Once a year, a bank takes every business loan it holds and underwrites it again with this year's numbers: the new statements and tax returns, the covenant tests in the loan agreement, how the accounts behaved, what the collateral and the owners are worth now. Then it decides whether the loan's risk grade still fits. Done on time, the review spots a slipping borrower while there is still room to act. Done late, or copied forward from last year, it leaves the bank grading a company that no longer exists.
This guide is for anyone who writes, approves, schedules or pays for annual reviews: commercial credit analysts, portfolio managers, relationship managers, credit administration, senior and chief credit officers, loan review, and the leaders deciding whether to automate the work. No background needed.
Imagine you are a senior credit analyst at a business bank in Columbus, Ohio. It is Monday, October 12, 2026, and you have 21 annual reviews due by December 31. At the top of the pile is Ostley Precision Components, a family-owned metal stamping shop in Dayton with $8.1 million of credit from your bank: a revolving line, an equipment loan and a mortgage on its plant. Last October your bank approved it at grade 4, "Acceptable". Every one of its 36 loan payments since then arrived on time.
The owners' compliance certificate for June, signed by the company's CFO, says leverage is 2.88 times earnings, comfortably inside the 3.00x limit in the loan agreement. On page 2, the certificate adds back $310,000 of plant-move and consulting costs to earnings. Section 6.12 of the agreement allows add-backs of no more than $150,000 a year.
Q2 compliance certificate · p. 2
Funded debt
$9.42M
Add-backs
$310K
EBITDA
$3.27M
Leverage
2.88x pass
Credit agreement · §6.12
Funded debt
$9.42M
Add-backs
$150K cap
EBITDA
$3.11M
Leverage
3.03x breach
2.88x on the certificate3.03x by the agreementthe limit is 3.00x.
Read with the rest of the year, the picture gets worse: earnings down 37% from 2024, the credit line drawn to about 90% at four month-ends in a row, four overdrafts in August and September, and the main owner's cash and securities down from $1.92 million to $0.86 million. Nothing is late yet. The grade that fits now is 6, "Special Mention".
A careful annual review catches the breach the borrower's own certificate called a pass, and moves the grade months before a missed payment would have.
What an annual credit review is, and what the 2026 rules ask of it
What the review covers, how often each loan needs one, the documents behind it, the covenant and cash-flow arithmetic, how the grade is chosen, what goes wrong and what it costs, explained without selling anything. If you are new to commercial credit, start here.
01 · In plain words
The annual credit review: a bank re-underwrites every business borrower once a year
When a bank lends to a business, it studies the company once, carefully, before the money goes out. It reads three years of statements and tax returns, works out how much cash the business makes, checks what the bank could sell if things went wrong, and asks the owners to sign personal guarantees. Then it gives the loan a risk grade, a number on the bank's own scale that says how likely the loan is to be repaid as agreed. Most of a bank's business loans sit on that scale somewhere between "excellent" and "acceptable".
A year later the company is different. Sales may have grown or shrunk, a big customer may have left, the owner may have bought a lake house with cash the business needed. So once a year, the bank does the work again.
The analyst asks for the new statements and tax returns, lays them beside last year's, recomputes every promise the loan agreement asks the borrower to keep, looks at how the bank accounts behaved, re-checks the collateral and the guarantors, and writes a review that ends with one decision: keep the grade, or change it. A senior credit officer approves any change. That yearly re-underwriting is the annual credit review, also called the annual review or the relationship review.
The regulators treat it as basic housekeeping. The OCC's handbook on rating credit risk says "All credits should receive a formal review at least annually to ensure that risk ratings are accurate and up-to-date."1 The Federal Reserve's examination manual lists, among the issues a bank's loan policies and procedures should address, "the requirement for an annual review of borrowers, including a reassessment of the appropriateness of credit lines".2 And the OCC's new lending booklet, issued in June 2026, gives examiners a blunt question to ask: "Does the bank complete annual reviews of commercial loans in a timely manner?"3
The hard part is volume and timing. Every relationship (a borrower, its owners and all their loans with the bank) comes due every year, the statements arrive months after the year ends, and most of the effort goes into gathering and arithmetic, leaving little time for judgment. When the pile gets too high, reviews run late or get copied forward from last year. A company that started to slide in the spring is then found at the next review, or by an examiner.
One borrower's year, from approval to annual review
The loan is approved and gradedOstley Precision is approved at grade 4, "Acceptable", on October 14, 2025, with a leverage covenant of 3.00x and a fixed charge coverage test of 1.20x.
The year runs, and reports come inStatements in April, a compliance certificate each quarter, borrowing base certificates each month, payments every month.
The annual review re-underwrites itFresh numbers beside the approval, covenants recomputed by the agreement, accounts, collateral and guarantors re-checked, and a grade decision. This is where the 3.03x breach is found.
A senior officer approves any grade changeThe move from 4 to 6 needs a second signature; so does a covenant waiver.
Loan review, the board and examiners test the gradeAn independent reviewer samples the grades; the board sees grade migration each quarter; examiners re-grade a sample.
Step 3 is the subject of this guide. The bank, borrower, people and figures in this example are fictional.
Current loans that slip and waived breaches that still count
A loan can be current and still slipping
The OCC's own example is a borrower that "is current" on a term loan while its cash flow weakens; the rating "should be changed now" and well before a payment is missed.1 Ostley made all 36 payments in the year its leverage covenant broke.
The borrower does the covenant math first
A compliance certificate is the borrower's own calculation, signed by its officer. The loan agreement's definitions decide the answer, and add-backs are where the two most often part company.4
A waived breach still counts
The OCC's 2026 booklet lists "Covenant breaches (even if waived)" as financial exceptions that management should track and report.3
Two reviews with similar names do different jobs
The annual review is the lending side re-grading its own loans. Loan review, or credit risk review, is an independent team that tests a sample of those grades and reports to the board.5
Risk grade, covenant, compliance certificate, special mention
Risk grade
The bank's number for how likely a loan is to be repaid as agreed, on a scale each bank sets. The fictional bank in this guide uses 1 to 9: grades 1 to 5 are "pass", and worse grades carry regulatory names.
Covenant
A promise in the loan agreement, such as keeping debt below three times earnings or delivering statements within 120 days.
Compliance certificate
A form the borrower's officer signs each quarter or year, reporting the covenant calculations and saying whether each test passed.
Special mention
The first grade below pass: "potential weaknesses that deserve management's close attention."1 Substandard, doubtful and loss follow.
Annual credit review or loan review: who grades the loan, and who checks the grade
In shortThe annual review belongs to the lending side: the analyst and the officers who manage the loan re-underwrite every relationship and propose its grade. Credit risk review, often called loan review, is a separate, independent function that tests a sample of those grades and reports to the board. When the two disagree, the lower grade usually stands.
