A real estate sponsor builds a polished website to support an upcoming Rule 506(b) capital raise. The site includes a deals page describing the current offering by name, the target property type, the projected return range, and a contact form inviting visitors to request access to the offering materials. The site is publicly accessible. Anyone who finds it through a Google search, a LinkedIn link, or a referral from someone outside the sponsor’s network can read the deal description and submit the contact form.
The sponsor believes the website is compliant because the actual offering documents, the PPM and subscription agreement, are not posted publicly. Visitors who submit the contact form receive a follow-up email, and only after a phone call and a relationship-building conversation does the sponsor send the PPM. In the sponsor’s view, the gate is the PPM delivery, not the website itself.
That structure does not protect the Rule 506(b) exemption. The website’s publicly accessible description of a specific offering, including its target return and property type, is general solicitation regardless of whether the PPM itself is gated behind a later conversation. The solicitation occurred the moment the deals page went live and became visible to the general public, not at the moment the PPM was distributed. Every investor who found the sponsor through that public page and was not already a documented pre-existing contact is an investor whose admission may have contaminated the offering’s exemption.
Website compliance is one of the most consistently misunderstood areas of securities law for real estate sponsors, because the website is simultaneously the sponsor’s most important marketing asset and one of the most legally consequential pieces of infrastructure the sponsor operates. This post addresses what the website compliance framework requires under Rule 506(b) and Rule 506(c), how investor portal access controls must be designed, what content review process the website requires, and the specific website features that most frequently create exposure for real estate sponsors.
The Website Is a Securities Communication, Not a Marketing Asset
The foundational principle that governs website compliance is the same principle that governs every other investor-facing communication: a website that is used to attract investor interest in a securities offering is part of the offer of those securities. The SEC has stated that a communication that conditions the market for a capital-raising transaction or arouses public interest in a security is generally treated as an offer of securities. A website that describes a specific offering’s terms, target returns, or property characteristics, and that is accessible to the general public, satisfies that definition regardless of whether it includes a subscription mechanism or simply invites visitor interest.
That principle has a direct consequence for the exemption analysis. A website operated in connection with a Rule 506(b) offering must not constitute general solicitation, which means it must not be publicly accessible in a way that describes the offering to persons without documented pre-existing substantive relationships with the sponsor. A website operated in connection with a Rule 506(c) offering may be publicly accessible and may describe the offering, because Rule 506(c) permits general solicitation, but every statement on the site is subject to the antifraud standard with the same force as any other offering communication.
The exemption selection made at the outset of the offering, addressed in the prior posts in this series on soft circling investors before launch and the comparison between Rule 506(b) and Rule 506(c), determines the entire website compliance framework. A sponsor’s choice between Rule 506(b) and Rule 506(c) is the upstream decision that shapes what the website can and cannot say, who can access it, and how the offering can be marketed digitally. A website built for a 506(c) offering and a website built for a 506(b) offering are structurally different from the first design decision, not just in their content but in their access architecture.
Rule 506(b) Offerings: Why Most Sponsor Websites Are Built Wrong
The fundamental tension in a Rule 506(b) sponsor’s website is that professional marketing infrastructure is inherently public-facing, while Rule 506(b)’s general solicitation prohibition requires that offering-specific content reach only documented pre-existing contacts. Most sponsor websites are built by web designers or marketing teams who are optimizing for visibility, search engine ranking, and lead generation, none of which is compatible with the access restrictions a 506(b) offering legally requires.
What Constitutes General Solicitation on a Website
A publicly accessible page that describes a specific offering, even without naming the precise legal entity or providing subscription documents, constitutes general solicitation if it identifies the property type, the target return, the investment minimum, the offering timeline, or any other detail specific enough to condition investor interest in that particular opportunity. A deals page that lists current and past offerings with descriptions, even brief ones, is general solicitation for any offering described on a publicly accessible version of that page.
The general solicitation analysis does not depend on whether the website includes a way to invest directly. A website that simply describes the offering and invites visitors to contact the sponsor for more information has aroused investor interest in a security, which is sufficient to constitute an offer under the SEC’s interpretation. The contact form gate that the sponsor in the opening scenario relied upon does not cure the problem, because the solicitation occurred when the public description became visible, not when the contact form was submitted or when the PPM was eventually sent.
