Two GSEs, Two Deadlines, One Compliance Reality
The mortgage industry has entered a new era of AI governance — and this shift is coming from the two government-sponsored enterprises, not just federal agencies.
On March 3, 2026, Freddie Mac updated its Seller/Servicer Guide Section 1302.8, establishing formal governance requirements for any seller/servicer using artificial intelligence or machine learning in connection with mortgages sold to Freddie Mac. Then, on April 8, 2026, Fannie Mae issued Lender Letter LL-2026-04 — its own AI/ML governance framework for single-family sellers and servicers — effective August 6, 2026.
Together, these mandates create a dual-layer compliance obligation affecting virtually every lender operating in the conventional space. Whether you sell to Freddie Mac, Fannie Mae, or both, your AI governance infrastructure is now under regulatory scrutiny that didn’t exist twelve months ago.
What Freddie Mac Requires (Section 1302.8, Effective March 3, 2026)
Freddie Mac’s guidance, issued under Bulletin 2025-16, sets the baseline. Any seller/servicer using AI or ML in loan origination or servicing must establish a clear, documented governance framework covering:
- Policies, processes, and procedures governing AI/ML adoption and use throughout the loan lifecycle
- Risk management actions for AI/ML systems — how the lender identifies, assesses, and mitigates AI-related risk
- Senior management approval of AI/ML policies — a higher bar than simply documenting them
- Indemnification obligations — lenders assume full responsibility for AI-driven decisions, including outcomes from vendor-provided AI tools
- Compliance with applicable law and Freddie Mac Purchase Documents
The indemnification obligation deserves special attention. If a lender’s vendor supplies an AI-driven underwriting tool that produces a discriminatory outcome, the lender — not the vendor — bears accountability to Freddie Mac. Vendor due diligence is no longer optional.
What Fannie Mae Requires (LL-2026-04, Effective August 6, 2026)
Fannie Mae’s Lender Letter LL-2026-04 takes effect August 6, 2026 — giving lenders a longer runway than Freddie Mac’s mandate, but no less urgency.
The framework requires single-family sellers and servicers to maintain a documented, actively maintained AI/ML governance program including:
- Written policies and procedures covering the full life cycle of any AI/ML system — from development to ongoing maintenance
- Annual policy reviews with a designated owner responsible for implementing, maintaining, and updating policies
- Trustworthy and ethical AI principles incorporated into the lender’s governance approach
- Information security compliance per Fannie Mae’s Information Security and Business Resiliency Supplement
- Vendor and subcontractor governance — AI/ML risk management standards must extend to any third-party tool, with protections no less robust than the lender’s own
- On-demand disclosure — upon request by Fannie Mae, lenders must promptly disclose AI/ML technologies deployed, their intended purposes, and risk safeguards in place
Fannie Mae’s requirements are less prescriptive than Freddie Mac’s in some areas — but they compensate with annual review obligations, designated ownership requirements, and explicit disclosure authority that gives Fannie Mae visibility into the AI tools lenders are using.
The Overlap With the New Fair Lending Framework
The timing is not coincidental. The CFPB’s April 2026 Regulation B final rule — shifting fair lending enforcement from a disparate impact to an intent-based standard — takes effect July 21, just weeks before Fannie Mae’s August 6 deadline.
If a lender uses AI-driven underwriting or pricing models and those tools produce discriminatory outputs, intentional use of that tool could constitute intentional discrimination under the new ECOA framework. Fannie Mae’s governance framework, with its emphasis on trustworthy and ethical AI, becomes a lender’s first line of defense — evidence that AI tools were deployed responsibly.
This means your AI governance documentation is no longer just a GSE compliance obligation. It is a fair lending defense. Quality control (QC) programs need to account for this intersection — reviewing whether AI tool outputs are defensible under the new intent-based standard.
Building a Compliant AI Governance Framework: Where to Start
Inventory your AI/ML tools. Identify every AI or machine learning system used in loan origination, underwriting, pricing, or servicing — including vendor-supplied tools.
Establish written policies and procedures. Both GSE frameworks require documented policies covering the full AI/ML lifecycle, reflecting legal requirements, ethical AI principles, and your institution’s risk tolerance.
Designate an owner. Fannie Mae requires a designated owner for annual reviews; Freddie Mac requires senior management approval. These establish internal accountability — and external defensibility.
Extend governance to vendors. Lenders bear responsibility for AI tool outcomes regardless of vendor involvement. Third-party AI vendors must be subject to the same governance standards.
Integrate AI governance into your quality control program. Quality control reviews should assess AI tool outputs, document governance compliance, and verify that AI-driven decisions are defensible under the new fair lending framework.
The Bottom Line: AI Governance Is Now Mortgage Compliance
Fannie Mae and Freddie Mac have made their position clear: AI governance is not a future consideration — it is a present obligation. With Freddie Mac’s deadline already passed and Fannie Mae’s approaching, lenders without established frameworks are exposed on multiple fronts.
The stakes go beyond GSE compliance. Ungoverned AI tools can expose lenders to fair lending liability, investor repurchase risk, and regulatory enforcement — particularly as the CFPB’s intent-based fair lending standard takes effect.
At Synergy, we help mortgage lenders build and maintain AI governance frameworks that satisfy GSE requirements and hold up under regulatory scrutiny. Our QC platform integrates AI governance assessment into your broader compliance program — so you’re covered on every front.
Need help building or reviewing your AI governance framework before the August 6 deadline? Contact Synergy to speak with a compliance specialist, or book a demo at simplifyqc.com.