Banks use the word "review" for two jobs, and the rules for each are different. The first is the annual credit review: the yearly re-underwriting of each relationship by the lending side, which bankers call "the line". The OCC puts the duty on "The loan officer (or whoever is primarily responsible for rating)", who "should review and update risk ratings whenever relevant new information is received", with a formal review at least once a year.1
The second is credit risk review, the independent function most banks call loan review. The 2020 interagency guidance that governs it says a sound rating framework "generally places primary reliance on the lending staff to assign accurate and timely risk ratings and identify emerging loan problems", and then asks independent reviewers to test the result.5
The OCC's 2026 lending booklet keeps the two apart as well. Its credit risk review section covers only reviews independent of loan officers and production staff, and it sends readers looking for "risk-rating reviews performed by loan officers (e.g., annual commercial credit reviews)" to its own credit risk rating section and to the Rating Credit Risk booklet. Annual reviews get their own questions in the booklet's internal control questionnaire: whether the bank completes them "in a timely manner", whether "commercial lines of credit" are "reviewed annually", and whether a system tracks "the timely submission of commercial borrower and guarantor financial statements".3
Reviewers with no control over the loan and no part in approving it5
Which loans
Every relationship above the bank's floor, every year; more often when large, new, complex or weak1
A risk-based selection: loans over a set size, a sample of smaller and new ones, criticized, renewed and restructured loans, insiders, concentrations5
Output
A written review, a grade confirmed or changed, actions for the borrower
Findings on grades and credit administration, reported to the board, typically quarterly5
When they disagree
The lending side must bring new information to keep its grade
"the lower classification or risk rating typically prevails"5
The two depend on each other. Loan review can only sample, so the grades on every other loan are only as good as the annual reviews behind them. And the annual review is the work loan review reads first. The interagency guidance lists what a reviewer typically evaluates in a selected loan, and nearly every item is something the annual review should already have answered: "Creditworthiness of guarantors or sponsors", "Proper lien perfection", "Adherence to loan agreement covenants", and "The accuracy of risk ratings and the appropriateness and timeliness of the identification of problem loans by loan officers".5
At large banks, loan review changed the rating on up to about one loan in ten it reviewed
Up to 10 in 100
loans whose rating loan review changed, by the account of large-bank staff interviewed by Federal Reserve researchers, outside mergers or a new rating system. The low end was essentially none.
loans whose rating loan review changed, by the account of large-bank staff interviewed by Federal Reserve researchers, outside mergers or a new rating system. The low end was essentially none.
10 of 100
The 1998 Federal Reserve study is old, and we found no newer published count as of October 2026. It remains a useful yardstick: if your loan review changes far more grades than that, the annual reviews feeding it are probably running late or soft.
03 · The rules and their dates
The rules behind annual reviews, and what changed in 2025 and 2026
In shortNo single regulation orders an annual review. The expectation comes from examination guidance: the OCC's Rating Credit Risk booklet, the OCC's new Lending and Loan Portfolio Risk Management booklet (June 2026), the Federal Reserve's examination manual, the safety-and-soundness standards, and the 2020 credit risk review guidance. In 2026 the model risk guidance was replaced, and the third-party guidance is out for replacement.
The annual review's rulebook is old at its core, with three 2026 changes around it
Jun 1993Special mention defined
The interagency definition the OCC quotes today.
Apr 2001OCC Rating Credit Risk
Formal review at least annually; ratings should measure risk. Updated 2017; reputation-risk references struck March 2025.
Jun 1, 2020Credit risk review guidance
Four agencies; the line grades, independent review tests the grades.
Jul 6, 2023CRE workout policy statement
Global debt service coverage and how modified loans are graded.
Apr 17, 2026SR 26-2 replaces SR 11-7
New model risk guidance; generative AI outside its scope.
Jun 25, 2026OCC lending booklet issued
Replaces Loan Portfolio Management; asks whether annual reviews are timely.
Nov 16, 2026Third-party guidance comments due
Proposal to replace the 2023 guidance; the 2023 text applies until then.
"All credits should receive a formal review at least annually"; large, new, higher-risk pass, problem and complex credits more often; smaller performing credits may be "reviewed as exceptions"; ratings "measure risk rather than record history".1
Current. April 2001, updated June 2017; reputation-risk references removed March 2025.
OCC, Lending and Loan Portfolio Risk Management
Timely annual reviews; lines reviewed annually; a system for statement deadlines; reports on reviews "coming due and late", covenant breaches and waivers, rating migration.3
Issued June 25, 2026 (Version 1.0, July 2026); replaced the 1998 Loan Portfolio Management booklet.7
Federal Reserve, Commercial Bank Examination Manual §2010.1
An annual review of borrowers and their credit lines; a "file documentation tickler system"; statement requirements "for businesses and individuals at various borrowing levels".2
Current.
12 CFR 30, Appendix A
Underwriting that weighs "the financial responsibility of any guarantor, the nature and value of any underlying collateral".10
Current (OCC; the FDIC and Fed have matching standards).
Interagency Guidance on Credit Risk Review Systems
Sets no annual review for the line. It covers the independent function that tests the line's grades, and expects that function to review significant loans "typically annually, on renewal, or more frequently" when credit may be deteriorating.5
In force since June 1, 2020; no rescission found.
CRE accommodations and workouts policy statement
Global debt service coverage includes guarantors' cash flows and "contingent obligations"; prudent workouts are graded on the borrower's condition.11
In force since July 6, 2023.
SR 26-2 / OCC Bulletin 2026-13
Model risk management, scaled to banks over $30 billion; simple arithmetic and fixed rules fall outside the definition of a model.8,12
April 17, 2026; replaced SR 11-7.
Third-party risk management guidance
Using a vendor or outsourced reviewer leaves the responsibility with the bank.13
2023 guidance in force; replacement proposed September 11, 2026.9
Three things not to write in 2026. "SR 11-7 requires model validation of our review software": SR 11-7 was replaced on April 17, 2026.8 "The Loan Portfolio Management booklet says": it was rescinded on June 25, 2026.7 "The 2023 third-party guidance is gone": it still applies until the agencies finalize the September 2026 proposal.9
Two other 2026 dates are worth knowing and easy to over-read. The CFPB's rewritten Section 1071 rule, with compliance from January 1, 2028, governs data collected on small-business credit applications, which an annual review is not.14 Colorado's SB26-189, with most duties from January 1, 2027, covers automated decisions in "financial or lending services" and is aimed at consumers; whether a business loan with personal guarantors falls within it is a question for counsel.15
04 · How often
How often a commercial loan must be reviewed, and why the calendar backs up in the fall
In shortAt least once a year for every relationship, more often for large, new, complex and weak ones, and by exception for the smallest performing loans. The anniversary of the last approval sets the deadline, while the statements, certificates and tax returns the review needs arrive on their own clocks. Warning signs during the year should pull a review forward.
The OCC's frequency rule is short. Every credit gets "a formal review at least annually"; "Large credits, new credits, higher risk pass and problem credits, and complex credits should be reviewed more frequently"; and "smaller, performing credits may be excluded from periodic reviews and reviewed as exceptions."1
Banks turn that into a written policy. One might read: every relationship annually, or at renewal if sooner; relationships graded special mention or worse quarterly; the largest relationships twice a year; loans under a size floor by exception. The fictional bank in this guide reviews grade 6 and worse quarterly and relationships above $15 million semiannually.
The policy sets a deadline. The work depends on documents that arrive on the borrower's timetable. Loan agreements set reporting deadlines: one bank agreement filed with the SEC requires annual audited statements "in no event more than one-hundred-twenty (120) days from each fiscal year-end" and quarterly statements within 45 days of quarter-end.4 Business tax returns on extension arrive in the fall.
Short credit lines add to the load. In Federal Reserve data on loans over $1 million at banks with more than $100 billion of assets, "three-quarters of credit lines have maturity of 1 year or less at origination" for firms with under $50 million of assets, so renewal and review land every year.16
Ostley's warning signs arrived months after its annual statements, and before its review
One relationship's year, from approval (October 14, 2025) to the review due date (October 31, 2026)
DocumentsSignals during the yearThe review
FY2025 statements: year-end to delivery, Apr 28
2025 tax return: year-end to filing, Sep 15
June 30 leverage test to certificate, Aug 14
Line above 85% at four month-ends, Jun to Sep
Four overdrafts, Aug 14 to Sep 25
Property insurance lapsed from Sep 1
Review opened Oct 12, due Oct 31
Oct 2025JanAprJulOct 2026
Fictional example from this guide
Show the numbers
Activity
From
To
FY2025 statements: year-end to delivery, Apr 28
3
6.9
2025 tax return: year-end to filing, Sep 15
3
11.5
June 30 leverage test to certificate, Aug 14
9
10.4
Line above 85% at four month-ends, Jun to Sep
9
12
Four overdrafts, Aug 14 to Sep 25
10.4
11.8
Property insurance lapsed from Sep 1
11
13
Review opened Oct 12, due Oct 31
12.4
13
Two practical rules follow. First, a review is only as current as its documents: a review dated on time but written on last year's statements satisfies the calendar and tells the bank little. The OCC lists "Stale financial statements, tax returns, or borrowing base certificates" among credit administration exceptions, and warns that banks "have incurred increased credit risk when information systems failed to provide adequate information to identify concentrations, problem loans, loans past maturity, or stale commercial borrower financial statements".3
Second, the year sends signals between reviews: a line that stays drawn, overdrafts, a late certificate, a customer cutting orders. The OCC wants ratings updated "whenever relevant new information is received".1 A bank that screens for those signals can work its reviews riskiest first and keep the anniversary as the deadline.