The Gating Requirement: What Actually Protects a 506(b) Website
A Rule 506(b) sponsor’s website can describe the sponsor’s general investment platform, track record, team, and investment philosophy on publicly accessible pages without constituting general solicitation, because that content describes the sponsor’s business generally rather than soliciting interest in a specific current offering. The line is crossed when the content moves from describing the sponsor’s general approach to describing a specific contemplated or active offering.
Any page that describes a specific offering’s terms must be placed behind an access gate that restricts visibility to investors with documented pre-existing substantive relationships. That gate is not satisfied by a login wall, a registration form, or an investor questionnaire completed at the point of access. The pre-existing substantive relationship requirement is not satisfied by a registration wall, an investor questionnaire at sign-up, or a login gate created at the moment of website access. The relationship must genuinely predate the offering’s contemplation, must be substantive enough to support a meaningful eligibility assessment, and must have been established through channels that themselves did not constitute general solicitation.
The practical implementation of a compliant 506(b) website architecture requires that deal-specific content exist behind a portal that grants access only to investors whose CRM record shows a documented relationship predating the offering’s contemplation, not behind a portal that grants access to anyone who completes an online form. A sponsor cannot build the pre-existing relationship through the website itself. The relationship must already exist before the website visitor ever reaches the gated content.
| 📌 Why a Registration Wall Does Not Solve the 506(b) Problem The most common website architecture mistake among Rule 506(b) sponsors is building a registration wall, a page that requires visitors to create an account, complete an investor questionnaire, and agree to terms before they can view offering details, and treating that wall as the access control that satisfies the general solicitation prohibition. A registration wall does not satisfy Rule 506(b)’s requirements because it does not establish a pre-existing relationship. It establishes a new relationship, created at the moment the visitor completes the registration, in direct response to whatever content or marketing brought the visitor to the website in the first place. The pre-existing relationship standard requires that the relationship predate the offering’s contemplation. A relationship formed when a stranger discovers the website and registers for portal access does not predate anything; it is created by and in response to the marketing. The deeper problem is that the act of attracting the visitor to the registration page in the first place is frequently itself the general solicitation. If the visitor found the website through a Google search, a paid advertisement, a social media post, or an unsolicited referral from someone outside the sponsor’s documented network, the marketing activity that brought them to the registration wall has already conditioned the market for the offering, regardless of what happens after they reach the wall. A compliant 506(b) website architecture does not use a public registration wall to gate offering content. It restricts access to investors whose relationship with the sponsor was established and documented through channels independent of the website, such as direct personal outreach, referrals from existing investors who introduce the sponsor personally rather than through a marketing funnel, or participation in the sponsor’s prior offerings. The website portal then serves those already-known investors rather than functioning as the mechanism that creates the relationship in the first place. |
Public Content That Remains Permissible Under 506(b)
Sponsors operating under Rule 506(b) are not required to maintain an entirely private website. Educational content about real estate investing generally, the sponsor’s investment philosophy and approach, the sponsor’s general track record presented without reference to a current offering, biographical information about the team, and general market commentary can remain on publicly accessible pages without constituting general solicitation, provided that content does not describe or reference a specific current or contemplated offering.
The distinction that determines whether content is permissible is whether it describes the sponsor’s business and approach generally or whether it describes a specific transaction. A page describing the sponsor’s typical acquisition criteria, target markets, and investment philosophy in general terms is permissible public content. A page describing the specific property the sponsor is currently raising capital to acquire, even without naming the property, crosses into general solicitation if it provides enough specificity to condition interest in that particular offering.
Rule 506(c) Offerings: Public Marketing Permission and the Antifraud Trade-Off
Rule 506(c), which emerged from the JOBS Act of 2012, permits sponsors to engage in general solicitation through their websites, including publicly describing specific offerings, displaying projected returns, and inviting general public interest, provided every investor who ultimately subscribes is accredited and the issuer has taken reasonable steps to verify that status through actual documentation review. The website compliance framework for a 506(c) offering is fundamentally different from a 506(b) website: the access control problem is replaced by a content accuracy and verification problem.
