Understanding SEC Comment Letters and What They Reveal About a Company

Somewhere on EDGAR, filed under labels almost nobody clicks, there is a running argument between the SEC and the companies it regulates. The staff reads a company's 10-K, finds something vague or inconsistent, and sends a letter asking for an explanation. The company writes back. Sometimes the exchange ends in one polite round. Sometimes it drags on for months and ends with the company quietly rewriting how it reports revenue.

These exchanges are called comment letters, and they're public. In my experience most investors never read them, including plenty of professionals who read filings for a living. That's a shame, because a comment letter is one of the very few places where you can watch a skeptical, well-resourced reader interrogate a company's disclosures, then see how the company holds up under questioning.

What a comment letter actually is

When a company files a 10-K, 10-Q, registration statement, or proxy, the SEC's Division of Corporation Finance can review it. If the staff has questions, they send a letter. Maybe the revenue recognition policy is fuzzy. Maybe a risk factor contradicts something in the MD&A. Maybe a non-GAAP metric looks engineered. The company responds in writing, the staff either accepts the answer or asks again, and the loop continues until the SEC closes the review.

The whole correspondence then becomes public on EDGAR. The SEC's policy is to release it no earlier than 20 business days after the review wraps up, so you're reading with a lag, but you get the entire thread: what the staff questioned, how the company answered, and whether the answer satisfied anyone.

The reviewers are accountants and securities lawyers organized into industry groups, and they read filings all day. The people covering software companies understand SaaS revenue recognition. The people covering banks understand loan loss reserves. So the questions tend to be specific rather than generic, and when the staff flags something, there's usually a reason behind it.

How companies end up under review

Sarbanes-Oxley requires the SEC to review every reporting company's filings at least once every three years, and many companies get looked at more often than that. The selection is risk-based, so recent IPOs, companies that have restated, and companies with unusual financial patterns move up the queue.

Keep in mind that a review falls well short of an audit. The staff works from the filings and other public information, and they can't pull internal records through this process. What they're very good at is spotting inconsistencies, comparing a company against its peers, and asking questions precise enough that a vague answer becomes informative on its own.

Why the questions matter

Getting a comment letter doesn't mean a company did something wrong. Plenty of letters are routine requests for clearer disclosure, and companies of every quality receive them, so the useful information sits in the pattern of questions rather than in the existence of a letter. If the staff keeps circling revenue recognition, you've learned where the judgment calls live in that business. If the questions cluster around related party transactions, you've learned something about governance. Either way, the SEC has handed you a map of where the accounting depends most on trust.

There's also a timing angle I think is underused. When a company agrees in its response to expand or change a disclosure, the change lands in the next filing. If you've read the letter, you know exactly where to look, and you can judge whether the new disclosure reveals something the old one obscured. Say a company had been reporting one blended segment and, after SEC pressure, breaks out two. If the newly separated unit shows margins collapsing while the other one carried it, you now understand why management preferred the blended view.

Finding them on EDGAR

Pull up the company's filing history on EDGAR and look for two form types. UPLOAD is the SEC's letter to the company, and CORRESP is the company's response. Read them oldest first so you can follow the thread. EDGAR's full-text search works on this correspondence too, which means you can search across all companies for letters that mention a topic you care about, like segment aggregation or principal versus agent revenue.

Once you're reading, a few things tell you how seriously to take an exchange:

• The substance of the questions. Requests to fix formatting or add a cross-reference tell you very little. Questions about when revenue is recognized, how goodwill was tested, or why segments were combined deserve a careful read.
• How the company responds. Most companies concede small points quickly. Watch the ones that push back hard on a reasonable question, and also the ones that instantly agree to sweeping changes, since that second group was arguably under-disclosing all along.
• How many rounds it takes. One round and a clean close is normal. Three or four rounds means the staff didn't buy the answers the first few times, which is worth your attention.
• Repeat topics across review cycles. When the same issue shows up in reviews years apart, the company has either a persistent disclosure problem or a business practice the SEC keeps finding uncomfortable.

