The Compliance Framework: What Requires Authorisation
Before talking about what to delegate, it’s worth being clear about what cannot be delegated.
Under FCA regulation (and the equivalent in other jurisdictions), regulated financial advice includes:
– Advising a client to buy, sell, or hold a specific financial product
– Providing a personal recommendation on a pension, investment, or insurance product
– Suitability assessments and reports
– Any communication that constitutes investment advice as defined by MiFID II / FSMA
These activities require a qualified, authorised person. They cannot be delegated to a VA regardless of capability.
What the regulations do NOT restrict:
– Administrative support for client relationships
– Preparation of compliance documentation (under adviser review)
– Client communication that does not constitute advice
– Business operations, marketing, and business development support
– Research and information gathering (as distinct from advice)
A well-briefed VA can own a substantial portion of the non-regulated workload — with a clear line between what requires your authorisation and what doesn’t.
The 8 High-Value Delegation Categories
1. Client Onboarding Administration
Getting a new client from initial enquiry to compliant onboarding is a process-intensive exercise. The adviser’s time is needed for the relationship conversations and the advice itself. The administrative layer around it is delegatable.
What to delegate:
– Preparing and sending client engagement letters and terms of business
– Issuing and tracking AML/KYC documentation requests (ID verification, proof of address)
– Maintaining a client onboarding tracker with milestone status
– Chasing outstanding documents from new clients
– Setting up client records in your back-office system (Intelligent Office, Xplan, Salesforce Financial Services Cloud)
– Coordinating with compliance support for file checking
What stays with the adviser:
– The initial fact-find conversation
– Reviewing and signing the suitability report
– All regulatory sign-offs
The brief requirement: Your client onboarding SOP, the document checklist for AML/KYC, access to your back-office CRM with appropriate permissions, and a clear protocol for what the VA escalates vs. handles.
2. Suitability Report Preparation
The suitability report is a regulated document — the adviser is responsible for its content and must sign it off. But the preparation work — gathering the data, structuring the narrative framework, formatting the document — can be substantially done by a VA working from your notes and the agreed template.
What to delegate:
– Formatting the suitability report template with client data from the fact-find
– Populating standard sections from client records and meeting notes
– Running fund performance data from agreed research sources
– Preparing the charges section from product information
– Formatting and proofreading the final document before adviser review
What stays with the adviser:
– The fact-find and all advice conversations
– The recommendation decision and rationale
– Review and sign-off of the completed suitability report
This is a particularly high-value delegation. A suitability report that takes an adviser 90 minutes to produce can often be reduced to 30 minutes of review if a VA handles the preparation from detailed notes and templates.
3. Review Meeting Preparation
Annual and periodic review meetings are a core service delivery component. The preparation — client performance summaries, portfolio valuations, discussion agenda, compliance review packs — is time-intensive administrative work.
What to delegate:
– Pulling portfolio valuation reports from platforms and providers
– Preparing performance summary documents from agreed templates
– Compiling the client review pack (valuation, performance, income summary, charges)
– Scheduling the review meeting and sending the confirmation
– Preparing the pre-meeting agenda
– Updating client records after the review meeting from your notes
The brief: Your review pack template, platform access for valuations (read-only access as appropriate), your standard agenda format, and the post-meeting update protocol.
A VA handling review preparation across a 100-client book can save an adviser 1–2 hours per client annually = 100–200 hours per year. At £250–£400/hour adviser equivalent value, that’s £25,000–£80,000 in recovered professional time.
4. Compliance Administration
Compliance administration is substantial in a regulated financial services practice. Most of it doesn’t require regulated status.
What to delegate:
– Maintaining the compliance calendar — FCA regulatory deadlines, PROD review schedules, annual statements
– Preparing compliance monitoring reports from agreed frameworks
– Maintaining the file audit log and compliance review tracker
– Sending Consumer Duty evidence collection requests to clients (under adviser direction)
– Maintaining the complaints register
– Preparing GABRIEL returns data for adviser review and submission
– Research support for regulatory update briefings
Critical requirement: All compliance submissions and regulatory communications require adviser review and authorisation before they leave the practice. The VA prepares; the adviser approves.