Content Accuracy and Consistency With the PPM
Every material claim on a Rule 506(c) website is subject to the antifraud provisions with the same force as the PPM itself. The website must be accurate and consistent with the offering documents in every material respect: the description of the investment structure, the economic terms, the sponsor’s track record, and the offering’s current status. Discrepancies between the website and the PPM are exactly the kind of inconsistency that regulators identify by comparing the two documents, and they are also exactly the kind of inconsistency that creates the total-mix-of-information problem addressed in the prior post in this series on handling investor follow-up questions.
A website that describes the projected return without the qualifications and assumptions disclosed in the PPM, that presents the sponsor’s track record more favorably than the PPM’s track record section discloses, or that describes liquidity or transfer rights in terms that are more favorable than the operating agreement actually provides, has created a material inconsistency between the marketing channel and the formal disclosure document. That inconsistency is an antifraud problem regardless of whether the PPM itself, read in isolation, is fully accurate.
Risk Disclosure on the Website Itself
A website that describes an offering’s potential returns without prominently disclosing the material risks of the investment is presenting a one-sided picture that the antifraud standard does not permit. The risk disclosure on the website should not be limited to a generic disclaimer that past performance is not indicative of future results. It should address the specific material risks of the particular investment and the particular investor population the website is reaching: construction risk for development offerings, lease-up risk for value-add repositioning, refinancing risk for offerings with mid-hold capital events, and the general illiquidity and total-loss risk inherent in private real estate investment.
As addressed in the prior post in this series on risk disclosure for construction, lease-up, and refinance uncertainty, generic risk language that could apply to any real estate offering does not satisfy the antifraud standard’s requirement that material risks be disclosed specifically. The same principle that governs PPM risk factor disclosure applies to website risk disclosure: the disclosure must reflect the actual risk profile of the specific offering being marketed, not a boilerplate paragraph that could appear unchanged on any real estate sponsor’s website.
Accreditation Verification Triggered Through the Website
A Rule 506(c) website that allows visitors to express interest in an offering must connect that interest to an actual accreditation verification process before any subscription is accepted, not rely on the visitor’s self-certification through a website form. Many sponsors mistakenly believe that an online questionnaire asking visitors to confirm their accredited status, completed as part of the website’s investor intake flow, satisfies the Rule 506(c) verification requirement. It does not. Self-certification through a website checkbox, whether on a public form or behind a login wall, does not constitute the reasonable steps to verify accredited status that Rule 506(c) requires.
As addressed in the prior post in this series on investor accreditation workflows, the verification methods that satisfy Rule 506(c) require either documentary review of the investor’s financial information, written confirmation from a licensed professional, or, where applicable, the simplified pathway available under the March 2025 SEC no-action letter for offerings with minimum investment thresholds at or above specified levels. The website’s investor intake flow must be integrated with the actual verification process, whether that means routing interested visitors to a third-party verification service before they can access subscription documents, or building the no-action letter’s required representations into the subscription flow with a documented confirmation that no contrary facts are known to the issuer.
| 📌 506(b) vs. 506(c) Website Architecture at a Glance Public deals page describing specific offering terms: prohibited under 506(b); permitted under 506(c) subject to the antifraud standard and accurate, balanced content consistent with the PPM. Investor portal access for offering documents: under 506(b), must be gated behind a documented pre-existing relationship established independently of the website; under 506(c), may be open to any visitor who completes accreditation verification before subscribing. Email capture and lead generation forms: under 506(b), permissible only for building a general contact list that does not reference a specific offering, and any subsequent solicitation about a specific offering requires an independently established pre-existing relationship; under 506(c), permissible as part of the public marketing funnel provided all eventual investors are verified. Accreditation self-certification checkbox: insufficient under both exemptions as the sole basis for admission; under 506(b) it may support a reasonable belief determination if combined with actual review of the investor’s profile; under 506(c) it never satisfies the reasonable-steps verification standard regardless of how it is presented. Paid digital advertising driving traffic to deal-specific content: prohibited under 506(b); permitted under 506(c) provided the advertising content itself satisfies the antifraud standard and is reviewed by securities counsel before launch. Social media posts describing a specific offering: general solicitation under 506(b) in nearly all circumstances; permitted under 506(c) subject to a written social media policy, pre-approval of material claims, and archival of all official communications related to active offerings. |
The Legal Review Process: What Must Happen Before the Website Goes Live
A sponsor’s website should not be published, and should not be modified to add or change offering-related content, without a legal review process that addresses every page containing a material representation. This is not a general structural review of the website’s organization and navigation. It is a page-by-page analysis of every financial claim, every track record presentation, every description of the offering’s terms, and every statement about risk, liquidity, and return potential.
