Free AI policy checklist for mortgage brokers

Use this free checklist to see where your AI governance stands today. Each item notes the requirement it supports: Freddie Mac Guide 1302.8, Fannie Mae Security Supplement Section 4, or the FTC Safeguards Rule. No email required. General information, not legal advice.

• Inventory: You keep a written list of every AI tool staff use, including AI built into your LOS, CRM, and marketing tools. (Both)
• Inventory: Each tool lists whether it touches borrower data or nonpublic personal information. (Both; FTC Safeguards Rule)
• Policy: You have a written AI policy specific to your shop. (Both)
• Policy: The policy is approved by senior management, with names and dates. (Freddie 1302.8)
• Policy: It says which uses are allowed, which need approval, and which are prohibited. (Both)
• Owner: One named person owns the policy. (Both)
• Owner: A review date at least once a year is on the calendar. (Both)
• Staff: Everyone who uses AI has read the policy, and you can show when. (Both)
• Staff: A human reviews AI output before it reaches a borrower. (Good practice)
• Vendors: You have asked each vendor how its AI uses your data. (Fannie Section 4)
• Vendors: Vendor answers are filed and reviewed when contracts renew. (Fannie Section 4)
• Data: Borrower data never goes into public AI tools that are not approved for it. (FTC Safeguards Rule)
• Risk: Each AI use has a simple risk rating and the controls you chose. (Freddie 1302.8)
• Disclosure: You can send a one-page summary of your AI use and safeguards within a day of a request. (Both)
• Records: Policy versions, approvals, and reviews are kept on file. (Both)

Tip: use your browser's print command to save this page as a PDF.

How did you do?

If you checked fewer than about half, the AI Policy Kit ($497) (or the $149 Starter) covers the policy, owner, review, vendor-oversight, and inventory items. If you want it tailored to your vendors and staff, choose Governance Done-For-You. For background, read Fannie Mae and Freddie Mac AI requirements, explained.