What to do
Jurisdiction mandate profile Merged vertical regulatory profiles + jurisdiction overlays + modality retention rules.
Compare deadline and regulations against the core vertical profile. Download v2 exhibit pack for this vertical × jurisdiction pair. Wire bind-gate and certificate URLs into policy-admin for this territory.
← Mandate Registry · 7 mandate layers · mortgage
housing_consumer · ECOA · Fair Housing Act · Fannie Mae LL-2026-04
AI Credit Scoring / Lending
First US sector-specific AI mandate — QC must query which AI influenced which loan
—AIDA (pending) + OSFI E-23 model risk
Regulatory exposure — commonly overlooked:
Freddie requires segregation of duties + audit trails Fannie omits — lenders selling to both must build to the stricter standard. Velaru is that standard. · Quebec Law 25 already strict on automated decisions — ROC catching up with AIDA.
50 days to compliance
Inventory all AI in origination/servicing — embedded SaaS counts. Per-loan decision record or fail QC.
Fair lending discovery
ECOA adverse action requires specific reasons — AI black box without receipt = automatic CFPB referral pattern.
Vendor illusion
Lender owns GSE indemnity for vendor AI — same Mobley logic as hiring, different regulator.
[Canada] OSFI banks
Canadian bank AI — E-23 model risk parallels SR 11-7.
[Canada] Bill C-27
AIDA when passed — early receipt infrastructure = compliance head start.
[Text / Chat] Modality hook
Baseline — all frameworks apply to text decisions.
7 mandate layers (live)
Regulatory Clock
Countdown to operative regulatory deadline — NAIC adoption, GSE mandate, EU transposition.
Open →
Domain Classifier
Industry-specific SAFE/CRISIS/VIOLATION with regulatory framework mapping.
Open →
Exhibit / Filing Pack
Regulator-ready external validation — NAIC Exhibit D, Fannie QC, EU FRIA, FDA Part 11.
Open →
Mandate Registry
Enroll deployers/insureds under vertical-specific governance mandate.
Open →
Bind / Action Gate
ALLOW/BLOCK before consequential action — bind policy, sell loan, deactivate worker.
Open →
Compliance Certificate
Deployer-facing downloadable cert — forward to counsel, auditor, regulator.
Open →
Actuarial / Risk Feed
Anonymized asymmetry signals for pricing, reserving, reinsurance correlation.
Open →