What Fannie Mae's AI Governance Rule Means for Closings

On August 6, Fannie Mae's Lender Letter LL-2026-04 took effect. It requires sellers and servicers that use AI or machine learning in originating or servicing loans to run those tools under a documented governance program. The letter was issued in April, which gave lenders about 120 days to get ready.

If you aren't a lender, it is tempting to skip this one. I would not, and the reason is in the vendor section.

What the letter requires

According to law firm summaries of the letter, covered lenders need:

• Written policies and procedures covering the full life cycle of any AI or ML system, reviewed and updated at least annually.
• A designated owner for the program.
• Compliance with Fannie Mae's information security requirements, with the policies tied to applicable law and the lender's own risk tolerance.
• Oversight of vendors and subcontractors that use AI or ML, held to the same governance standards the lender must meet.

Fannie Mae and Freddie Mac also reserve the right to ask why a lender is using AI or ML, what for, and what safeguards are in place. In plain terms, a lender should be able to answer those questions without scrambling.

The letter also isn't limited to underwriting. It applies to AI used in origination or servicing, which covers a lot of day-to-day work.

Why this reaches past lenders

A lender can't govern its own AI and ignore everyone else's. The letter makes the lender responsible for its vendors and subcontractors. A lender buying services from an appraisal management company, a document preparation vendor, or a closing platform now has a reason to ask what AI those companies use and how it is controlled.

That is my read of how it will play out, not something the letter says about title companies. But it is a familiar pattern. Requirements placed on lenders tend to show up later in vendor questionnaires, contract language, and service agreements. Title and settlement companies that use AI for document review, data entry, or customer communication should be ready for those questions.

What to do now

• If you work with lenders, expect questions about your AI tools. Know which ones you use and what data goes into them.
• Write down what you use. A simple inventory of AI tools, who approved them, and what they are used for is the starting point for almost every governance framework, including this one.
• Look at your own policy. If your company doesn't have an AI policy, my guide on writing one is a place to start.

The CFPB has pulled back on disparate impact in fair-lending supervision, but lenders still carry fair housing and state-level exposure. The Fannie Mae letter suggests that the paperwork trail around AI decisions is only going to get longer.

- Jason