.png)
This article is part of GBQ's FUNDamentals series, a plain-English field guide to the accounting, audit, and tax questions facing emerging fund managers and the founders they back. For questions or concerns regarding the topics covered in this series, contact our team today.
A practical guide to the SEC custody rule for private fund managers, and how the 'custody rule' became the reason your fund gets audited every year.
Here’s a question worth asking an emerging fund manager: why does your fund get audited?
The answers usually fall into three buckets. Some say the limited partnership agreement (LPA) requires it (true, but why is it in the LPA?). Some say their limited partners (LPs) expect it (also true). And some go quiet and ask whether they actually have to. That last group is the reason this article exists.
For a lot of private funds, the annual audit isn’t a "nice-to-have" that LPs just so happen to want. It’s the escape hatch from a Securities and Exchange Commission (SEC) rule most managers have never read: the custody rule. Misunderstanding how that hatch works is one of the quieter ways an emerging manager ends up with a compliance problem they never saw coming.
The Short Answer, Before The Mechanics
If you take one thing from this article, take this: almost every private fund gets an audit. The only real question is who’s forcing it.
There’s a single gate that decides.
Are you registered with the SEC as an investment adviser?
-
If yes, the custody rule applies, and it effectively requires an annual audit (we’ll get to why).
-
If no, because you qualify as an exempt reporting adviser, the SEC isn’t forcing anything, but your fund documents and your institutional LPs almost certainly are.
Either way, you’re getting audited. The distinction just determines whether a missed deadline is a bad look for your LPs or an actual regulatory violation.
The reason this feels slippery is that your answer to the gate can change without you noticing. The status that keeps you exempt today can quietly break when you raise a bigger fund, add a strategy, or cross a dollar threshold, and the day it breaks, the SEC becomes one of the parties in that sentence above. The rest of this article is really about understanding that gate: how it works, what moves you from that one question.
First, What 'Custody' Actually Means
When most people hear “custody,” they picture physically holding assets: stock certificates in a vault, cash in an account you control. The SEC’s definition, under Rule 206(4)-2 of the Investment Advisers Act, is much broader. An adviser has custody if it holds client funds or securities, or has any authority to obtain possession of them.
That second clause is the one that catches fund managers. If you’re the general partner of a limited partnership (or managing member of an LLC), you have legal control over the fund’s assets. You can direct the bank to wire money. You sign on behalf of the fund. Under the rule, that means you have custody. It doesn’t matter that you’d never touch a dollar improperly, that everything sits at a reputable bank, or that your operating agreement has controls. The ability is the custody.
So the question is never really whether you have custody. If you’re the General Partner (GP), you do. The question is whether the custody rule applies to you, and if so, how you comply.
Who The Rule Applies To
Here’s what surprises people in both directions: the custody rule applies to SEC-registered investment advisers. If you’re not registered with the SEC, the rule, as a technical matter, doesn’t apply to you.
Many emerging managers aren’t registered. Two exemptions do most of the work. The venture capital adviser exemption lets advisers solely to qualifying venture capital funds operate as “exempt reporting advisers” (ERAs) regardless of size, filing a truncated Form ADV but skipping full registration. The private fund adviser exemption does the same for advisers solely to private funds with less than $150 million in private fund assets under management in the U.S.
ERAs are not subject to the SEC custody rule. A $40M venture fund whose adviser is an ERA has no federal custody-rule obligation to be audited at all. (One wrinkle: state rules may still apply to state-registered advisers and vary considerably.) As the short answer said, though, the practical audit requirement doesn’t go away; it just comes from your LPA and your LPs instead of the SEC.
The quiet trigger, and the reason for this article’s title, is what happens when you outgrow the exemption, e.g., r aise a bigger Fund II, add a credit strategy, take on a separately managed account, drift past $150M in regulatory AUM, or stop meeting the technical definition of a “venture capital fund” (which is narrower than the industry’s casual use of the term, so watch your secondaries and non-qualifying investments), and you may be required to register with the SEC. The moment you register, the custody rule applies to every pooled vehicle you advise.
Managers plan extensively for the fundraising implications of getting bigger. Far fewer plan for the compliance regime that arrives in the same envelope.
Two Paths: Surprise Exams Vs. Audit
Once the custody rule applies, an adviser with custody generally has to do several things.
-
Keep the assets with a qualified custodian (a bank, registered broker-dealer, or similar).
-
Maintain a reasonable basis to believe the custodian sends quarterly account statements directly to clients.
-
And, the big one, undergo an annual surprise examination by an independent public accountant who shows up unannounced to verify the assets actually exist.
The surprise exam deserves a closer look, because the name undersells it.
An accounting firm, at a time of its own choosing, arrives to independently confirm every client asset you have custody of, then files Form ADV-E with the SEC reporting the results, discrepancies included. If you or a related party serve as the qualified custodian, add an annual internal control report from a Public Company Accounting Oversight Board (PCAOB)-registered auditor on top. It is, in the most literal sense, the least fun kind of surprise party, and it recurs every year.
For pooled investment vehicles, the rule offers a different path: the audit provision (you’ll also hear it called the audit exception). An adviser to a private fund can skip the surprise examination and the quarterly-statement delivery requirements for that fund if four conditions are met:
- The fund is audited annually in accordance with US GAAP.