Order the work by what moved, with exposure as the tie-breaker
Six relationships due this quarter at the fictional bank, placed by how much changed since approval and by size
Change since approval →
Moved, smaller
Moved, large: first
Stable, smaller
Stable, large
OstleyPruettMarlowBellhavenOakmereSilverthorn
Exposure →
Fictional example from this guide
Show the numbers
Item
Exposure (0–1)
Change since approval (0–1)
Ostley
0.60
0.72
Pruett
0.53
0.62
Marlow
0.24
0.62
Bellhaven
0.80
0.52
Oakmere
0.32
0.18
Silverthorn
0.71
0.12
How to read it: higher means more lines of the review moved since approval (Ostley 22, Pruett and Marlow 5, Bellhaven 4), and further right means more committed exposure ($2.3 million to $11.3 million). The four that moved come first. Oakmere Dental and Silverthorn Packaging changed on one line or none and clear in minutes. Sorted by due date alone, Marlow and Oakmere would have come first.
05 · The documents and data
What goes into an annual review file, and what each document can prove
In shortSix kinds of evidence: the last approval, the borrower's new statements and tax returns, its compliance and borrowing base certificates, twelve months of account history from the bank's own systems, collateral and insurance records, and the guarantors' statements and returns. Each answers a different underwriting question. Most of it comes from the borrower; the account history comes straight from the bank's own systems.
The safety-and-soundness standards name the questions underwriting answers: the borrower's "overall financial condition and resources, the financial responsibility of any guarantor, the nature and value of any underlying collateral, and the borrower's character and willingness to repay".10 An annual review answers them again with a year of evidence. The Federal Reserve's manual adds the file it expects behind the answers, including the borrower's "past and current financial condition" and the collateral with "its value and the source of the valuation".2
Starting point
Last approval and reviews
The approved memo, the grade, the covenants as written and amended, the conditions and exceptions. This is the column every change is measured against.
From the borrower
Statements and tax returns
Year-end statements at the level the agreement requires (audited, reviewed or compiled), the business return (1120, 1120-S or 1065), interim statements for the months since.
From the borrower
Certificates
Quarterly or annual compliance certificates with the borrower's covenant math; monthly borrowing base certificates for lines secured by receivables and inventory.
From the bank
Account behavior
Twelve months of payments, overdrafts, line usage at each month-end, and whether the line ever paid down. It comes from the bank's own systems, so the borrower cannot dress it up.
From third parties
Collateral and insurance
Appraisals or evaluations and their age, insurance certificates and expiry dates, UCC financing statements and their lapse dates.
From the owners
Guarantors
Personal financial statements, personal tax returns, liquid assets, other debts and contingent liabilities: the inputs to global cash flow, the business and its owners counted together (section 06).
Only the bank's own records show behavior; only the agreement settles a covenant
Which evidence can answer which review question
SilentPartialAnswers it
Earnings and cashCovenant complianceLiquidityCollateralGuarantor supportStatements and returnsAnswers itPartialPartialSilentSilentCompliance certificatePartialPartialSilentSilentSilentLoan agreementSilentAnswers itSilentPartialPartialAccount historyPartialSilentAnswers itSilentSilentCollateral recordsSilentSilentSilentAnswers itSilentGuarantor statementsSilentSilentPartialSilentAnswers it
Two details trip up reviews again and again. The first is the date on each document. A borrowing base certificate from June tells the bank little about October; an appraisal from three years ago may miss a falling market.
The second is housekeeping that has a hard legal deadline. A UCC financing statement, the public filing that perfects the bank's lien on business assets, "is effective for a period of five years after the date of filing", a continuation "may be filed only within six months before the expiration", and after a lapse the security interest "is deemed never to have been perfected as against a purchaser of the collateral for value".17 The OCC also lists "Expired, insufficient, or cancelled insurance" and "Missing lien recordation" as exceptions.3 These items take minutes when caught and can cost the collateral when missed.
06 · The tests, worked through
How to re-test covenants, coverage and global cash flow at review time, with real numbers
In shortRecompute each covenant from the agreement's own definitions and the latest figures, then compare your answer with the borrower's certificate. Rebuild coverage on a trailing basis. Combine the business and the guarantors into global cash flow, once, against all their debt payments. Ostley, the example, passes on its certificate, fails by its agreement, and loses a third of its global cash flow.
Step 1: earnings by the agreement's definition
Most covenants start from EBITDA: earnings before interest, taxes, depreciation and amortization. Borrowers like to add back costs they call one-off, such as a plant move or a consultant. The loan agreement decides which add-backs count and how much. In the sample SEC-filed agreement above, add-backs for non-cash items and one-time charges count "only if approved in writing by Lender, in its sole discretion, on a case-by-case basis".4
Ostley's agreement caps non-recurring add-backs at $150,000 a year. Its trailing twelve-month EBITDA as reported is $2,960,000. The certificate adds $310,000 ($186,000 for moving a press line, $124,000 of consulting) to reach $3,270,000. By the agreement, only $150,000 counts: $3,110,000.
Step 2: each covenant, both ways
The same June test passes on the certificate and fails by the agreement
Funded debt of $9,420,000 divided by trailing EBITDA, Ostley, June 30, 2026
Borrower's certificate ($3,270,000 EBITDA)2.88×
By the loan agreement ($3,110,000 EBITDA)the breach3.03×
Maximum allowed by the covenant3×
Fictional example from this guide
Show the numbers
Calculation
Funded debt ÷ EBITDA
Borrower's certificate ($3,270,000 EBITDA)
2.88×
By the loan agreement ($3,110,000 EBITDA)
3.03×
Maximum allowed by the covenant
3×
The difference is 0.15x, and it moves the answer across the line. By the agreement, leverage (funded debt, meaning the borrower's interest-bearing borrowings, divided by EBITDA) is $9,420,000 ÷ $3,110,000 = 3.03x against a 3.00x maximum: an event of default under the agreement, whether or not the bank declares it. The other tests in the agreement tell the rest. Fixed charge coverage, the cash available for fixed payments divided by those payments, is 1.04x on a trailing basis against a 1.20x minimum tested each December. Tangible net worth (equity less intangible assets such as goodwill), $11.41 million, still clears its $9.0 million floor.
Leverage crossed its 3.00x limit as fixed charge coverage slid toward 1.0x
Ostley's two main ratios by fiscal year and on the trailing twelve months to June 2026
Funded debt to EBITDA (max 3.00x)Fixed charge coverage (min 1.20x)
0×1×2×3×4×3.03×1.04×
FY2023FY2024FY2025TTM Jun 2026
Fictional example from this guide
Show the numbers
Funded debt to EBITDA (max 3.00x)
Fixed charge coverage (min 1.20x)
FY2023
2.19×
1.41×
FY2024
1.85×
1.46×
FY2025
2.44×
1.21×
TTM Jun 2026
3.03×
1.04×
Step 3: global cash flow, counted once
Many business loans lean on the owners as well as the company. Global cash flow adds the guarantors' cash after their own living costs and debts to the business's cash, and sets the total against all the payments both owe. The interagency workout statement describes it as "inclusive of the cash flows generated by both the borrower(s) and guarantor(s), as well as the combined financial obligations (including contingent obligations)".11
At Ostley, the main guarantor bought a lake house with a $1.18 million mortgage in January 2026, which raised his personal debt service from $150,000 to $262,000 a year and cut his liquid assets from $1.92 million to $0.86 million.
