97 Days: The AI Governance Deadline Most Lenders Are Missing

97 days.

That's how long mortgage lenders have before Fannie Mae's AI governance mandate takes effect on August 6.

Freddie Mac's version? Already live since March 3.

Both GSEs now require the same thing: an auditable AI governance program — not a policy doc, not a slide deck.

Here's what most lenders don't realize: the mandate covers ANY AI touching a loan. Your doc processing vendor uses ML? In scope. Your chatbot? In scope. Your QC tool? Probably in scope.

Only 7% of lenders have fully deployed AI enterprise-wide (STRATMOR). But the rules don't care whether you "deployed AI." They care whether AI touches your loans.

The 8-step compliance checklist:

1→ Complete an enterprise-wide AI inventory (internal + vendor tools)
2→ Identify your vendor AI exposure — their AI is YOUR liability
3→ Designate an executive AI risk owner with real authority
4→ Build your risk framework: bias, security, performance degradation
5→ Establish audit trails linking AI interactions to specific loans
6→ Implement 36-hour incident notification procedures
7→ Schedule annual AI policy reviews + off-cycle triggers
8→ Run a mock disclosure: pull a loan file and prove which AI touched it

The disclosure test the GSE will run:

→ Which AI tools touched this loan file?
→ Who used them, and when?
→ What data was in the prompt?
→ Can you prove safeguards were active?

If you can't answer all four with documentation, you have a gap.

Australia's bank regulator (APRA) just issued a formal letter warning that boards lack the "technical literacy required for AI oversight." That's a preview of what's coming here.

Newrez is already building to this standard — $65M in AI savings, AI-native platform by 2027, first VantageScore 4.0 securitization through Freddie. That's the benchmark.

97 days. The checklist is free. The gap is expensive.

Full breakdown: The August 6 Deadline: What Fannie Mae's AI Rules Actually Require

— Stephen Schrump, CEO, PitchPoint Solutions