- The auditor is an independent public accountant registered with, and subject to regular inspection by, the PCAOB.
- The audited financial statements are delivered to all investors within 120 days of the fund’s fiscal year-end (180 days for funds of funds, with a further extension down the chain).
- The fund undergoes a final audit upon liquidation, with statements distributed promptly.
This is why virtually every registered private fund adviser chooses the audit route. Set an annual GAAP audit that your LPs wanted anyway against unannounced asset-verification exams across all your vehicles, and it’s not a close call. The audit provision is why the annual fund audit is effectively universal among registered managers. It’s the compliance mechanism, not just good hygiene.
But notice what the audit provision quietly did. It turned your audit deadline into a regulatory deadline. Deliver audited financials on day 121, and you haven’t just annoyed your LPs. Your fund has fallen out of compliance with the custody rule for the year, which is a real deficiency in an SEC exam and the kind of thing that shows up in enforcement actions when it becomes a pattern. This is where this piece connects to the first article in the series, on audit-ready valuations. The year-end valuation scramble isn’t only expensive and stressful. For a registered adviser, a scramble that blows the 120-day deadline is a rule violation. Those GAAP-aligned, calibrated valuation models we talked about building at deal entry do more than keep your LPs happy. They keep the audit finishing on a regulatory clock.
One more wrinkle worth knowing
The custody rule has an exception for privately offered securities, meaning the uncertificated partnership interests and private company stock that make up most fund portfolios don’t have to sit at a qualified custodian. For pooled vehicles, though, that exception is generally available only if the fund complies with the audit provision. So the audit does double duty. It replaces the surprise exam, and it’s also what lets your portfolio of private positions live outside a custodian without a problem. The audit is doing more load-bearing work in your compliance structure than most managers realize.
SPVs: Where It Gets Genuinely Tricky
Now for the part that trips up even diligent managers: special purpose vehicles. Co-invest SPVs, deal-specific vehicles, blocker entities, continuation vehicles. The modern fund complex accumulates these the way a garage accumulates cables. Each one is technically a pooled vehicle, and each one raises the same question. Does this entity need its own audit?
The SEC staff has provided guidance, and the practical framework comes down to who’s invested in the SPV.
If the SPV’s only investors are your fund (or funds) and related entities, say a wholly-owned blocker or an SPV that holds a single position for the main fund, you generally have a choice. You can treat the SPV as an asset of the fund, so the fund’s audit looks through and covers the SPV’s positions, and no separate SPV audit is required. Or you can treat the SPV as its own advisory client and audit it separately. Most managers sensibly choose the look-through.
If the SPV has outside investors, though, whether third-party co-investors who aren’t in the main fund or an executive who came in directly at the deal level, the look-through generally doesn’t work. Those investors aren’t covered by the main fund’s audit. The SPV is its own pooled vehicle with its own investors, and it needs its own path to compliance, typically its own annual audit delivered to its investors on the same 120-day clock.
This is the “quietly” in the title.
The co-invest SPV you spun up in March to accommodate a strategic LP’s extra appetite felt like a two-week legal project. What it may actually have created is a new audit client, with its own engagement letter, its own fee, its own GAAP financials, and its own regulatory deadline, that nobody budgeted for and that your auditor learns about in January. Multiply that by a few deals a year and the “we’ll just do a quick SPV” habit becomes a five-figure annual line item and a serious drag on audit season.
The fix is boring and cheap: loop your auditor and compliance counsel in when the SPV is being formed, not at year-end. Structure decisions like who invests through it and whether it’s related persons only directly determine the compliance cost, and they’re easy to get right at formation and expensive to fix later.
The Practical Playbook
Here’s the sequence that keeps custody from becoming a surprise.
Know your registration status and its expiration date. If you’re an Exempt Reporting Adviser (ERA), understand exactly which exemption you’re relying on and what would break it. Model your Fund II plans against the $150M threshold and the venture capital fund definition before you commit to a strategy that quietly disqualifies you.
If you’re registered, or about to be, choose the audit provision deliberately. Confirm your auditor is PCAOB-registered and subject to regular inspection. Not every firm that can audit a fund qualifies, and using one that doesn’t means the audit provision isn’t actually available to you, no matter how good the audit is.
Inventory your SPVs every year, ideally before your auditor asks. Every vehicle in the complex should have a documented answer to a single question: who invests in this, and what’s its audit treatment? New SPVs get that answer at formation.
And keep an eye on the rulemaking. The SEC has proposed replacing the custody rule with a broader “safeguarding” framework, and the details have been debated for years. Whatever finally lands, the direction of travel is toward more coverage, not less, which is one more reason to build the audit-provision infrastructure properly now.
The Takeaway
The custody rule is one of those regulations that feels irrelevant right up until it’s the most important thing on your compliance calendar. Watch the gate, use the audit provision the way it’s designed to be used, and never form an SPV without asking who’s going to audit it. Do that, and “custody” stays a boring word in your compliance manual, which is exactly where you want it.
For additional insight or assistance with your own strategy, contact GBQ's asset management and valuation teams.
This article is for general informational purposes and isn’t legal, accounting, or compliance advice. Custody rule application depends heavily on your specific facts, structure, and registration status. Review yours with fund counsel and your compliance advisor.