5. Client Communication (Non-Advice)
The majority of client communications in a financial planning practice are not regulated advice. Status updates, appointment confirmations, document requests, annual statement distribution — all of this is administrative communication that a VA can handle.
What to delegate:
– Acknowledging all client correspondence within your defined SLA
– Distributing annual statements, valuations, and platform reports
– Sending appointment confirmations and preparation notes
– Chasing outstanding signatures and documentation
– Responding to standard queries (meeting times, how to access the client portal, contact details)
– Processing transfer requests and initiating instructions (not advising — processing)
Escalation protocol: Any communication that touches on advice, product suitability, or complaints goes directly to the adviser. The VA brief includes explicit escalation triggers.
6. Business Development Administration
Most adviser BD activity is not regulated. The conversations, the relationship building, the presence at professional events — these are yours. The administrative layer around them is delegatable.
What to delegate:
– Researching professional introducer prospects (solicitors, accountants, mortgage brokers)
– Managing the introducer relationship database
– Coordinating introductory meetings and follow-up
– LinkedIn management — maintaining an active professional presence, content scheduling
– Preparing marketing materials for professional introduction meetings
– Researching speaking opportunities and conference submissions
– Managing prospect follow-up sequences
7. Research and Information Gathering
There is an important distinction between regulated financial advice and research support. A VA can gather information; the adviser interprets and applies it.
What to delegate:
– Pulling provider fund information and factsheets
– Preparing comparative product research summaries (not recommendations — information)
– Monitoring regulatory update publications (FCA, HMRC, DWP) and flagging relevant changes
– Gathering client net worth data from disclosed sources
– Preparing pre-meeting research packs (company financials for corporate clients, estate details for IHT planning)
What stays with the adviser:
– Interpreting research in the context of client suitability
– Any recommendation or opinion on the research
8. Practice Operations
What to delegate:
– Invoicing clients and tracking fee payments
– Reconciling commission and trail fee records
– Supplier and technology vendor management
– Office administration and stationery management
– Meeting room and diary coordination
– Travel and events logistics
The Compliance Brief: What Your VA Needs to Know
Working in a regulated financial services environment requires a more detailed brief than most other sectors. The VA needs to understand:
What they can and cannot say:
– Can reference products, rates, and fund performance as factual information
– Cannot recommend, advise, or express an opinion on whether a product is suitable
– Cannot hold themselves out as providing financial advice
– If in doubt on any communication: escalate to the adviser before sending
Data handling:
– Client financial data is highly sensitive
– GDPR compliance requirements apply to all client data
– Data stays in firm-managed systems — not personal VA accounts or external platforms
– DSAR requests (data subject access requests) are always escalated immediately
Regulatory awareness:
– The VA should understand the firm’s regulatory status (FCA authorised, AR, network member) and what that means for client communication
– All client communications are potentially subject to FCA record-keeping requirements
– The file review/compliance team may audit communications — all communication should be professional and appropriate
Working with a managed agency like VAConnect provides the contractual framework (data processing agreements, confidentiality provisions) that regulated firms require. The agency’s compliance with UK GDPR and their professional indemnity cover provides the structural protection that using an unmanaged freelancer cannot.
Structuring Access Securely
Financial services practices cannot afford credential sharing or unsecured data access. Structure the VA’s access properly:
Back-office system access:
– Named user account with role-appropriate permissions (typically: read/write for client records, not regulatory submission capability)
– All activity logged against the VA’s user account for audit trail purposes
– Two-factor authentication required
Platform access (if applicable):
– Provider platforms typically allow read-only access for third-party users
– Set up dedicated login credentials — do not share adviser credentials
Email and communication:
– Dedicated VA email address within your domain (e.g., support@yourfirm.co.uk) or delegated access to a shared mailbox
– All outbound client communications sent from your firm’s email domain
– No client communications sent from personal VA email addresses
File management:
– Client documents stored in your firm’s DMS, not in personal cloud storage
– Clear file naming conventions and folder structure documented in the brief
The Cost Case
Let’s build the numbers for a typical mid-sized IFA practice.
