Lender Letter LL-2026-04 Governance framework on use of artificial intelligence and machine learning
Fannie Mae establishing comprehensive AI/ML governance framework for all seller/servicers to ensure safe, legal, and ethical deployment of artificial intelligence and machine learning technologies in mortgage origination and servicing
Advisory Assessment
Impact. This Fannie Mae guidance requires mortgage lenders to build comprehensive AI/ML governance frameworks within 120 days, covering every artificial intelligence system touching origination or servicing workflows. The framework must include formal policies, assigned ownership, annual review cycles, vendor oversight protocols, and readiness to disclose AI usage details to Fannie Mae on demand.
Risk. Model risk management faces the highest exposure as examiners will scrutinize how institutions identify, catalog, and govern AI systems across the enterprise. Most institutions lack complete AI inventories and will struggle to demonstrate adequate oversight of embedded AI in vendor platforms, particularly in loan origination systems and servicing technologies.
Recommended Action. Launch an immediate AI/ML inventory project led by your model risk management team working with technology and vendor management to catalog every AI system currently in use. Simultaneously, task your legal and compliance teams with drafting baseline AI governance policies using Fannie Mae's framework as the foundation, ensuring alignment with existing model risk management policies.
Watch. Monitor for Fannie Mae's promised implementation guidance and examination procedures, which will clarify enforcement expectations and provide practical compliance examples. Track whether Freddie Mac issues parallel requirements that could create conflicting standards.
Classification
- Regulatory Program
- GSE AI/ML Governance
- Doc Type
- Guidance
- Effective Date
- 2026-08-06
- Days to Action
- 73
- Comment Deadline
- —
- Published
- 2026-04-08
Urgency Basis
Effective date is August 6, 2026, which is 73 days from today (May 25, 2026), falling within the 30-90 day T2 range, but given this is guidance implementation requiring policy development, T3 is more appropriate for the 90-180 day action window
Operational Context
Impact by Category
Key Requirements
Scoring Rationale
This Fannie Mae guidance creates substantial new AI/ML governance obligations for mortgage lenders. Model risk scores 5 as this establishes comprehensive AI/ML governance requirements affecting all AI systems used in mortgage processes. Compliance and operational both score 4 given the cross-functional policy development and implementation requirements. Third-party risk scores 4 due to explicit vendor governance mandates. The 120-day implementation timeline places this in T3 urgency tier requiring immediate planning and resource allocation.