Ethics-record maintenance

I vaguely remember that you must keep all records for a minimum of 7 years. Is that correct?

im pretty sure thats just a recommendation

You MUST keep records for a minimum of 7 years for any investment recommendation or security analysis. Also record retention primarily is the responsibility of the firm, however if you are involved in the security analysis/rec , keep your own records.

You don’t need to keep records if the information is on a website if you tell clients where to find the information, correct?