Pre-Launch Review Checklist
Before a website with offering-related content is made publicly accessible, the review should confirm: every claim about the investment structure, economic terms, and sponsor track record is accurate and consistent with the PPM; risk disclosures are prominent and specific to the offering rather than generic; the exemption disclosure and eligibility gating are correctly implemented for the exemption being used; for 506(b) offerings, deal-specific content is properly gated behind a pre-existing relationship requirement rather than a public registration wall; for 506(c) offerings, the accreditation verification process is fully built and tested before the first investor response is expected, not designed after interest begins arriving; and any projected returns are presented with their underlying assumptions disclosed, not as standalone figures.
The review should also confirm consistency between the website and every other piece of offering-related marketing the sponsor uses: the pitch deck, the PPM, email campaigns, and social media content. A website that describes the preferred return as 8% while the pitch deck describes a different figure, or that describes the offering as open to investments starting at $25,000 while the PPM specifies a $50,000 minimum, has created exactly the kind of cross-document inconsistency that produces both investor confusion and antifraud exposure.
Ongoing Review for Website Updates
Website compliance is not a one-time review completed before launch. A website that is updated to reflect a new offering, a revised track record presentation, an updated team biography, or new projected returns requires the same level of review for each update that the original launch required. Sponsors who built a compliant website at launch but who subsequently make content changes without routing those changes through the same review process create new compliance exposure with each unreviewed update.
The most common version of this failure is a marketing team member who updates the deals page to reflect a new offering, using language and formatting consistent with how the prior offering was described, without confirming that the new offering’s exemption, terms, and risk profile are accurately reflected in the updated content. A website content management process that allows updates without legal review is a process that will eventually produce a compliance gap, even if the original launch was handled correctly.
Social Media and Digital Marketing: The Website’s Compliance Extends Beyond the Site Itself
A sponsor’s website does not exist in isolation. It is typically the hub of a broader digital marketing ecosystem that includes social media accounts, paid digital advertising, email campaigns, and content distributed through third-party platforms. Each of those channels carries the same compliance obligations that apply to the website itself, and the access control and content accuracy principles described above apply with equal force.
Official Versus Personal Social Media Accounts
A written social media policy should distinguish between official company accounts, which are governed by the full compliance review process applicable to any offering communication, and personal accounts of team members, which are governed by more limited rules but still carry restrictions on what can be said about active offerings. A principal who posts about a specific current offering on their personal LinkedIn account has made an offering communication regardless of whether the post came from the company’s official account, and the general solicitation and antifraud analysis applies to that post with the same force as if it had been published on the company website.
The policy should address what constitutes an official issuer communication requiring pre-approval, what categories of statement require legal review before posting (financial projections, descriptions of investment terms, claims about secondary market access, updates to offering status), how the company should respond to investor questions that appear in public comment sections, and what archival requirements apply to social media communications connected to active offerings. Public comment responses deserve specific attention because an answer to an investor question in a public comment thread can itself constitute solicitation or create a representation that generates antifraud liability, particularly when the response includes return projections or characterizations of the offering’s risk profile.
Paid Promoters and Influencer Arrangements
Sponsors who use paid promoters, affiliate marketers, or social media influencers to drive traffic to their website or offering face a distinct compliance layer beyond the website’s own content. A promoter who receives compensation tied to the traffic or investor conversions they generate may be acting as an unregistered broker-dealer, particularly where the compensation is transaction-based, meaning paid per investor or per dollar raised. That compensation must also be disclosed to investors under Section 17(b) of the Securities Act, which requires disclosure of compensation received in connection with publicizing a security.