The topics that come up over and over

Revenue recognition sits at or near the top of the list every year. The staff asks how companies identify performance obligations, when control transfers, how multi-year and bundled contracts get split up, and whether the company is acting as principal or agent. Aggressive revenue accounting is the most common way to flatter results, so this is where the SEC digs hardest. Say a software company sells a three-year deal that includes a license, hosting, and support, then books most of the value upfront. A comment letter asking how it separated those performance obligations is really asking whether growth is being pulled forward from future years.

Non-GAAP measures are another staple. Nearly every large company now reports some adjusted earnings figure, and the gap between GAAP and adjusted numbers can be wide. The staff pushes back when adjusted metrics get more prominence than GAAP, when the reconciliation is missing or buried, or when supposedly one-time costs show up every single quarter. If a company's whole story rests on an adjusted metric the SEC has already questioned, handle that story with care.

Segment reporting questions usually mean the staff suspects a company is blending business lines to hide a weak one. If management plainly runs the business as five units but reports a single segment, expect a letter asking how that squares with the information the chief operating decision maker actually uses.

Goodwill and impairment testing attracts attention after big acquisitions, especially when the market values the company below book value while goodwill sits untouched on the balance sheet. The staff wants to see impairment testing with assumptions that connect to observable reality.

MD&A comments are about context. The SEC wants companies to explain why results moved, and to disclose known trends and uncertainties before they show up in the numbers rather than after. Thin MD&A paired with deteriorating fundamentals is a combination worth noticing.

Red flags in the responses

The company's side of the correspondence often tells you more than the SEC's side. A few patterns are worth flagging:

• Repeated extension requests. The standard ask in a comment letter is a response within ten business days. A company that needs several extensions is often struggling to construct an answer it can live with.
• Lawyered answers. When responses read like they were drafted by outside securities counsel rather than the CFO or controller, the company is treating the exchange as legal exposure. Sometimes that caution is justified, and the fact that management feels it needs the protection tells you how serious they think the issue is.
• Big swings in the next filing. If the disclosures a company agreed to change end up painting a materially different picture, the original filing was hiding more than anyone admitted at the time.
• A restatement at the end of the road. Some exchanges conclude with the company restating prior financials, which means the original accounting was materially wrong. When that happens, go back and reread the whole thread, because it doubles as a case study in how that management team communicates under pressure.

Using letters beyond a single company

Comment letters also work as industry intelligence, because the SEC tends to sweep through sectors thematically. If several software companies get questioned about multi-year contract revenue in the same stretch, you've learned that the practice is widespread in the sector. You can then look at the software names you own that haven't been reviewed recently and ask whether they'd survive the same questions.

The letters also give you a free benchmark for disclosure quality. When a reviewed company upgrades its segment detail or its non-GAAP reconciliation under SEC pressure, that upgraded version becomes a reasonable standard to hold its peers to. A peer that discloses far less either has a simpler business or something it prefers not to break out.

Working this into your process

Here's the workflow I'd suggest if you want this to become a habit rather than a one-off curiosity:

1. When you start on a new company, check EDGAR for UPLOAD and CORRESP filings covering the last two or three review cycles. Skim for topics, number of rounds, and tone.
2. Cross-check the issues the SEC raised against the company's own risk factors and critical accounting estimates. If the staff questioned revenue recognition while the company's disclosures treat it as routine, that gap deserves a closer look.
3. Verify follow-through. Companies sometimes promise enhanced disclosure in their responses and then ship a watered-down version in the next 10-K. Comparing the promise to the filing takes minutes.
4. Recycle the SEC's questions. If the staff pressed management on a specific policy, raise it on the earnings call or in an investor meeting, and compare the answer you get with the written answer the SEC got.

The tedious part is monitoring, since letters publish on a lag and nobody wants to poll EDGAR by hand. That's one of the things we've automated at FirmAdapt, where active comment letter exchanges get flagged as part of our company diagnostics. You can get most of the way there manually, though, with EDGAR's full-text search and a recurring calendar reminder.

How much weight to put on them

Keep comment letters in perspective. The staff isn't infallible, most reviews close without incident, and a letter on its own proves nothing about a company. Treat the correspondence as one input, weighted by the substance of the questions and the quality of the answers.

It's an unusual input, though. Almost nothing else gives you a sophisticated regulator's written read of a company's reporting, for free, with the company's own rebuttal attached. If you're doing serious work on a name, the hour it takes to read the last few exchanges is usually time well spent.