Compliance
43 articles in this category
When the Model Writes the Ad: Mortgage Marketing Copy Under the MAP Rule and Reg Z 1026.24, and the Review Gate Before a Generated Line Ships
Generative AI now drafts mortgage emails, landing pages, and social copy at a scale no compliance team has reviewed a piece at a time. The moment a model writes a sentence about a rate or a payment, two regimes bite: Reg Z 1026.24 triggering terms and the MAP Rule, Regulation N at 12 CFR 1014, which bars material misrepresentation about a mortgage credit product and makes you keep every materially different version for 24 months. Here is the gate we put between the model and the send, the 'no closing costs' line it caught, and why AI turns the recordkeeping rule from a burden into a byproduct.
How Long the Agent's Evidence Has to Live: Retention Clocks for AI Mortgage Records Under Reg B, Reg Z, and Reg C, and the Default That Deletes Your Proof
An AI agent produces the record that proves a decision was compliant, and that record is worthless if the infrastructure deletes it before the exam or the lawsuit arrives. The 25-month ECOA clock, the three- and five-year TRID clocks, the HMDA retention period, and why retention has to be keyed to the loan event rather than a storage default that outlives nothing.
Serving the Borrower Who Applied in Spanish: Limited-English-Proficiency Mortgage Origination With AI, the CFPB Line, and Where a Translated Disclosure Becomes a Liability
AI voice and chat agents make it cheap to talk to a borrower in their language, which is exactly why the risk moves from access to accuracy. Where ECOA and the UDAAP standard still draw the line after the CFPB pulled back its 2021 guidance, why we run the conversation in the borrower's language but keep the operative disclosures in English, and the translation-QA control that stops a servicing term from drifting in the second language.
Trigger Leads After the Homebuyers Privacy Protection Act: What an AI Outreach Agent Can Buy, Call, and Text in 2026
The Homebuyers Privacy Protection Act amended FCRA 604(c) and took effect March 5, 2026. Here is the eligibility gate an AI outreach agent has to run before it dials a prescreened mortgage lead, the exceptions that still let you contact your own borrowers, and the audit file that proves the lead was legal.
The Call From Someone Not on the Loan: Successors in Interest Under Reg X and the AI Servicing Agent That Cannot Just Say No
A death, a divorce, an inheritance, and suddenly the person calling about a mortgage is not the borrower and never signed the note. Reg X turns that call into a regulated event: the servicer has to recognize a potential successor in interest, facilitate the confirmation, and once confirmed treat that person as a borrower. Where an AI servicing agent has to stop reciting the privacy script and start the successor process, and the line it cannot cross on liability.
The Points-and-Fees Test Runs at Pricing, Not at Closing: HOEPA High-Cost Coverage and the QM Cap With an AI Agent
Two separate points-and-fees calculations decide whether a mortgage is a high-cost loan under HOEPA and whether it keeps its Qualified Mortgage status. Both run off the same fee total, both have coverage lines a single late fee can cross, and both are cheapest to check while the loan can still be repriced. What counts as a point or fee under Reg Z 1026.32, why the test belongs at pricing, and where an AI agent flags the breach before the loan is locked into it.
The CFPB Consumer Response Portal With AI Complaint Handling: The 15-Day and 60-Day Response Windows, the Portal Tag Discipline, and the Public-Database Read the Bank Cannot Ignore
Every complaint routed through the CFPB Consumer Response portal is a supervised, time-boxed compliance event with a 15-day acknowledgment, a 60-day substantive response, a specific issue-and-sub-issue taxonomy that becomes the public database, and a consumer-dispute flag the Bureau tracks. The rule reads simple and the operations misfire often. Where the AI agent tightens the intake, the response drafting, and the root-cause loop, and the audit file the Bureau tests against in an examination.
FinCEN's Residential Real Estate Reporting Rule Under Section 6403 With AI at the Title and Closing Table: The Nationwide Reporting Person Cascade, the Beneficial-Owner Capture, and What the December 1, 2025 Effective Date Actually Changed
FinCEN's final rule at 31 CFR 1031.320, effective December 1, 2025, replaces the geographic-targeted Real Estate GTO regime with a nationwide reporting obligation on residential-real-estate transfers to legal entities and trusts. The rule uses a reporting-person cascade, requires beneficial-ownership capture on every covered transfer, and imposes a specific 30-day filing window. What the rule actually requires, how the AI agent participates in the closing workflow, and where the compliance risk lands for title, settlement, and mortgage professionals.
Reg DD Truth in Savings (12 CFR 1030) With AI Deposit-Product Recommendations: The APY Formula the Rule Actually Prescribes, the Change-in-Terms Notice, and Where an AI Cross-Sell Crosses Into Deception
Reg DD is the deposit-side companion to Reg Z: it prescribes a single APY formula, requires specific account-opening and periodic-statement disclosures, and imposes a 30-day advance-notice regime for adverse changes in terms. The AI cross-sell that suggests a higher-yield product, the retention offer that promises a rate, and the chatbot that answers 'what's my rate?' are all Reg DD surfaces. Where the disclosures actually have to appear, and where an AI conversation crosses the line into a UDAAP problem.
CFPB 1041 Payday Rule Payment Provisions With AI in Small-Dollar Collections: The 2-Consecutive-Failed-Attempts Rule, the Payment-Notice Regime, and Where the Reauthorization Requirement Actually Lands
The CFPB's 2017 Payday Rule at 12 CFR Part 1041 had its underwriting provisions rescinded in 2020, but the payment provisions at Subpart C survived and became fully enforceable in 2022 after the Community Financial Services Association litigation. The two-consecutive-failed-payment-attempts rule, the reauthorization requirement, and the payment-notice regime are the specific compliance points every AI-driven small-dollar servicing operation has to run correctly. The rule mechanics and the operational architecture we run against them.
Reg E Subpart B (1073) Remittance Transfers With AI Agents: The 30-Minute Cancellation Window, the Pre-Payment Disclosure, and the Error-Resolution Timeline the Bank Cannot Miss
The remittance transfer rule at Reg E Subpart B is where a consumer's international transfer becomes a specific federal-compliance surface with specific disclosure content, a specific cancellation window, and a specific error-resolution timeline the bank has to run correctly for every consumer transfer. The rule's mechanics have specific timing that maps to specific system-design constraints the AI agent operates against, and the specific compliance points are the specific engineering discipline the bank's remittance program has to enforce.
Regulation CC Funds Availability and the AI Deposit-Servicing Agent: Next-Day, Second-Day, Case-by-Case Holds, and the Notice the Rule Insists On
Regulation CC at 12 CFR 229 is the rule every branch teller learns and every AI deposit-servicing agent has to learn too, because the customer calling about a check that has not cleared is asking a question the rule already answered. The next-day and second-day defaults, the four exception-hold categories, the case-by-case rule for larger deposits, and the disclosure timing all sit inside the agent's first conversation with the customer. The architecture we run so the agent's answer is the right one on the day the customer asks, and the bank's file supports it later.
You Ain't Seen Nothin' Yet
- Any loan type, any agency guideline or custom investor overlays.
- Every finding cited to the guideline or document it came from