{"id":131211,"date":"2026-08-06T06:08:17","date_gmt":"2026-08-06T06:08:17","guid":{"rendered":"https:\/\/www.europesays.com\/ai\/131211\/"},"modified":"2026-08-06T06:08:17","modified_gmt":"2026-08-06T06:08:17","slug":"fannie-mae-ai-governance-deadline-arrives-exposing-gaps-in-industry-preparedness","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/ai\/131211\/","title":{"rendered":"Fannie Mae AI governance deadline arrives, exposing gaps in industry preparedness"},"content":{"rendered":"

The 120-day deadline from Fannie Mae\u2019s announcement<\/a> in early April that approved seller-servicers must have artificial intelligence governance frameworks in place by Aug. 6 has arrived.<\/p>\n

While many lenders may have policies on paper by Thursday\u2019s deadline, far fewer will have governance programs in place on which they can effectively execute, experts tell Scotsman Guide.<\/p>\n

Chris Williams leads the advisory team for cybersecurity services at Richey May, where he also serves as chief information security officer for a handful of mortgage companies in the firm\u2019s portfolio, advising on best practices and building out programs.<\/p>\n

\"\"<\/a><\/p>\n

\u201cThere\u2019s that idea of eating an elephant where it\u2019s just such a big task, that a lot of companies are a little overwhelmed by the ask,\u201d said Williams. \u201cIt\u2019s time, it\u2019s money and it\u2019s having an understanding of how individual companies are going to do this.\u201d<\/p>\n

The size, complexion and market positioning of different mortgage companies largely determines the speed and sophistication at which AI integration and proper internal controls are developing within individual organizations.<\/p>\n

\u201cThere are a lot of companies that are going to have to start answering those questions of the AI decision tree that they\u2019ve never had to answer before,\u201d added Williams. \u201cA lot of companies, as they\u2019re being forced to ask these from third-party vendors, are going to actually have to start building those logs out or providing those logs to customers because I don\u2019t think that\u2019s been asked enough to this point.\u201d<\/p>\n

The role of vendors<\/p>\n

For mortgage companies feeling around in the dark for the light switch of governance, the vendors that power their daily operations are often their first phone call.<\/p>\n

\u201cOnce Freddie, and then Fannie, put out their directives on AI governance, customers immediately started asking us, \u2018What does this mean? What do we do?\u2019\u201d recalled Theo Ellis, CEO and founder of Friday Harbor, an AI-native pre-underwriting company that partners with nonbank lenders, brokerages, credit unions and depositories.<\/p>\n

\u201cPeople were leaning on us for some direction or some thought leadership because we are in the AI space,\u201d added Ellis, \u201cso we\u2019ve really run at it.\u201d<\/p>\n

Running at it included enlisting the expertise of mortgage compliance attorneys, but also vetting the AI vendors and frontier models that Friday Harbor deploys across its systems.<\/p>\n

But lenders have their own work to do, and Fannie Mae\u2019s and Freddie Mac\u2019s AI governance guidelines do not absolve lenders of their vendors\u2019 sins.<\/p>\n

Rather, lenders need to inventory AI use cases to understand where machine learning is embedded in vendor products, as well as within their own operations. The expertise required to do so is highly siloed and costly to recruit and retain, yielding another operational advantage<\/a> to larger organizations during a prolonged and ongoing downturn in home sales.<\/p>\n

\u201cEven the smallest lenders and brokers are asking us the right questions to build a policy or about what needs to be in the framework outside of the policy, but in terms of the drop-dead date of Aug. 6, I think we\u2019re going to need a little bit more time than that,\u201d said Alex Temple, a partner in the mortgage regulatory compliance practice at law firm Mitchell Sandler.<\/p>\n

Temple has been at the forefront of the AI governance development process over the past year, as state regulators and Fannie and Freddie have rolled out requirements for tracking AI usage. She says the technology is driving a sea change in compliance likely to require \u201ceither vendors to help you manage your vendors or a different level of know-how on staff.\u201d<\/p>\n

To that end, a gulf is widening, industry sources say, between firms that can afford the risks of robust adoption alongside robust governance, and those who have yet to fully understand AI technology \u2014 let alone the regulatory landscape evolving before their eyes.<\/p>\n

\u201cThere is some really cool stuff coming down the pike, but my biggest concern is I don\u2019t think everybody fully understands how smart these models are,\u201d said Temple. \u201cAnd unless we understand exactly who built them, what frameworks they\u2019re operating on, and what decisions the models are able to make on their own, it\u2019s a very dangerous space to get into when we talk about processing, underwriting, decisioning and those types of things.\u201d<\/p>\n