Global cash flow fell by a third while the debt it must cover rose
Ostley and its guarantors, approved October 2025 against the review
Approved, Oct 2025At review, Oct 2026
Business cash for fixed charges$3.4M$2.5M
Guarantors' cash after living costs$734K$372K
Global cash flow available$4.1M$2.8M
Business fixed charges plus guarantors' debt service$2.5M$2.6M
Fictional example from this guide
Show the numbers
Approved, Oct 2025
At review, Oct 2026
Business cash for fixed charges
$3.4M
$2.5M
Guarantors' cash after living costs
$734K
$372K
Global cash flow available
$4.1M
$2.8M
Business fixed charges plus guarantors' debt service
$2.5M
$2.6M
Global debt service coverage is the ratio of the two totals: $4,104,000 ÷ $2,458,000 = 1.67x a year ago, $2,832,000 ÷ $2,623,000 = 1.08x now, against a 1.15x policy minimum. Every payment is still on time, and the coverage is already below the bank's minimum. The review's job is to say so now.
What moved, and what held
Most lines on Ostley's review moved, and most of the moves were for the worse
27 lines compared with the October 2025 approval
27lines
Worse since approval19
Better since approval3
Unchanged, carried forward5
Fictional example from this guide
Show the numbers
Part
Value
Worse since approval
19
Better since approval
3
Unchanged, carried forward
5
The three that improved matter too: loan-to-value on the equipment (59%) and the plant (64%) fell as the loans amortized, and tangible net worth rose by $170,000. Revenue on the statements ties to the 2025 tax return within 0.2%. A fair review shows both columns.
07 · Choosing the grade
How the risk grade is chosen at annual review: pass, special mention or substandard
In shortEach bank grades on its own scale, usually 1 to 9, and maps its worst grades to four regulatory definitions: special mention, substandard, doubtful and loss. The grade should reflect expected repayment over at least the next year. A scorecard helps an analyst be consistent; the decision and the reasons are the analyst's, and a change needs an approver.
The regulatory definitions are short and worth knowing word for word. Special mention: "potential weaknesses that deserve management's close attention. If left uncorrected, these potential weaknesses may result in deterioration of the repayment prospects for the asset or in the institution's credit position at some future date."1
Substandard: "inadequately protected by the current sound worth and paying capacity of the obligor or of the collateral pledged, if any", with "a well-defined weakness, or weaknesses, that jeopardize the liquidation of the debt". Doubtful adds that collection in full is "highly questionable and improbable"; loss means "uncollectible".1 Together, special mention and the three classified grades are the "criticized" loans boards and examiners watch.
The OCC adds three instructions that shape every annual review. Ratings look forward: "Expected performance should be evaluated over the foreseeable future", a horizon the OCC sets at one year or more, and "Credit risk ratings are meant to measure risk rather than record history."1 Special mention has a job of its own: it "is not a compromise between pass and substandard and should not be used to avoid exercising such judgment."1
Upgrades need a track record. In an appeal from a 2024 Shared National Credit examination (the agencies' joint review of large syndicated loans), an interagency panel kept a borrower at substandard, although its financial performance had improved, because "the company had not achieved satisfactory and sustained performance to warrant an upgrade".18
Grades 1 to 5
Pass
Repayment as agreed is likely. Banks split pass into several grades so that drift inside pass shows up before a loan leaves it.
Grade 6
Special mention
Potential weaknesses. Declining revenue or margins, high leverage, tight liquidity, "an ineffective loan agreement" are the OCC's examples.1
Grade 7
Substandard
A well-defined weakness: "inadequate debt service coverage, inadequate liquidity, or marginal capitalization".1
Grades 8 and 9
Doubtful and loss
Collection in full improbable; then uncollectible. Doubtful assets go on nonaccrual: the bank stops counting their interest as income.1
Five of Ostley's seven grading factors moved two notches or more
The fictional bank's scorecard, 1 (strongest) to 9, last October against this review; weights in brackets
Oct 2025Now
Repayment capacity (30%)46
Leverage and capital (15%)36
Liquidity and working capital (15%)46
Earnings trend and quality (10%)46
Industry and concentration (10%)46
Management and reporting (10%)34
Collateral and guarantor support (10%)34
Fictional example from this guide
Show the numbers
Oct 2025
Now
Repayment capacity (30%)
4
6
Leverage and capital (15%)
3
6
Liquidity and working capital (15%)
4
6
Earnings trend and quality (10%)
4
6
Industry and concentration (10%)
4
6
Management and reporting (10%)
3
4
Collateral and guarantor support (10%)
3
4
The weighted score moves from 3.65 to 5.60, which the model maps to grade 6. Why 6 and not 7? Ostley still covers its fixed charges, if barely, has missed no payment, has $329,000 of room on its borrowing base, and its collateral covers the loans. Those facts keep the weakness "potential".
What would make it "well-defined" is just as specific: coverage below 1.00x for two quarters, a payment past due, the borrowing base short of the line, or the leverage default declared without a waiver. A good review writes both lists down, so that the next reviewer knows what to look for.
The reasons matter as much as the number. The OCC's rating booklet warns that "it can be relatively easy for loan officers and line managers to rate credits a step, or more, above what they deserve."1 A grade with its reasons, and with what would move it up or down, is the defense against that drift, and the first thing loan review will read.
08 · What goes wrong
Nine ways an annual review leaves a slipping borrower graded as healthy
In shortMost failures are failures of time: reviews done late, done on old documents, or copied forward from last year. The rest come from trusting the borrower's arithmetic, counting a guarantor who cannot pay, renewing a loan that never pays down, and missing housekeeping deadlines. Each one keeps the grade higher than it should be.
Error
Why it happens
What the regulators say
1. Review late
Every relationship comes due every year; statements arrive in bunches
"Does the bank complete annual reviews of commercial loans in a timely manner?"3
2. Rolled forward
Last year's analysis copied with new dates when the pile is high
Ratings should "measure risk rather than record history"1
3. Stale documents
Review written before the statements, return or borrowing base arrive
"Stale financial statements, tax returns, or borrowing base certificates" are exceptions3
4. Certificate trusted
The borrower's covenant math accepted without recomputing it
"Nonexistent, weak, or waived covenants" are a structural weakness3
5. Breach waived and forgotten
A waiver letter closes the item without changing the grade
"Covenant breaches (even if waived)" are financial exceptions3
6. Guarantor assumed
Personal statements a year old; new personal debt unseen
"Inadequate guarantor support" is a structural weakness3
estimated loss to the Deposit Insurance Fund when First NBC Bank of New Orleans failed on April 28, 2017.19
FDIC Office of Inspector General, AUD-18-002
4 of 6
examination reports from 2010 to 2016 found weaknesses in the bank's loan review: "Untimely reviews", understaffing, "Failure to identify impairments".19
Same report
1
person oversaw the loan reviews: "First NBC loan reviews were overseen by the CEO."19
Same report
The inspector general's report reads like a list of what annual reviews and loan review exist to catch. Troubled borrowers received repeated extensions, and "These extensions masked potential delinquencies"; the report notes that "a borrower needing multiple loan renewals is likely having cash flow problems."19 The loan reviews that should have challenged the extensions were untimely and understaffed, and the chief executive oversaw them, with no independent reviewer in charge.19 The FDIC's own examination manual puts the general lesson plainly: "Lending errors frequently result because of management's failure to obtain and properly evaluate credit information".20
Late and rolled-forward reviews do the most damage because they hide every other error
How each failure affects what the bank knows, our reading of the examination guidance
LowMediumHigh
Hides deteriorationLikely exam findingCan cost collateralReview late or rolled forwardHighHighMediumStale documentsHighHighLowCertificate trustedHighMediumLowGuarantor assumedMediumMediumMediumRenewed without paydownHighHighMediumUCC or insurance lapseLowMediumHigh
What a stale risk grade costs a bank: exam findings, reserves, losses and fair-lending exposure
In shortThe grade drives more than a label. It feeds the allowance for credit losses, board reports, capital planning and loan pricing, and it decides when the bank acts. A grade that lags the borrower means the bank acts late, reserves too little, reports the wrong picture to its board, and hands examiners an easy finding.