These arrangements should be reviewed by securities counsel before they are implemented, not after a promoter relationship has already generated investor traffic. The broker-dealer registration risk exists independently of how the sponsor characterizes the relationship in its own marketing materials, and a sponsor who has not evaluated whether a compensated promoter arrangement triggers registration requirements is carrying that risk regardless of whether it has been identified.
Third-Party Listing Platforms and Crowdfunding Sites
Sponsors who list their offering on a real estate crowdfunding platform or any third-party marketplace that publicly displays investment opportunities are engaging in general solicitation through that listing, regardless of what their own website does. A sponsor cannot maintain a private, gated website consistent with Rule 506(b) while simultaneously listing the same offering on a publicly accessible crowdfunding platform. The platform listing is general solicitation, and it forecloses Rule 506(b) for that offering regardless of how carefully the sponsor’s own website is structured.
Sponsors who use platform-managed investor qualification processes, where the crowdfunding platform itself handles accreditation verification on the sponsor’s behalf, must understand that the legal obligation to verify accreditation under Rule 506(c) rests with the issuer, not the platform. A platform’s representations about its own compliance program are not a substitute for the sponsor’s own understanding of whether that verification process actually satisfies the reasonable-steps standard. Sponsors should request and review the platform’s verification methodology before relying on it, not simply accept the platform’s assurance that its process is compliant.
Maintaining Consistency Across the Full Digital Footprint
A sponsor’s digital footprint typically extends across multiple properties: the primary website, an investor portal, social media accounts on several platforms, email marketing campaigns, and potentially third-party listing platforms. Each of those properties must say the same thing about the offering’s terms, risks, and current status, because a prospective investor who encounters inconsistent information across different channels is receiving the kind of conflicting total mix of information that the antifraud standard is designed to prevent.
The consistency requirement is operationally challenging because different channels are often managed by different team members or third-party vendors with different update cycles. A website updated by an in-house marketing team, social media managed by an external agency, and email campaigns run through a separate marketing automation platform can easily drift out of sync if there is no centralized process for propagating offering updates across every channel simultaneously. A material development that requires a PPM supplement, as addressed in the prior posts in this series on updating offering documents mid-raise, must also be reflected across every digital channel where the prior, now-outdated information was presented.
The practical solution is a single source of truth for offering content, typically the current PPM and an approved set of marketing talking points derived from it, with every digital channel’s content traced back to that source and updated whenever the source changes. A change log that tracks when offering content was last reviewed for accuracy across each channel, who performed the review, and what changes were made, creates the documentation record that demonstrates the consistency requirement was actively managed rather than assumed.
| ⚠️ The Seven Website Compliance Failures That Most Frequently Create Securities Law Exposure 1. Publishing a deals page or offering description on a publicly accessible website in connection with a Rule 506(b) offering. Any page describing a specific offering’s terms that is visible to the general public is general solicitation, regardless of whether the actual offering documents require a separate request or login to access. 2. Treating a registration wall, login gate, or investor questionnaire completed at the point of website access as satisfying the Rule 506(b) pre-existing relationship requirement. The relationship must predate the offering’s contemplation and must have been established through channels independent of the website itself. A relationship created in response to the website’s own marketing does not pre-exist anything. 3. Relying on self-certification through a website form or checkbox as accreditation verification for a Rule 506(c) offering. Self-certification does not satisfy the reasonable-steps verification standard under any circumstances. The website’s investor intake flow must connect to an actual documentary or professional verification process before any subscription is accepted. 4. Inconsistency between the website’s description of the offering and the current PPM. Discrepancies in projected returns, track record presentation, fee structure, or risk disclosure between the website and the formal offering documents are material misrepresentations that are easily identified by comparing the two and create antifraud exposure independent of either document’s accuracy in isolation. 5. Launching website content without a page-by-page legal review, or updating existing content without routing the update through the same review process. A website reviewed and approved at launch that is subsequently modified without legal review accumulates new compliance exposure with each unreviewed change. 6. Listing an offering on a third-party crowdfunding platform while attempting to maintain a Rule 506(b) gated website for the same offering. A public platform listing is general solicitation that forecloses Rule 506(b) for that offering regardless of how the sponsor’s own website is structured. 7. Using paid promoters or influencers to drive website traffic without evaluating the broker-dealer registration risk and Section 17(b) compensation disclosure obligation. Transaction-based compensation paid to a promoter for driving investor traffic is one of the highest-risk arrangements in digital marketing for private securities offerings and requires legal review before implementation. |
The Website That Survives Scrutiny Is the One Built With the Exemption in Mind From the First Page
The scenario in the opening of this post describes a website that was built by people who understood marketing and did not understand securities law, which is the most common origin of website compliance failures among real estate sponsors. The deals page was built to generate leads and convert interest into investment, which is exactly what a marketing professional is trained to optimize for. It was not built with an understanding of where the legal line between permissible relationship-building and prohibited general solicitation actually falls.
