On June 26, 2026, the SEC settled charges against Northeast Financial Group, Inc., a Pennsylvania-registered adviser, for a custody rule failure that ran, in some cases, for a full decade. The problem wasn’t misappropriation, a Ponzi scheme, or a headline-grabbing fraud. It was simpler and, for that reason, more instructive: Northeast had custody of its private funds’ assets and never got them audited. See Release No. IA-6974.
The lesson here isn’t that the custody rule is complicated—it’s that the SEC will pursue a clean, uncontested foot fault for ten years running, even against a small book of private fund assets.
Background
Northeast reported roughly $1.4 billion in regulatory assets under management, but only about $22.3 million of that sat in four pooled investment vehicles—the “Funds.” Northeast was deemed to have custody because a related person of Northeast served as managing member of each Fund. This is clearcut based on the SEC’s Custody Rule guidance. There is no ambiguity in that conclusion, and the SEC spent little time on it.
Having custody, there were two paths to compliance. Northeast could satisfy the full battery of custody rule requirements—qualified custodian, account statement delivery, and an annual surprise examination by an independent accountant. Or it could take the path nearly every private fund adviser takes: the “Pooled Investment Audit Exemption” under Rule 206(4)-2(b)(4). That alternative deems the surprise-exam and notification requirements satisfied if the funds are audited annually by a PCAOB-registered, -inspected accountant and the audited, GAAP-compliant financials are distributed to investors within 120 days of fiscal year-end.
Northeast did neither for between 5 and 10 years for the private funds they advised.
The result: a willful violation of Section 206(4) and Rule 206(4)-2, a censure, a cease-and-desist order, and a $75,000 civil penalty. Notably, the SEC did not need to prove scienter—Section 206(4) doesn’t require it—and “willfully” here means only that Northeast knew what it was doing, not that it knew it was breaking a rule.
Key Takeaways
- Custody attaches through your related persons, not just your advisory contract. If an affiliate is the general partner or managing member of a fund you advise, you have custody. Full stop. Northeast’s $22.3 million in fund assets was a rounding error against its total AUM, and it made no difference.
- The Audited Financials Alternative is a package deal. Getting the audit done is not enough; the financials must be GAAP-compliant, prepared by a PCAOB-registered and -inspected auditor, and delivered to investors within 120 days. Miss any element and you are thrown back onto the full requirements of Rule 206(4)-2(a)(2)-(5)—including the surprise exam you almost certainly weren’t conducting.
- Small and uncomplicated does not mean off the radar. This was a settled, uncontested matter against a modest fund complex. The SEC pursued it anyway, and did so for conduct stretching back nearly to the funds’ formation.
- The clock doesn’t reset. A single-year lapse is a problem you fix. A ten-year lapse is a compliance program that never had the control in place to begin with—and that is what draws an enforcement action rather than a deficiency letter.
Lessons for Private Equity Fund Managers
If your firm advises even one pooled vehicle where you or an affiliate sits as GP or managing member, the custody rule is not optional, and the audit exception is not self-executing. Confirm three things now.
First, that every fund you’re deemed to have custody of is actually audited by a PCAOB-registered, PCAOB-inspected firm—not merely reviewed, not audited by a non-registered accountant.
Second, that the audited financials are going out to all investors inside the 120-day window, and that you can prove delivery.
Third, that someone owns this task on your compliance calendar, with a hard deadline and a backstop if the auditor slips.
And don’t stop at your flagship funds. The custody rule reaches every pooled vehicle you or a related person controls, which sweeps in the structures that are easiest to overlook: single-investor SPVs, co-investment vehicles, side-cars, blocker entities, and one-off deal vehicles stood up quickly to close a transaction. These are often the vehicles nobody thinks to audit—formed under time pressure, sometimes viewed as a mere conduit for a single LP, and just as often left off the compliance calendar entirely. The rule doesn’t care that a side-car holds one asset for one investor. If a related person is the managing member or GP, you have custody, and that vehicle needs an audit and a timely distribution just like the main fund. A useful exercise is to reconcile your full list of managed entities against your list of completed audits; the gap between the two is exactly where an examiner will look.
The Northeast order is a gift, in a way: it tells you exactly where the line is and how little it takes to cross it. Custody remains a perennial SEC examination priority, and audit completion and distribution have been called out by the Division of Examinations year after year. If your audits aren’t done and delivered on time, you don’t have a technical issue—you have the exact fact pattern the SEC just penalized.
How Trillium Can Help
Compliance Program Development and Maintenance: We build custody and audit-oversight controls into your compliance calendar—confirming auditor PCAOB status, tracking the 120-day distribution deadline for each fund, and documenting delivery so an exam request is a non-event.
Testing and Surveillance: As part of our compliance health checks, we test your actual audit completion and distribution practices against the custody rule and your Form ADV disclosures, so a multi-year gap surfaces in a review room—not in an SEC order.