Examination
Re-graded by the examiner
Examiners re-grade a sample of loans themselves, and inside the bank loan review's lower grade usually prevails (section 02).5 A pattern of late reviews invites a finding on credit administration.
Reserves
The allowance moves late
Credit risk review exists in part to give "accurate and timely credit quality information for financial and regulatory reporting purposes".5 When grades lag, loss estimates built on them lag too.
Losses
The window to act closes
A covenant breach found in October gives the bank rights it can use: a waiver fee, tighter reporting, a reset covenant, more collateral. Found a year later, those options have often gone.
Board
Migration reported in the wrong quarter
The OCC wants reports on "rating migration" and on reviews "coming due and late".3 Late reviews show up as false stability, then as double downgrades.
Why acting early matters: what lenders do after a covenant violation
Research on public companies shows how much a covenant breach changes the lender's position. Studying US public firms, Greg Nini, David Smith and Amir Sufi found that "Covenant violations are common", and that after one, creditors gain real influence: investment falls, assets that grew about 10% in the four quarters before a violation shrink about 6% in the four quarters after, and forced CEO turnover rises.21 For a bank, that influence starts with knowing about the breach.
After a covenant violation, the chance of a forced CEO exit rises more than fivefold
Chance of forced CEO turnover, US public firms around a covenant violation
The Equal Credit Opportunity Act and Regulation B cover business credit. An annual review that ends in a smaller line or a terminated commitment can be "adverse action", which includes "A termination of an account or an unfavorable change in the terms of an account that does not affect all or substantially all of a class of the creditor's accounts".22
Action "taken in connection with inactivity, default, or delinquency as to that account" is excluded, so a reduction because of a covenant default is treated differently from a reduction because of a policy change.22 For a business with revenue over $1 million, notice may be given "within a reasonable time, orally or in writing".23 The review file should record the reason for any change in terms, and apply the same thresholds to every borrower.
10 · The market and the trend
The commercial loan book every annual review covers, and where its credit quality is heading
In shortUS commercial banks held about $2.96 trillion of commercial and industrial loans in September 2026, and the OCC expects every credit behind them to get a formal review at least once a year, the smallest performing ones by exception. Credit quality is sound on average but softer at community banks, and the one public measure of large-loan grades improved in 2025 mostly because the book grew.
Commercial and industrial loans reached their highest level since the spring 2020 credit-line rush
All US commercial banks, $ billions, seasonally adjusted, December of each year and September 2026
2,3582019
2,5912020
2,4742021
2,8012022
2,7652023
2,7712024
2,7092025
2,959Sep 2026
Source24 · In 2025 new Call Report rules moved about $193 billion out of this category, mostly into loans to nondepository financial institutions, so 2025 and later read low against earlier years. The series peaked at $3,036 billion in May 2020, when companies drew down their credit lines.
Show the numbers
Period
Value
2019
2,358
2020
2,591
2021
2,474
2022
2,801
2023
2,765
2024
2,771
2025
2,709
Sep 2026
2,959
The note under the chart matters. Under changes to the Call Report, the quarterly financial report every bank files, $193.2 billion of C&I loans at domestically chartered banks were reclassified through September 2025 into loans to nondepository financial institutions and loans not elsewhere classified, according to the FDIC's reading of the Fed's weekly data.25 Even so, the September 2026 figure of $2,959 billion is the highest since mid-2020, below only the April to June 2020 months when companies drew down their lines at the start of the pandemic.24
Community banks carry more late and nonaccrual business loans than the industry
Commercial and industrial loans, June 30, 2026, % of loans
The FDIC's Risk Review 2026 adds the trend: the past-due and nonaccrual rate on community banks' C&I loans "continued to rise" to 1.81% at the end of 2025, "above the pre-pandemic average of 1.62 percent", while their C&I lending grew 4.9%.25 The number of banks on the FDIC's problem list was 47 at June 30, 2026.26
The largest loans: graded better, for a reason
The Shared National Credit program is the agencies' annual review of large syndicated loans, $6.9 trillion of commitments to 6,857 borrowers in 2025. The share rated special mention or classified fell to 8.6% from 9.1%, and the agencies explained why: the decline was "primarily due to growth in new commitments rather than an underlying improvement in credit quality".27 A ratio with a growing denominator can improve while the loans behind it get no better, which is why boards are asked for rating migration as well as ratios.3
Leveraged loans make up four in five criticized large loans
81 in 100
non-pass (special mention and classified) Shared National Credit loans were leveraged loans in 2025, although leveraged loans are nearly half of all commitments.
non-pass (special mention and classified) Shared National Credit loans were leveraged loans in 2025, although leveraged loans are nearly half of all commitments.
81 of 100
The credit analysts who write annual reviews, and their pay
The people who write most annual reviews are credit analysts. O*NET, the Labor Department's occupation database, gives their 2025 median wage as $83,510 a year ($40.15 an hour) from Bureau of Labor Statistics data, with about 64,700 people employed.28 Wages and salaries were 70.0% of private employers' compensation costs in June 2026.29 On those figures a loaded analyst hour at the median wage costs about $57 (our arithmetic).
Nobody publishes how many hours an annual review takes. One lending-software vendor writes that a relationship review "can take a commercial credit team two full days", and "On complex borrowers, a week".30 Treat that as a vendor's estimate and time your own.
11 · Automation and AI
Automating annual reviews with AI: what the 2026 guidance covers, and what stays with people
In shortSoftware is good at the assembly: finding what each borrower owes, reading statements and certificates, recomputing covenants by the agreement, pulling account history, drafting the comparison. The grade, the waiver and the conversation with the borrower stay with named people. The 2026 model guidance leaves generative AI to the bank's own governance, and responsibility for any vendor stays with the bank.
Automate the rule-bound assembly first; keep the judgment calls with people
Annual review tasks by how rule-bound they are and how much time they take by hand
How rule-bound →
Automate with checks
Automate first
People decide
Draft; people decide
SpreadingChasing documentsCovenant testsWriting the reviewChoosing the grade
Time taken by hand →
Illustrative · replace with your own numbers
Show the numbers
Item
Time taken by hand (0–1)
How rule-bound (0–1)
Spreading
0.76
0.70
Chasing documents
0.64
0.56
Covenant tests
0.28
0.66
Writing the review
0.72
0.14
Choosing the grade
0.26
0.30
What regulators expect of annual review software, October 2026
Model risk
SR 26-2
Replaced SR 11-7 on April 17, 2026. Aimed mainly at banks over $30 billion. Simple arithmetic and fixed rules are outside its definition of a model, and generative AI and autonomous AI systems are outside its scope, which leaves them to the bank's own governance.8,12
Vendors
Third-party guidance
"the use of third parties does not diminish or remove banking organizations' responsibilities".13 A replacement was proposed on September 11, 2026; the 2023 text applies until it is final.9
Supervision
Human accountability
The OCC's spring 2026 risk report found banks "taking a measured approach" to generative AI and autonomous AI systems, with "guardrails and human-in-the-loop accountability".31
Frameworks
NIST and Treasury
The NIST AI Risk Management Framework's four functions (govern, map, measure, manage) are a common structure.32 Treasury warns that generative AI can produce "confidently stated but incorrect output".33
For an annual review the practical tests follow from those texts. Every figure the software produces should open its source page, so the analyst and loan review can check it in seconds. Covenant results should show the clause they applied. The software should propose a grade with its reasons and leave the decision with the analyst, with a second approver for any change. Everything (each step, challenge, signature and approval) should land on an audit trail with names and times.
