The Mortgage AI Field Guide
Page 7 of 11
CFPB 1071 Small Business Lending and AI Agents: A Subpart B Playbook for the Firewall, the Data, and the Filing
Section 1071 added 81 data points and a firewall between demographic collection and credit decisions. How to put AI agents inside the small-business application without breaching Regulation B Subpart B.
OFAC Sanctions Screening with AI Agents: The SDN List, Fuzzy Matching, and the 50 Percent Rule
Sanctions screening is strict-liability and the SDN list does not match cleanly. How we architect AI agents for name and identifier screening, beneficial-ownership traversal under the 50 percent rule, and hit disposition that survives an OFAC subpoena.
SCRA Compliance with AI Agents: DMDC Queries, the 6 Percent Cap, and the Verbal-Notice Trigger
SCRA carries a private right of action and an active DOJ enforcement docket. How we build AI agents that catch the verbal notice, query DMDC at the right moments, apply the rate cap correctly, and hold the foreclosure stay.
Prompt Injection Defense for Banking AI Agents: Threat Model, Controls, and a Red-Team Cadence
Prompt injection is the highest-impact attack against an AI agent in a bank because the agent has tools that move money. The threat model, the architectural controls, and the red-team patterns we exercise before every deployment.
TRID Compliance with AI Agents: The Six-Element Trigger, the 3/7-Day Clocks, and Re-Disclosure
TRID timing is unforgiving and the application-defining moment is where most violations start. How to put AI agents on mortgage origination intake without missing the Loan Estimate clock or breaking the tolerance buckets.
AI Chatbots in Consumer Finance: What the CFPB Spotlight Named and Who Enforces It in 2026
The CFPB's 2023 chatbot spotlight named real failure modes, and they did not disappear when the Bureau pulled back. The doom loop, missed federal rights, and UDAAP exposure, who enforces them now, and the controls that hold up.
Building AI Agents for Open Banking While the 1033 Rule Is Enjoined
Section 1033 was finalized in 2024, enjoined in 2025, and is now under reconsideration. How we architect AI agents for personal financial data sharing so the design survives whichever way the rewrite lands.
Regulation E Error Resolution with AI Agents: A 1005.11 Playbook for Dispute Intake
Reg E error resolution has hard, statutory timing: 10 business days, provisional credit, 45 and 90 day windows. How to put an AI agent on dispute intake without missing a clock, and the verbal-claim trigger that keeps it compliant.
NYDFS Part 500 and the AI Cybersecurity Letter: What New York-Regulated Institutions Have to Build
New York's Part 500 is fully phased in and its October 2024 AI guidance tells covered entities how to apply it to AI risk. The controls that matter for an AI agent: phishing-resistant authentication, privileged access on the model store, AI vendor diligence, and data minimization.
FCRA Furnisher Accuracy for AI-Driven Decisioning and Servicing: A Section 623 Playbook
How AI agents affect FCRA Section 623 accuracy duties and dispute investigations. A playbook for meeting the reasonable-investigation standard in 2026.
TCPA Compliance for AI Voice Agents in Mortgage and Bank Outreach: A 2026 Field Guide
What the FCC's 2024 declaratory ruling, the one-to-one consent rule, and the Mortgage One class action mean for AI voice outreach — with the consent stack, suppression rules, and audit pack regulated lenders need.
AI Agents for BSA/AML: SAR Narratives, Transaction Monitoring Tuning, and the New Examiner Bar
How banks and credit unions can use AI agents inside BSA/AML programs — covering SAR narrative drafting, alert triage, transaction monitoring tuning, and the FinCEN and FFIEC controls examiners expect to see.
You Ain't Seen Nothin' Yet
- Any loan type, any agency guideline or custom investor overlays.
- Every finding cited to the guideline or document it came from