Current state: 10-adviser practice in London
– Each adviser spending 25% of time on non-advice admin: 10 × 8 hrs/day × 25% = 20 hrs/day of admin time
– Fully loaded adviser cost: £150,000/year average = £75/hour
– Annual admin time cost: 20 hrs/day × 250 working days × £75 = £375,000/year
VA intervention: 2 full-day VAConnect VAs
– Cost: 2 × £2,850/month = £5,700/month = £68,400/year
– Admin time recovered: assume 60% efficiency (VAs handle equivalent workload to 12 adviser admin hours per day)
– Value recovered: 12 hrs/day × 250 days × £75 = £225,000/year
Net saving: £156,600/year
Additional value: 12 hours of adviser time per day redirected to client-facing work = additional revenue potential from expanded client capacity.
The 40% overhead reduction headline is achievable for practices that implement systematically.
What Compliance-Conscious Practices Get Wrong
The most common mistake: treating compliance as a reason not to delegate, rather than as a framework for how to delegate.
The regulatory requirement is not “the adviser does everything.” The regulatory requirement is “advice is provided by authorised persons and appropriate records are maintained.” A VA can support both of these requirements — handling the administrative layer while the adviser focuses on the advice.
The second mistake: failing to document the delegation. For regulatory purposes, document clearly what the VA does and doesn’t do. This protects the firm in a compliance review and ensures the VA’s role is appropriately scoped.
The third mistake: inadequate access controls. Sharing passwords, using personal VA email addresses for client communications, or failing to maintain an audit trail creates regulatory risk. Structure access properly from day one.
Frequently Asked Questions
Can a VA handle client money or investment instructions?
Processing instructions under adviser direction (not as advice) is permissible with appropriate controls. The VA receives the client’s written instruction, processes it through the platform, and records it. The instruction itself comes from the client; the VA executes the administrative processing. Any instruction that the VA cannot clearly categorise as the client’s expressed wish should be escalated to the adviser.
What about Consumer Duty requirements?
Consumer Duty (FCA PS22/9) requires firms to demonstrate they act to deliver good outcomes for retail customers. VAs supporting the practice need to understand the Consumer Duty framework and their role within it. Evidence collection (client outcome surveys, satisfaction tracking, communication quality monitoring) is something a VA can support systematically.
Is a VA appropriate for a sole trader IFA?
Particularly appropriate. Sole trader IFAs carry the entire administrative overhead personally — a VA can take over the 70% that doesn’t require their authorisation, freeing them to serve more clients or improve quality of service for existing ones. The economics are compelling at even modest practice sizes (20+ clients).
What regulatory records are the VA responsible for?
The VA maintains records; the adviser is responsible for them. Emails, client communications, compliance tracking documents — all maintained by the VA in firm-managed systems, all accessible for regulatory review. The adviser reviews and signs off on any regulatory submission.
The Bottom Line
Financial advice is a regulated profession. Administrative support is not. The boundary is clear — and within it, there is substantial, high-value work that does not require an authorised adviser.
Practices that understand this boundary and implement VA support accordingly reduce overhead, recover adviser time, and improve service consistency — without creating any regulatory risk.
VAConnect has placed VAs with financial services firms in the UK, Australia, and South Africa. The matching process accounts for your regulatory environment, your specific practice type, and the compliance requirements your VA needs to understand.
Ready to explore compliance-safe VA support for your practice? Book a strategy call with Karen — she’ll walk through exactly what’s delegatable in your firm’s context.