The bank should also measure accuracy on its own files before relying on it, because we found no regulator or independent tester that has published accuracy figures for annual review software as of October 2026.
Some things software cannot do. It cannot decide whether a margin squeeze is temporary, whether an owner will put cash into the business, whether to waive a breach for a $5,000 fee, or how to tell a long-standing customer that its line is moving to quarterly review. It cannot make a borrower send a late statement. Those stay with the analyst, the relationship manager and the credit officer.
12 · How teams review today
How credit teams run annual reviews today: who does what, and where the hours go
In shortCredit administration tracks the calendar, the relationship manager chases documents, the analyst spreads, re-tests and writes, and a credit officer approves. Most of the hours go to gathering and arithmetic. Banks do it in spreadsheets and templates, in credit software, or with outside help, and each way leaves the grading decision with the bank.
Who touches an annual review, from tickler to loan review
CA
Credit administration
Runs the tickler, the bank's calendar of what each borrower owes and when, which reviews are coming due and which are late. Tracks exceptions.
Cares about: no review overdue at quarter-end.
RM
Relationship manager
Asks the borrower for statements, returns and certificates; explains the business; delivers the news on a downgrade or a waiver.
Cares about: hearing about a problem before the borrower calls.
AN
Credit analyst
Spreads the statements, ties them to the return, recomputes covenants, reads the accounts, collateral and guarantors, writes the review and proposes the grade.
Cares about: time to think about the loans that moved.
SC
Senior or chief credit officer
Approves grade changes and covenant exceptions; owns the grading scale and reports grade migration to the board.
Cares about: why the grade moved, and what would move it again.
LR
Loan review
Independent of the line; tests a sample of grades and reports findings to the board.5
Cares about: evidence that supports the grade on file.
Four hands before a risk grade is final
An annual review passes through four people before the grade is final
1Review comes due
The tickler flags the anniversary weeks ahead, by the bank's own lead time.
Credit administrationWeeks before
2Documents chased
Statements, return, certificates, guarantor statements; late items followed up.
Relationship managerDays to weeks
3Spread and re-tested
Statements spread and tied to the return; every covenant recomputed by the agreement.
Credit analystAbout a day
4Accounts, collateral, guarantors
Twelve months of usage and overdrafts; insurance, UCC, appraisal age; global cash flow.
Credit analystHours
5Written and graded
Comparison with the approval, the grade proposed with reasons, actions listed.
Credit analystHours
6Approved
Any grade change or exception signed by a second officer; actions sent.
Credit officerDays
Illustrative · replace with your own numbers
Show the numbers
Step
What happens
Who
Time
Review comes due
The tickler flags the anniversary weeks ahead, by the bank's own lead time.
Credit administration
Weeks before
Documents chased
Statements, return, certificates, guarantor statements; late items followed up.
Relationship manager
Days to weeks
Spread and re-tested
Statements spread and tied to the return; every covenant recomputed by the agreement.
Credit analyst
About a day
Accounts, collateral, guarantors
Twelve months of usage and overdrafts; insurance, UCC, appraisal age; global cash flow.
Credit analyst
Hours
Written and graded
Comparison with the approval, the grade proposed with reasons, actions listed.
Credit analyst
Hours
Approved
Any grade change or exception signed by a second officer; actions sent.
Credit officer
Days
Two working days per review, mostly gathering and spreading
Gathering, spreading and writing take more than two-thirds of a review done by hand
Estimated hours for one ordinary relationship review, about two working days
Chasing documentsSpreading and tax tie-outRe-testing covenantsAccounts, collateral, guarantorsWriting and grading
One review by hand3 h4 h2 h3 h4 h
Illustrative · replace with your own numbers · An illustrative split of about sixteen hours, consistent with one vendor's two-day figure; no regulator or study publishes this split. Time ten of your own reviews.
Show the numbers
Chasing documents
Spreading and tax tie-out
Re-testing covenants
Accounts, collateral, guarantors
Writing and grading
One review by hand
3 h
4 h
2 h
3 h
4 h
Few analysts get two uninterrupted days. A review that needs sixteen hours of attention can take two weeks of calendar time between borrower calls, new deals and other reviews. Multiply by the book: 600 relationships at sixteen hours each is 9,600 hours a year, close to five full-time analysts at 2,080 hours, before any quarterly review of a criticized loan (our arithmetic).
Four ways banks staff and check annual reviews
1 · In house
Templates and spreadsheets
A review template in a word processor and a spreading workbook per borrower. Cheap to start and flexible.
Strength
Knows the borrower and the bank's policy
Strain
Copied-forward text, formulas typed over, no link from a figure to its page
2 · Credit software
Review modules
Loan origination and credit analysis systems with tickler, spreading and review templates. Several vendors now add AI drafting.30
Strength
One record, one calendar, standard reports
Watch for
Whose covenant definitions it applies, and whether each figure carries its source
3 · Outside help
Outsourced analysts
A provider spreads and drafts to the bank's template. One provider reports a "30% improvement in efficiency" at a community bank whose annual reviews on many high-risk loans were pending.34
Firms that test the bank's grades. Allowed by the guidance, with the board still responsible.5
Strength
Independence and depth
Watch for
It samples the grades; the annual reviews stay with your lending side
Federal Reserve staff found in 1998 that at large banks reviews ranged "from a periodic signoff by the relationship manager working alone to a committee review involving both line and credit staff".6 We found no newer survey of how banks organize the work.
Part B · See it working
Botminds Annual Credit Review, from the overnight queue to an approved downgrade
Part A described the work without naming a product. This part shows how Botminds does it, at a fictional business bank in Columbus, Ohio with 612 commercial relationships under annual review. Every bank, borrower, person, number and document in the screens is sample data.
13 · One review, start to finish
The Ostley annual review: a covenant breach the certificate called a pass, and a downgrade approved before lunch
In shortThis is the example from the top of the page, inside the product. Six agents fill this year's column beside last year's approval in under two minutes. Elena Marsh, the senior credit analyst, confirms or challenges each line that moved, reads the drafted review and signs. Ruth Adeyemi, the senior credit officer, approves the grade change from 4 to 6. Time from opening the review to the analyst's signature: 1 hour 52 minutes.
1
Monday, 9:20 am: a queue ordered by what moved
Elena has 21 annual reviews due by December 31. The overnight screen, run at 6:00 am, sorted them by change since approval: six that moved and need her judgment, two stable ones to clear in minutes, two waiting on the borrower, eleven later in the quarter. Each row shows how many lines got worse or better and the time it should take: Ostley about 1 hour 50 minutes, Oakmere Dental about 6 minutes.
Ostley opens with last October's approved numbers on the left and this year's column empty, except four lines the overnight screen already flagged: the leverage covenant, the line at 90%, the overdrafts and the largest customer's share.
The queue and the comparison. Reviews grouped by what moved since approval, and Ostley's approved column with four overnight flags.
2
One button fills this year's column
Elena presses Re-underwrite now. The statement and document collector gathers 31 documents, checks each against its reporting deadline and flags the property insurance renewal that never arrived. The financial spreader spreads fiscal 2025 and the June interim and ties revenue to the tax return. The covenant tester recomputes every covenant by the agreement. The account and collateral monitor reads twelve months of activity, and the guarantor analyst works out global cash flow.
Each section header names the agent reading it, and lines land as each one finishes. The run takes 1 minute 52 seconds.
This year's column, filling. The covenant tester is on line 10 of 27; flagged lines carry a "last night" tag.
3
Every change since approval, lit red or green
Of 27 lines, 19 got worse, 3 got better and 5 are unchanged and carried forward. Revenue down 12% to $33.92 million; EBITDA by the bank's definition down 37% to $3.11 million; fixed charge coverage 1.04x against a 1.20x minimum; the property insurance certificate expired on September 1. The suggested grade moves from 4, Acceptable, to 6, Special Mention.
Every value links to the page it came from, and every moved line has Confirm and Challenge.
Year over year. Last year's approved column, this year's re-underwrite, the change, and the analyst's call on each line.