A point of departure<\/p>\n

What Aug. 6 represents is less a finish line that a starting gun for what will be a multiyear process developing standardized industry practices<\/a> for all manner of industry stakeholders.<\/p>\n

In the meantime, the complexity of AI technology being injected into every artery of the mortgage lifecycle means many lenders don\u2019t know where to start. AI use cases can run the gamut from borrower-facing chatbots and run-of-the-mill document review to lead generation, underwriting and secondary loan delivery.<\/p>\n

Some in the industry are skeptical of the internal controls that AI-powered vendors say they\u2019re adopting \u2014 which is most vendors, if not all, amid the current artificial intelligence craze. Yet some lenders are avoiding the AI-related risks vendors pose amid rapid tech rollouts.<\/p>\n

\u201cIf we\u2019re really being honest with ourselves as an industry, I believe that most people are just sending out the questionnaire to their vendors, and getting the answers that they want to hear and never asking any more questions,\u201d said Jeff Reeves, CEO and co-founder of Canopy Mortgage, a Utah-based distributed retail lender.<\/p>\n

Reeves built Canopy with an internally developed tech stack that combines the point of sale, loan origination system, document verification, pricing and closing functions within a single code base and data layer. As a result, Reeves and his team are building an AI-native framework that plays within companies\u2019 own sandbox \u2014 harnessed, permissioned and audited internally.<\/p>\n

\u201cI don\u2019t know how somebody who is fully relying on a third-party vendor for AI can truthfully or can comfortably say that they\u2019re complying with Fannie Mae\u2019s guidance,\u201d said Reeves. \u201cOn paper they\u2019ll be able to say, \u2018Hey, I gave them the questionnaire. They answered the boilerplate questions.\u2019 But then all you can do is hope that your vendor is doing it right.\u201d<\/p>\n

While a fragmented AI regulatory landscape makes governance a moving target, different lenders and vendors are incorporating a wide range of models and AI-powered capabilities at the same time that they are navigating a range of guidance from state regulators and industry counterparties like government-sponsored enterprises (GSEs) Fannie and Freddie.<\/p>\n

Yet industry leaders say that the resources and expertise mortgage companies may require to comply with Fannie\u2019s governance requirements are more readily accessible than may be widely appreciated.<\/p>\n

Matt Tully, chief compliance officer at Sagent, a provider of cloud-based and AI-native mortgage servicing technology, believes the industry has welcomed Fannie\u2019s guidance on AI governance. Calling the adoption of AI frameworks \u201can evolution, not a revolution,\u201d he said he hasn\u2019t heard of servicers encountering specific issues adopting the new standards.<\/p>\n

But Tully added that groups like the Mortgage Industry Maintenance Standards Organization (MISMO) \u201cwill be critical to drive consensus around standards adoption.\u201d<\/p>\n

MISMO President Brian Vieaux told Scotsman Guide that \u201cthere\u2019s really no excuse for any lender to not be prepared with a documented policy and procedure, and at a minimum a baseline inventory of its own AI use cases. That is very doable for a lender of any size today.\u201d<\/p>\n

MISMO, which is owned by the Mortgage Bankers Association, helps establish common language and data practices across the residential and commercial mortgage industries. It launched its Framework for Responsible AI in the Mortgage Ecosystem (FRAME) in June as a member-only toolkit to aid in responsible artificial intelligence governance and adoption.<\/p>\n

At the organization\u2019s fall summit on Aug. 24, MISMO will be hosting a day of FRAME-specific workshops to walk invitees through its AI governance framework, which comprises a template for policies and procedures, as well as AI use case inventory and risk assessment tools, all of which incorporate Fannie\u2019s and Freddie\u2019s latest guidance.<\/p>\n

\u201cWhether it\u2019s a regulator or the GSEs, if at a minimum you\u2019ve demonstrated that at least you know where AI is being used within your organization, then the conversations that follow are probably going to be a lot different [than] if you were not able to produce any evidence of your use of AI,\u201d added Vieaux.<\/p>\n","protected":false},"excerpt":{"rendered":"The 120-day deadline from Fannie Mae\u2019s announcement in early April that approved seller-servicers must have artificial intelligence governance…\n","protected":false},"author":2,"featured_media":131212,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[24,25,1367,8597,1702,134],"class_list":["post-131211","post","type-post","status-publish","format-standard","has-post-thumbnail","category-ai","tag-ai","tag-artificial-intelligence","tag-exclusive","tag-mortgage","tag-regulation-and-compliance","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/131211","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/comments?post=131211"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/131211\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media\/131212"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media?parent=131211"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/categories?post=131211"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/tags?post=131211"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}