A compliant website is not a website that says less. It is a website that is architected correctly from the start: public content that describes the sponsor’s platform and approach generally, gated content that is genuinely restricted to documented pre-existing relationships for 506(b) offerings or connected to actual verification processes for 506(c) offerings, and a review process that confirms every material statement is accurate and consistent with the offering documents before it goes live and every time it changes.
Sponsors who are building a new website, updating an existing one to support a new offering, or evaluating whether their current digital marketing infrastructure is compliant with the exemption they are using should have that infrastructure reviewed by securities counsel before the next offering launches, not after a general solicitation question has already been raised by an investor, an examiner, or a competitor’s counsel.
Frequently Asked Questions
Can a Rule 506(b) sponsor have a public website at all?
Yes. A Rule 506(b) sponsor can maintain a publicly accessible website that describes the sponsor’s general investment platform, track record, team, and investment philosophy without constituting general solicitation, provided the content does not describe a specific current or contemplated offering’s terms. The line is crossed when public content moves from describing the sponsor’s business generally to describing a specific transaction’s property type, target return, or investment terms, which must instead be placed behind access controls limited to investors with documented pre-existing relationships.
Does requiring website visitors to register or complete a questionnaire before viewing offering details satisfy the 506(b) general solicitation prohibition?
No. A registration wall, login gate, or investor questionnaire completed at the point of website access does not establish a pre-existing substantive relationship under Rule 506(b). The relationship must predate the offering’s contemplation and must be established through channels independent of the website itself. A relationship created in direct response to marketing that brought a visitor to the registration page does not satisfy the pre-existing requirement, regardless of how detailed the registration process is.
Does a self-certification checkbox on a website satisfy Rule 506(c)’s accreditation verification requirement?
No. Self-certification, whether through a checkbox on a public form or a form behind a login wall, does not constitute the reasonable steps to verify accredited status that Rule 506(c) requires. Verification requires documentary review of the investor’s financial information, written confirmation from a licensed professional, or reliance on the simplified pathway available under the March 2025 SEC no-action letter for offerings meeting specified minimum investment thresholds. The website’s intake flow must connect to one of those actual verification methods.
Can a sponsor list the same offering on a public crowdfunding platform and also run a private 506(b) capital raise?
No. A public crowdfunding platform listing that displays the offering to any visitor is general solicitation. That solicitation forecloses Rule 506(b) for the offering regardless of how the sponsor’s own website is structured. A sponsor who wants to use a public crowdfunding platform must structure the offering under Rule 506(c), with accreditation verification for every investor, rather than attempting to maintain Rule 506(b) eligibility alongside a publicly accessible platform listing.
How often does a sponsor’s website need legal review?
A sponsor’s website should receive a complete page-by-page legal review before any offering-related content is made publicly accessible, and every subsequent update to that content should be routed through the same review process before it goes live. A website reviewed and approved at launch but modified afterward without legal review, whether to add a new offering, update a track record presentation, or revise projected returns, accumulates new compliance exposure with each unreviewed change.
What should a sponsor’s written social media policy address?
A social media policy should distinguish between official company accounts and personal accounts of team members and the different rules that apply to each; specify which categories of statement require pre-approval before posting, including financial projections and descriptions of investment terms; establish a response protocol for investor questions that appear in public comment sections; and require archival of all official social media communications connected to active offerings, since the antifraud analysis examines the complete history of communications that shaped investor expectations.