4
The breach the certificate called a pass
The Q2 compliance certificate, signed by the CFO, reports leverage of 2.88x. It adds back $310,000 of relocation and consulting costs; section 6.12 of the credit agreement caps add-backs at $150,000 a year. By the agreement, $9,420,000 of funded debt over $3,110,000 of EBITDA is 3.03x against a 3.00x maximum: an event of default under section 8.1(c), not yet declared.
The covenant tester never waives a covenant. The draft proposes a reservation-of-rights letter, which tells the borrower the bank keeps its remedies while it decides, and a waiver request, and only Ruth Adeyemi can approve the exception.
The June test, two ways. The certificate and the agreement side by side, each with its page and clause.
5
She challenges one line, and signs at 11:12 am
At 10:44 am Elena challenges the 31% fall in global cash flow: Marcus Brayford, the relationship manager, told her the lake house was sold in September. The challenge goes back to the guarantor analyst, which rechecks the line against the worksheet and answers in place with the figures behind it: business cash of $2,460,000 plus guarantors' $372,000, against $3,370,000 plus $734,000 a year ago. The challenge and the answer both stay in the review and on the audit trail.
She confirms the rest and signs: "I have reviewed the analysis and agree with the grade." Because the grade changes, it goes to Ruth Adeyemi, who approves at 11:31 am. Next review: quarterly, January 31, 2027.
A challenge, answered in place. The guarantor analyst's recheck sits under the line with the analyst's note; both stay on the audit trail.
Clock times are from the sample run: started 9:20 am, agents finished 9:22 am, signed 11:12 am, approved 11:31 am. The solution's design target is about two hours from opening a review to a signed one; it is a target, to be measured on your own reviews.
14 · The stable credits
Clearing a stable credit in six minutes, so the analyst's day goes to the loans that slipped
In shortMost relationships in a healthy book move little in a year. The queue shows them as stable, and they clear from the same screen: the analyst confirms the one or two lines that moved and signs, with everything else carried forward with its sources. Oakmere Dental Partners took six minutes.
The queue, riskiest first. Red pips for lines that got worse, green for better, gray for unchanged; minutes on the right.
A stable credit, signed. One line moved: collections up 7% with a ninth office. Grade 3 confirmed; next review in 12 months.
Six of Elena's 21 reviews moved enough to need her judgment
Her reviews due by December 31, as the overnight screen grouped them
21reviews
Moved since approval: needs judgment6
Stable: clear in minutes2
Waiting on the borrower2
Later this quarter, drafted 30 days before due11
Fictional example from this guide
Show the numbers
Part
Value
Moved since approval: needs judgment
6
Stable: clear in minutes
2
Waiting on the borrower
2
Later this quarter, drafted 30 days before due
11
Ostley needs nearly as much time as the other seven reviews together
Estimated minutes of analyst time per review in this week's queue
Ostley Precision Components19 worse, 3 better110 min
Pruett Mechanical Contractors45 min
Bellhaven Foods25 min
Marlow Hardwood Flooring20 min
Quill & Barrow Furniture15 min
Fenwick Printing15 min
Oakmere Dental Partners6 min
Silverthorn Packaging5 min
Fictional example from this guide
Show the numbers
Relationship
Minutes
Ostley Precision Components
110 min
Pruett Mechanical Contractors
45 min
Bellhaven Foods
25 min
Marlow Hardwood Flooring
20 min
Quill & Barrow Furniture
15 min
Fenwick Printing
15 min
Oakmere Dental Partners
6 min
Silverthorn Packaging
5 min
Together the six reviews that moved need about 3 hours 50 minutes of Elena's time and the two stable ones 11 minutes, against an estimate of about sixteen working days for the same eight reviews by hand. Those are the sample bank's figures and the solution's estimates; your own will differ with your book.
15 · Every screen
Behind the comparison: the spread, the accounts, the grade, the draft, the book and your policy
In shortThe comparison is the front door; each section behind it holds the detail. The spread ties to the tax return; the account screen shows line usage, overdrafts, collateral and guarantors; the grade screen sets seven factors side by side with the regulatory definition; the draft writes only what moved; the book and portfolio show the whole bank; settings hold your credit policy.
The run log. Each agent's step, what it found, and its time: 1 minute 52 seconds for 31 documents.
Challenge a line. The approved value, the new one, and the analyst's reason, sent to the agent that produced it.
The spread and the tax tie-out. Four periods in the bank's template, revenue tied to the 1120-S within 0.2%, and the add-backs claimed against the $150,000 allowed.
Account, collateral and guarantors. Line usage by month-end, overdrafts, payments, global coverage and the facilities.
The worksheet behind a number. Global cash flow a year ago and now, opened from the line it supports.
Signed and approved. The analyst's signature and the senior credit officer's approval, each with its time.
Risk grade scorecard. Seven factors then and now, each with its reason and source, the regulatory definition of the proposed grade, and the scale.
The drafted review. Written from the judged comparison with 16 citations, beside the decision and the six actions it sets off.
The review book. Every review due by week, colored by risk, ranked riskiest first with the signals behind each rank.
Portfolio. Grades as approved and as this quarter's reviews propose them, overdue reviews over time, and grade migration.
Your credit policy. Review frequency, drafting lead time and the early-warning thresholds, versioned and on the audit trail.
Select any screen to open it larger. The bank, borrowers, people and figures are fictional.
Overdue annual reviews falling across the sample bank
At the sample bank, overdue annual reviews climbed from 31 in April to 38 at the end of July. Once the agents began drafting each review 30 days before it was due, as soon as the statements were in, the count fell to 9 by October. The chief credit officer also sees criticized commitments as the quarter's reviews propose them: $113.6 million in grades 6 to 9 with the proposals, 6.2% of commitments, against $96.2 million as approved.
Overdue reviews fell from 38 to 9 once drafting started 30 days before each due date
Overdue annual reviews at the fictional bank, month-end
02040609
AprMayJunJulAugSepOct
Fictional example from this guide
Show the numbers
Overdue annual reviews
Apr
31
May
34
Jun
37
Jul
38
Aug
24
Sep
14
Oct
9
Grade migration this quarter
Last approved grade
Up
Held
Down one
Down two
2 · Strong
0
6
1
0
3 · Satisfactory
0
17
2
0
4 · Acceptable
1
15
2
1 (Ostley)
5 · Watch
2
8
2
0
6 · Special mention
1
3
1
0
Sample bank, reviews completed or drafted since October 1: 62 relationships starting in grades 2 to 6, nine downgrades and four upgrades. One double downgrade is the kind of move the OCC asks banks to track.1
16 · Agents, and who signs
Six agents gather, spread, test and draft. The analyst decides, and a second officer approves any grade change.
In shortEach agent has one job and limits it does not cross. None of them sets a grade, waives a covenant, releases or revalues collateral, or changes a reported figure. The credit analyst confirms or challenges every line that moved and signs the review. A grade change or covenant exception needs the senior credit officer; grade 7 or worse also goes to the chief credit officer.
Six agents, from statement collector to grade recommender
Statement and document collector
Finds every statement, return, certificate, borrowing base and guarantor statement a relationship owes, checks each against the agreement's reporting clause, and asks the relationship manager for what is missing or late.
Never marks a requirement met without the document; cites the clause for every request.
Financial spreader
Spreads statements and interims into the bank's template, ties revenue to the tax return's gross receipts, and keeps the borrower's add-backs on their own lines.
Never alters a reported figure; applies only the add-backs the agreement allows.
Covenant tester
Recomputes every covenant by the agreement's definitions and amendments, compares the result with the compliance certificate and explains each difference.
Never waives a covenant or uses the borrower's definition; flags near misses within the bank's margin.
Account and collateral monitor
Reads twelve months of payments, overdrafts, line usage and borrowing base, and the appraisals, insurance and UCC filings behind the collateral.
Never releases or revalues collateral.
