Financial website design under the rules that actually apply

A website for an advisory firm, a lender, a broker or a bank is not a design project with a compliance step bolted on the end. The rules decide the information architecture, what the testimonial section may contain, how performance can be presented, what has to be archived, and who signs off before anything publishes. An agency that treats those as constraints to be handled at the end will produce something beautiful that your compliance officer sends back twice, and the second rebuild is the expensive one. This page sets out what actually governs the work, what raises the price legitimately, and how to tell a firm that has done this before from one that has read about it.

The advertising rules shape the pages, not just the disclaimers

For registered investment advisers, the marketing rule at 17 CFR 275.206(4)-1 governs advertising, and it changed the shape of these sites materially. Testimonials and endorsements are permitted, subject to conditions including disclosure of whether the person giving it is a client and whether compensation was paid, along with oversight and disclosure requirements. Performance presentation carries its own conditions. What that means practically is that a testimonial component in the design has to carry disclosure text in the same view, not in a footnote, and that any performance figure needs a defined presentation the design must accommodate. Other kinds of financial firm sit under different regimes, and lenders and consumer financial firms have their own advertising obligations, so the first question for any agency is which regulator governs you and whether they have built for that regime before.

Accessibility is a legal question, not a nice-to-have

Financial services sites attract accessibility complaints more than most, because the transactions matter and the forms are complex. The Department of Justice publishes guidance on web accessibility under the Americans with Disabilities Act, which explains that inaccessible web content can create barriers for people with disabilities and points to established technical standards as the practical way to meet the obligation. In design terms this touches almost everything: colour contrast, focus states, form labels and error messages, keyboard operation of any calculator or account tool, and captions on video. It is far cheaper to build these in than to retrofit them, and an agency that cannot describe how it tests for them, with tools and with keyboard-only navigation, is quoting for a different job than the one you need.

What legitimately moves the price

Review cycles are the first driver, and they are not padding. Every page, every claim and every piece of collateral passes through compliance, and a firm that has done this work builds the cycles into the schedule rather than discovering them. Integrations are the second: account aggregation, scheduling, client portals, custodial data feeds and CRM connections each add engineering and each add a security review. Archiving is the third, because several regimes require that advertising and communications be retained in a form that can be produced later, and a website that changes continuously needs a way to evidence what it said on a given date. Fourth is content, since writing about money in a way that is both readable and defensible is a specialist skill. Ask for those four as separate lines and the difference between two quotes usually becomes explicable.

How to brief and vet the agency

Give every candidate the same one page brief: who regulates you, what the site must do, which integrations exist, who approves copy, and what your archiving obligation is. Then ask for two things. First, a site they built for a similarly regulated firm, live, that you can inspect, plus a reference you may call about how the compliance review went. Second, their process document describing how approvals are captured and how a published version is archived. Firms that have done this hand it over immediately. Ask also who owns everything on exit: the domain, the hosting account, the analytics, the design files and the content. Where the site is one part of a wider programme, keep the build quote separate from any ongoing financial services marketing retainer, since one is a project with an end date and the other is not.

Questions people ask about financial website design

Can an advisory firm publish client testimonials?

Under 17 CFR 275.206(4)-1 testimonials and endorsements are permitted subject to conditions, including disclosure of whether the person is a client and whether compensation was paid, plus oversight requirements. Design the component so the disclosure sits with the quote rather than in a footnote.

Does accessibility really apply to our site?

The Department of Justice publishes guidance on web accessibility under the ADA and points to established technical standards as the practical route to compliance. Build to them from the start, since retrofitting contrast, focus states and form semantics costs far more than getting them right initially.

How long should a compliant financial site take?

Longer than a comparable unregulated site, mostly because of review cycles rather than build time. Ask each candidate how many cycles their timeline assumes per page and what happens to the schedule when a cycle returns changes, because that assumption is where optimistic timelines fail.

Who should own the site and its accounts?

Your entity, in every case: the domain, hosting, analytics, source files and content. Also confirm how published versions are archived, because several financial regimes require you to evidence what your advertising said on a given date long after the page has changed.

Sources

Related answers

Get your agency shortlistDescribe your project