Why your archive vendor may fail when regulators ask

regulators

Archive modernisation has quietly become one of the most fiercely contested categories in regulated communications. A year ago, “archive” was little more than a footnote on a recorder vendor’s data sheet. Today it anchors the pitch of almost every communications governance and archiving player in the market.

According to Wordwatch, that shift is not coincidental. End-of-life voice recorders were explicitly flagged as a systemic risk in the joint FCA, Bank of England and HM Treasury statement issued in May 2026.

Wordwatch recently put together a buyer’s guide to compliance archiving and how to tell which propositions hold up.

DORA examinations are now in their second wave, with scrutiny of critical ICT third-party providers — including the AWS, Azure and Google Cloud designations confirmed in November 2025 — pulling recording infrastructure into scope for the first time.

The FCA’s Conduct Rules extension to cover non-financial misconduct goes live on 1 September. For every compliance and IT lead at a regulated firm, the question is the same: what do we do about the archive?

Surveillance providers with strong electronic communications and AI capabilities are extending their reach into archive modernisation, promising storage optimisation, migration tooling and broader governance coverage. Recorder vendors, meanwhile, are repositioning their archive products as full-scale modernisation platforms. The market is crowded, and the marketing language sounds remarkably similar across vendors.

The buyer is rarely an archive specialist. So the right question is not “does this vendor have an archive?” It is “does this archive hold up against the reality of a mixed, multi-decade recorder estate when a regulator comes knocking?” Three tests separate a genuine archive modernisation platform from an archive-shaped feature bolted onto an adjacent product.

Test 1: Multi-recorder breadth across vendors and decades

Ask any vendor to list — by name and by version — every recorder they can preserve in original format. Then compare that list against your own estate, going back fifteen years.

Most regulated businesses will have used between three and five recorder vendors over that period. Several of those vendors are now end-of-support. Some have left the market entirely. The records, however, remain firmly in scope under MiFID II’s five-to-seven-year retention obligations, SEC Rule 17a-4, and increasingly under DORA’s resilience and exit-plan requirements.

Any modernisation proposition that handles the current generation of recorders competently but treats legacy systems as “ingestion problems to scope in a later phase” is solving the wrong problem. The middle of an estate is straightforward. The edges are where a regulator’s questions land and where retrieval projects collapse: the unsupported recorder from 2014, the trader voice system from a since-acquired desk, the contact-centre platform decommissioned three CIOs ago.

The test is specific — ask the vendor to demonstrate, using your own estate, original-format preservation across every recorder vendor you have ever used.

Test 2: Original format with chain of custody, evidenced to a regulator

Storage optimisation is a necessary operational property of an archive. It is not the evidential one. Compression ratios, deduplication and tiered storage tell you whether an archive is efficient. They do not tell you whether a record will hold up when a regulator’s expert opens it.

The defensibility question is whether the vendor can produce, for any record from any source, the original-format file with full chain-of-custody documentation, exportable in a form a regulator’s expert can independently verify. Each element of that sentence matters. “Original format” is the standard the FCA’s August 2025 multi-firm review effectively applied when it flagged third-party vendor failures around outages, reconciliation gaps and missing data. “Chain of custody” is the test the DOJ’s Evaluation of Corporate Compliance Programmes applies when assessing whether communications evidence was preserved with integrity. “Independently verifiable” is the standard counsel applies during disclosure when audio quality becomes material to a case.

A vendor that has transcoded the original to a proprietary internal format — even a high-quality one — has made a choice the buyer should understand. That choice may be operationally defensible. It is considerably harder to defend evidentially, and it is the wrong default for any archive whose primary purpose is to be defensible.

Ask for a sample original-format export on a recording older than five years, from a recorder vendor the archive provider did not build. Then ask whether the export, the metadata and the chain-of-custody documentation would survive cross-examination.

Test 3: Decommissioning depth, not just data ingestion

This is where most archive modernisation propositions quietly unravel.

Real modernisation shrinks the legacy footprint. The recorder gets retired. The maintenance contract gets cancelled. The rack space is released. Engineering hours stop being consumed by a system that should have been switched off years ago. The run-cost line falls in a way a CFO can see in next year’s budget.

Half-modernisation leaves the source recorder running, still under extended support, still generating cost, with an ingestion pipe bolted onto a new archive. The new archive looks modern. The underlying estate is unchanged. Total cost has gone up, not down — the same problem that surfaces in botched voice data migrations, only discovered earlier in the project.

The distinction is visible if you ask the right questions. Does the vendor’s modernisation story include retiring the source recorder — physically and contractually — in the run-cost calculation? Or does it stop at “we’ll ingest the data”? How many decommissioning projects has the vendor completed in the past three years, on which named recorder vendors, and with what measurable reduction in customer run costs?

Those numbers separate vendors who have done this from vendors who are merely positioning to.

What the three tests share

All three tests are concerned with the edges of the estate — the oldest sources, the most unusual formats, the recorders nobody wants to touch. The middle of any estate is manageable. Modern Teams capture flows into cloud archives; recent voice recordings from current-generation vendors; mobile capture from supported partners. Most vendors handle the middle competently, and product demonstrations focus there for a reason.

The edges are where modernisation is either real or it isn’t: the 2012 trader voice recordings that need to be extracted before the recorder fails; the disclosure request landing on a 2017 conversation captured on a platform whose vendor has since sold the business; the DORA examination question about exit plans for a recorder that has, on closer inspection, no documented sub-processors and no exportable data format.

A buyer’s evaluation that focuses on the middle will find vendors who all look broadly alike. A buyer’s evaluation that focuses on the edges will separate the propositions — and the vendors capable of delivering on them — very quickly.

Read the full Wordwatch post here. 

Read the daily RegTech news

Copyright © 2026 RegTech Analyst

Enjoyed the story? 

Subscribe to our weekly RegTech newsletter and get the latest industry news & research

Copyright © 2018 RegTech Analyst

Investors

The following investor(s) were tagged in this article.