Wealth Management & RIA E-Signature API: Automate Advisory Agreements (2026)

export interface HouseholdOnboardingPayload {
  householdId: string;
  clientFullName: string;
  clientEmail: string;
  advisorName: string;
  advisorCrdNumber: string;
  custodianName: "Charles Schwab Advisor Services" | "Fidelity Institutional" | "Altruist";
  estimatedHouseholdAumUsd: number;
  selectedPortfolioModel: string;
  formAdvVersionDate: string; // e.g., "March 30, 2026"
  formCrsVersionDate: string; // e.g., "March 30, 2026"
}

export async function dispatchInvestmentAdvisoryAgreement(
  payload: HouseholdOnboardingPayload
) {
  const imaMarkdown = `# DISCRETIONARY INVESTMENT MANAGEMENT AGREEMENT
**Vanguardia Private Wealth Advisors, LLC (SEC File No. 801-994821)**

This Discretionary Investment Management Agreement ("Agreement") is entered into as of **${new Date().toISOString().split("T")[0]}**, between **Vanguardia Private Wealth Advisors, LLC** ("Adviser") and **${payload.clientFullName}** ("Client", Household Reference `${payload.householdId}`).

### 1. Appointment of Discretionary Fiduciary Adviser
Client hereby appoints Adviser as an investment adviser with discretionary authority to supervise, manage, and direct the investment and reinvestment of assets held in Client's designated custodial accounts at **${payload.custodianName}** in accordance with the target mandate: **${payload.selectedPortfolioModel}**.

### 2. Schedule A — Tiered Assets Under Management (AUM) Fee Schedule
Adviser's annual investment management fee is calculated quarterly in arrears based on the average daily market value of billable household assets (~$${payload.estimatedHouseholdAumUsd.toLocaleString("en-US")} initial funding) according to the blended schedule below:

| Household AUM Tier (USD) | Annual Advisory Fee (bps) | Quarterly Effective Rate |
|---|---|---|
| First $1,000,000 ($0 – $1,000,000) | 0.85% (85 bps) | 0.2125% per quarter |
| Next $2,000,000 ($1,000,001 – $3,000,000) | 0.65% (65 bps) | 0.1625% per quarter |
| Next $7,000,000 ($3,000,001 – $10,000,000) | 0.45% (45 bps) | 0.1125% per quarter |
| Assets Above $10,000,000+ | 0.30% (30 bps) | 0.0750% per quarter |

*Custodial Fee Deduction Authorization:* Client expressly authorizes ${payload.custodianName} to deduct accrued quarterly advisory fees directly from Client's custodial account(s) upon receipt of an itemized fee invoice from Adviser.

### 3. Mandatory SEC Rule 204-3 & Form CRS Delivery Acknowledgment
By executing this Agreement electronically below, Client acknowledges prior receipt of:
1. **Form ADV Part 2A (Firm Brochure)** dated **${payload.formAdvVersionDate}**;
2. **Form ADV Part 2B (Brochure Supplement)** for **${payload.advisorName}** (CRD #${payload.advisorCrdNumber});
3. **Form CRS (Client Relationship Summary)** dated **${payload.formCrsVersionDate}**; and
4. Adviser's Regulation S-P Privacy Policy Notice.

### 4. Fiduciary Standard & Pre-Dispute Arbitration Clause
Adviser acts as a fiduciary under Section 206 of the Investment Advisers Act of 1940. Nothing in this Agreement shall constitute a waiver or limitation of any rights which Client may have under federal or state securities laws.`;

  const response = await fetch("https://signb.ee/api/v1/send", {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${process.env.SIGNBEE_API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({
      title: `Investment Management Agreement — ${payload.clientFullName} (${payload.householdId})`,
      markdown: imaMarkdown,
      sender_name: `${payload.advisorName} — Vanguardia Private Wealth`,
      sender_email: "compliance@vanguardiawealth.com",
      recipient_name: payload.clientFullName,
      recipient_email: payload.clientEmail,
      expires_in_days: 14,
      webhook_url: `https://portal.vanguardiawealth.com/api/webhooks/signbee?householdId=${encodeURIComponent(payload.householdId)}&docType=IMA_PACKAGE`,
    }),
  });

