Compliance document archive maintained

SOX §802 imposes criminal liability for knowingly destroying or falsifying records that are "made or kept in connection with" a financial transaction — a standard that courts have applied broadly to financial service documents, not just audit records. ISO 27001:2022 A.5.28 independently mandates preservation of evidence for legal proceedings. For fintech products, compliance document archives are the primary evidence in CFPB examinations, FTC investigations, and customer disputes. A company that operates a financial product but maintains only the current version of its Terms and Privacy Policy has no ability to prove what disclosures a user accepted at the time of signup — a critical gap in any dispute resolution or regulatory examination.

Implement a versioned legal document archive at app/legal/archive/page.tsx. Store historical PDFs or versioned HTML in public/legal/ and index them with effective dates:

// app/legal/archive/page.tsx
const termsHistory = [
  { version: '2.1', effectiveDate: '2024-02-01', href: '/legal/terms-v2.1.pdf' },
  { version: '2.0', effectiveDate: '2023-06-15', href: '/legal/terms-v2.0.pdf' },
]

export default function LegalArchive() {
  return (
    <section>
      <h1>Legal Document Archive</h1>
      <h2>Terms &amp; Conditions</h2>
      <ul>
        {termsHistory.map(({ version, effectiveDate, href }) => (
          <li key={version}>
            <a href={href}>Version {version}</a> — effective {effectiveDate}
          </li>
        ))}
      </ul>
    </section>
  )
}

At minimum, archive Terms, Privacy Policy, and any fee schedules. Link the archive from the footer alongside current documents.