Financial firms, compliance, & Sugar

[msradha]

Hello,

I was wondering if anyone had any experience working with Sugar in a Registered Investment Advisor firm environment. There are tons of little compliance issues and was curious if anyone had any insight to offer or anything we might have overlooked.

For example, it's required to have emails archived. That is, the ability to save all outgoing and incoming email without being able to edit or delete any emails that are attached to a client. Is this even possible to set up?

Thanks!

[kpit]

Hello,

I was wondering if anyone had any experience working with Sugar in a Registered Investment Advisor firm environment. There are tons of little compliance issues and was curious if anyone had any insight to offer or anything we might have overlooked.

For example, it's required to have emails archived. That is, the ability to save all outgoing and incoming email without being able to edit or delete any emails that are attached to a client. Is this even possible to set up?

Thanks!

I work in similar environments. SugarCRM is not a tool for that compliance issure. You should use a 3rd party programs or seperate archive to keep all emails archived and recorded to worm or CDR or DVD-R media. I have set up such a system in dealing with HIPAA and Sarbanes-Oxley Act compliance with SugarCRM. Sugar can be set to not purge deleted emails but some modifications can be done to them by the users. I am sure that customizations could be done to not allow editing once delevered or recieved could be done. It is better to have a seperate and secure archival system in place for true compliance by writing everything to worm (write once read many) media such as a cdr or dvd-r media with digital signatures to prevent tampering with the archives.