and operational task, maintain a dated source file, and resolve inconsistencies before the public campaign goes live. An efficient process is not a shortcut around securities laws; it is a way to catch errors while they are still cheap to fix.

Build the disclosure from verifiable company records. Keep the current capitalization table, governing documents, financial statements, material contracts, intellectual-property records, litigation information, and use-of-proceeds assumptions together. If a claim appears in the offering statement, pitch video, advertising, email, or social post, identify who verified it and which record supports it. Marketing language must not contradict formal disclosure, and a disclaimer will not cure a misleading statement or omission. When the underlying fact changes, assess both the filing and every public-facing version.

The practical failure mode is often not a dramatic legal theory. It is a stale number repeated across a dozen assets, an employee answering investor questions from memory, an unapproved promise in a founder interview, or a change communicated only on social media. Create a single approved fact sheet with the offer terms, risks, financial figures, dates, and permitted descriptions. Give the same current version to the founders, agency, platform contact, and anyone authorized to speak about the offering.

Choose a review cadence that matches the campaign. Before launch, have the responsible people review the complete package together, not as separate documents assembled at the last minute. During the raise, check for developments that may make a statement inaccurate, including financing changes, material customer or supplier events, litigation, leadership changes, and revised projections. At close, preserve final versions, filing receipts, intermediary communications, and investor notices. Afterward, calendar ongoing reporting duties and track who is responsible if the original team changes.

A short written escalation rule helps: pause a scheduled campaign communication when a material fact is uncertain; send the issue to the designated company lead and securities counsel; document the decision; and update the relevant filing or investor communication where required. Do not ask a marketer to decide whether an event is legally material. They can spot a changed fact, preserve the draft, and route it to the people qualified to decide.

Founders should also separate process questions from legal conclusions. The platform can explain its workflow and counsel can advise on obligations, but neither a campaign calendar nor a portal checklist guarantees the issuer has met every requirement. Confirm current rules and filing instructions rather than relying on old blog posts, screenshots, or another company's precedent. The SEC's issuer guidance is a useful starting point, but expressly describes itself as staff guidance rather than a binding rule or legal advice. 1

{"title":"Practical controls","items":["Name a compliance owner","Keep a single current fact sheet","Route material questions to counsel","Preserve filings and communication versions","Calendar post-offering duties"]}

A practical oversight map

Keep a contact sheet for issuer counsel, platform compliance, accounting advisers, and appropriate state counsel. Ask who files which notices, who answers regulator inquiries, and who preserves records. Respond truthfully and promptly to information requests. Do not assume the platform will handle issuer filings, post-offering reports, or legal analysis unless responsibilities are expressly confirmed.

A founder should treat compliance as part of the campaign design, not as paperwork to clean up after marketing begins. The company, its officers, counsel, accountant, and selected intermediary each have distinct jobs. Assign an owner for every disclosure and operational task, maintain a dated source file, and resolve inconsistencies before the public campaign goes live. An efficient process is not a shortcut around securities laws; it is a way to catch errors while they are still cheap to fix.

Build the disclosure from verifiable company records. Keep the current capitalization table, governing documents, financial statements, material contracts, intellectual-property records, litigation information, and use-of-proceeds assumptions together. If a claim appears in the offering statement, pitch video, advertising, email, or social post, identify who verified it and which record supports it. Marketing language must not contradict formal disclosure, and a disclaimer will not cure a misleading statement or omission. When the underlying fact changes, assess both the filing and every public-facing version.

The practical failure mode is often not a dramatic legal theory. It is a stale number repeated across a dozen assets, an employee answering investor questions from memory, an unapproved promise in a founder interview, or a change communicated only on social media. Create a single approved fact sheet with the offer terms, risks, financial figures, dates, and permitted descriptions. Give the same current version to the founders, agency, platform contact, and anyone authorized to speak about the offering.

Choose a review cadence that matches the campaign. Before launch, have the responsible people review the complete package together, not as separate documents assembled at the last minute. During the raise, check for developments that may make a statement inaccurate, including financing changes, material customer or supplier events, litigation, leadership changes, and revised projections. At close, preserve final versions, filing receipts, intermediary communications, and investor notices. Afterward, calendar ongoing reporting duties and track who is responsible if the original team changes.

A short written escalation rule helps: pause a scheduled campaign communication when a material fact is uncertain; send the issue to the designated company lead and securities counsel; document the decision; and update the relevant filing or investor communication where required. Do not ask a marketer to decide whether an event is legally material. They can spot a changed fact, preserve the draft, and route it to the people qualified to decide.

Founders should also separate process questions from legal conclusions. The platform can explain its workflow and counsel can advise on obligations, but neither a campaign calendar nor a portal checklist guarantees the issuer has met every requirement. Confirm current rules and filing instructions rather than relying on old blog posts, screenshots, or another company's precedent. The SEC's issuer guidance is a useful starting point, but expressly describes itself as staff guidance rather than a binding rule or legal advice. 1

{"type":"insider","title":"A version-control tactic founders overlook","body":"Maintain a dated claim ledger: each investor-facing number has an owner, a source document, an approved wording, and a review date. When the source changes, search every asset for the old wording before publishing anything new."}
{"title":"Reg CF guardrails to verify","items":[{"value":"$5M","label":"Maximum aggregate raise per 12 months"},{"value":"21 days","label":"Minimum campaign open period"},{"value":"120 days","label":"Annual report deadline after fiscal year end"}],"source":"SEC.gov; verify current rules"}
{"type":"warning","title":"Do not treat regulatory filing as approval","body":"The SEC does not endorse the offering or verify the investment merits. Keep statements about regulators factual."}

A founder-ready action plan

Start by collecting current company records and identifying who can approve investor-facing statements. Ask securities counsel and the intermediary to confirm the exact procedures, deadlines, and filing mechanics for this offering. Keep a written record of open issues, named owners, and decisions. The SEC Form C itself includes options for Form C/A, including a checkbox for a material amendment requiring investor reconfirmation within five business days; use the current form and consult counsel about whether and how it applies. 2

For campaign strategy and preparation, see Reg CF financial statements: reviewed vs. audited and What you can say: Reg CF advertising rules. If you want a team to help plan the raise while coordinating an organized process, Book a free consultation.

Closing thought

Compliance is an ongoing operating discipline. Keep the company’s facts accurate, the decision trail clear, and qualified advisers involved whenever a securities-law question turns on the details.

Not legal advice: This article is general educational information, not legal, tax, accounting, or investment advice. Rules and interpretations can change; consult qualified counsel about your situation.

Questions, answered.

30 minutes. Your raise, mapped. No obligation.