  if (!response.ok) {
    throw new Error(`Signbee IMA dispatch failed: ${await response.text()}`);
  }

  return response.json();
}

import { NextRequest, NextResponse } from "next/server";
import { S3Client, PutObjectCommand } from "@aws-sdk/client-s3";
import crypto from "crypto";

const s3 = new S3Client({ region: process.env.AWS_REGION ?? "us-east-1" });

export async function POST(req: NextRequest) {
  const householdId = req.nextUrl.searchParams.get("householdId") ?? "unassigned";
  const docType = req.nextUrl.searchParams.get("docType") ?? "IMA_PACKAGE";
  const event = await req.json();

  if (event.event !== "document.signed") {
    return NextResponse.json({ received: true });
  }

  // 1. Download the sealed PDF with appended A4 Signing Certificate from Signbee
  const pdfRes = await fetch(
    `https://signb.ee/api/v1/documents/${event.document_id}/pdf`,
    {
      headers: { Authorization: `Bearer ${process.env.SIGNBEE_API_KEY}` },
    }
  );
  const pdfBuffer = Buffer.from(await pdfRes.arrayBuffer());

  // 2. Compute SHA-256 digest for AWS S3 integrity verification
  const sha256Base64 = crypto.createHash("sha256").update(pdfBuffer).digest("base64");

  // 3. Calculate 7-Year SEC Rule 204-2 / 17a-4(f) WORM Retention Date
  const retainUntilDate = new Date();
  retainUntilDate.setFullYear(retainUntilDate.getFullYear() + 7);

  const s3Key = `sec-books-and-records/${householdId}/${docType}-${event.document_id}.pdf`;

  // 4. Write to S3 with ObjectLockMode = "COMPLIANCE" (Non-Erasable, Non-Rewriteable)
  await s3.send(
    new PutObjectCommand({
      Bucket: process.env.SEC_WORM_ARCHIVE_BUCKET!,
      Key: s3Key,
      Body: pdfBuffer,
      ContentType: "application/pdf",
      ChecksumSHA256: sha256Base64,
      ObjectLockMode: "COMPLIANCE",
      ObjectLockRetainUntilDate: retainUntilDate,
      Metadata: {
        "signbee-document-id": event.document_id,
        "signbee-sha256-hex": event.sha256_hash ?? "",
        "household-id": householdId,
        "sec-rule-classification": "204-2-a-10-advisory-contract",
      },
    })
  );

  return NextResponse.json({
    archivedToWorm: true,
    s3Key,
    retainUntil: retainUntilDate.toISOString(),
  });
}

export async function sendCustodialAcatsTransferForm(params: {
  householdId: string;
  clientName: string;
  clientEmail: string;
  deliveringFirmName: string;
  deliveringAccountNumber: string;
  populatedPdfBuffer: Buffer;
}) {
  const response = await fetch("https://signb.ee/api/v1/send", {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${process.env.SIGNBEE_API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({
      title: `ACATS Full Account Transfer — ${params.deliveringFirmName} (#${params.deliveringAccountNumber.slice(-4)})`,
      pdf_base64: params.populatedPdfBuffer.toString("base64"),
      sender_name: "Vanguardia Portfolio Operations",
      sender_email: "transfers@vanguardiawealth.com",
      recipient_name: params.clientName,
      recipient_email: params.clientEmail,
      expires_in_days: 7,
      webhook_url: `https://portal.vanguardiawealth.com/api/webhooks/signbee?householdId=${encodeURIComponent(params.householdId)}&docType=ACATS_TRANSFER`,
    }),
  });

  return response.json();
}