Guarantor analyst
Reads the guarantors' personal statements and returns for liquidity and contingent liabilities, and works out global cash flow and global debt service coverage.
Never counts an asset it cannot see on a statement.
Review writer and grade recommender
Starts from the last approved review, writes what changed with each source cited, scores the grading model's seven factors, proposes the grade and the actions, and says why it is that grade and what would move it.
Never sets a grade; a grade change always goes to a second approver.
The analyst signs; a second officer approves any grade change
Decides and signsCredit analystConfirms or challenges each moved line, edits the recommendation, signs with the meaning "Reviewed and agreed" and the time.
Second approverSenior credit officerApproves any grade change or covenant exception, seeing every changed line, the scorecard and what would move the grade again.
Worst gradesChief credit officerAlso approves grade 7 or worse; sees grades approved and proposed across the book.
Every agent step, challenge, signature and approval is recorded with who, what and when. Changes to the review rules are versioned. No review is signed with a required document missing unless the exception is recorded. Every morning at 6:00 am the agents screen the whole book and re-rank the queue.
The credit team behind the Ostley review screens
Fictional, from the sample data
EM
Elena Marsh · senior credit analyst
74 relationships, $286 million; 21 annual reviews due by December 31.
"I spend two days assembling a review and an hour thinking about it."
RA
Ruth Adeyemi · senior credit officer
Approves every grade change and covenant exception.
"Show me why it moved, and what would move it again."
JW
Joanne Whitley · credit administration manager
Runs the review calendar; owned a 38-review backlog in July.
"Nine overdue is nine findings waiting to happen."
VH
Victor Hale · chief credit officer
Owns the grades the board and the examiners see, across 612 relationships.
"A stale grade is worse than a bad one. I can't manage what I can't see."
MB
Marcus Brayford · relationship manager
Ostley Precision and Pruett Mechanical; delivers the waiver letter once Ruth approves.
"Tell me before the borrower does."
17 · What goes in and out
A year of borrower documents in; a signed review, a grade decision and the follow-up actions out
In shortIt reads what borrowers already send and what the bank already holds, writes into the bank's own review template and grading model, and leaves behind a comparison with every change since approval, a signed review, a grade with its reasons, and the letters and tasks that follow. The systems of record stay where they are.
From the borrower
Year-end statements and interims
Business returns: 1120, 1120-S, 1065
Compliance and borrowing base certificates
Guarantors' personal statements and 1040s
Insurance certificates
From the bank
Last approval memo and prior reviews
Credit agreements and amendments
Payment, overdraft and line-usage history
Appraisals, evaluations and UCC filings
Your grading model, review template and policy
Agents gather, spread, test and draftEvery relationship, re-underwritten against its last approval, under your credit policy
The analyst signs each review
A second officer approves grade changes
Outputs
Year-over-year comparison with every change since approval
Covenant results by the agreement, beside the certificate
Global cash flow and coverage, a year ago and now
Drafted review that writes only what moved, with citations
Grade confirmed or changed, with reasons and what would move it
Queue ranked by risk, with the time each review will take
Actions it prepares
Reservation-of-rights and waiver letters
Requests for late statements and certificates
UCC continuations and insurance requests
New review frequency on approval
Core banking, loan agreements, UCC searches and other feeds
Core bankingPayments, overdrafts and line usage
Loan origination or credit systemApprovals, grades, the review record
Borrower portalStatements and certificates as they arrive
Loan agreementsCovenant definitions and reporting clauses
UCC searchFinancing statements and lapse dates
Identity and accessRoles, approval limits, separation of duties
ReportingBoard packs, migration and overdue reports
Every figure paged, every covenant read by the agreement
1
Every number carries its page
Each line of the comparison, each cell of the spread and each sentence of the review links to its statement, return, certificate or clause.
2
Covenants by the agreement
Computed by the credit agreement's definitions and amendments, with the clause shown, then compared with the borrower's certificate.
3
Agents propose; people decide
The analyst signs; a second officer approves any grade change or exception; every step is on the audit trail.
Part C · Are you ready to automate?
What overdue reviews and late downgrades should tell you about automating annual reviews
You write annual reviews, or manage the people who do, or answer to the board and the examiners for the grades they produce. This part is written for you: what late reviews and stale grades cost today, what automating the assembly could return, whether your team is ready, and what to ask any vendor of annual review software, including us.
18 · What late reviews and stale grades cost
What hand-assembled annual reviews cost you in analyst hours, overdue files and late downgrades
In shortStart from your own costs. No regulator or study publishes hours per annual review, the share of reviews that run late, or how often a grade moves at review, so the numbers that matter are yours. A few published figures frame them: what an analyst hour costs, how loan quality is trending at banks like yours, and one vendor's estimate of review time.
$57/hr
a credit analyst's median pay, $83,510 a year, loaded for benefits at the 70% wage share of private employers' costs.28,29
BLS 2025 wage data via O*NET, June 2026 compensation costs · our arithmetic
2 days
for one commercial relationship review by hand, and a week for a complex borrower, by one lending-software vendor's estimate.30
Vendor-reported, September 2026
1.25%
of community banks' C&I loans were noncurrent at June 30, 2026, against 0.96% across all insured institutions.26
FDIC Quarterly Banking Profile, Q2 2026
The hours are in gathering, spreading and writing, which is what software can take
Estimated analyst hours for one ordinary relationship review, by step
By hand (estimate)With automation (design target)
Chasing statements and certificates3 h0.25 h
Spreading and tying to the tax return4 h0.25 h
Re-testing covenants by the agreement2 h0.25 h
Accounts, collateral and guarantors3 h0.5 h
Writing the review and the grade4 h0.75 h
Illustrative · replace with your own numbers · The solution's own estimate and design target, about 16 hours against about 2. Neither is a measurement of your reviews; time ten of your own.
Show the numbers
By hand (estimate)
With automation (design target)
Chasing statements and certificates
3 h
0.25 h
Spreading and tying to the tax return
4 h
0.25 h
Re-testing covenants by the agreement
2 h
0.25 h
Accounts, collateral and guarantors
3 h
0.5 h
Writing the review and the grade
4 h
0.75 h
What nobody publishes. We found no public figure for hours per annual review, the share of reviews completed late, the share of grades that move at review, or the months between a borrower's first warning sign and its downgrade. Vendor figures for these come without a dataset. Measure your own.
Measuring your review backlog and analyst hours in a week
Time ten reviews by step, five stable and five that moved
Overdue reviews
The tickler report nobody reads at month-end
Count reviews past due at each of the last six month-ends
Stale documents
Reviews signed on last year's statements or old borrowing bases
Pull twenty signed reviews; record the age of each document used
Late downgrades
Double downgrades and grades moved by loan review or examiners
Count last year's two-notch moves and grades changed by someone other than the line
Missed covenant breaches
Certificates accepted without recomputing
Recompute ten recent certificates by the agreement
Housekeeping
Lapsed insurance, UCC filings near lapse, old appraisals
Run your exception report; count items older than 60 days
Late breaches, stale grades and exam findings the hours miss
The breach found a year lateA waiver negotiated in October brings a fee, tighter reporting and a reset covenant. A year later the leverage may be gone.
The reserve that moved too lateGrades feed loss estimates; a stale grade understates them until it moves.
The exam findingThe OCC's lending booklet asks examiners to check whether annual reviews are completed on time; a backlog is easy for them to find.3
The relationship surprisedA borrower told about a breach in month one can plan; one told in month twelve feels ambushed.
Your best analysts' weeksWeeks go to copying numbers between documents while the loans that moved wait for a reader.
19 · Your return
What automating annual review assembly could return for your credit team
In shortPut in your own numbers. The calculator starts from a published analyst wage and asks you for the rest: how many reviews you do a year, the hours they take now, the hours you expect after, and what the tool and your testing cost. Every default marked illustrative is an assumption to replace.
Drafting starts when the statements arrive, ahead of the due date.
reviews overdue at month-end, before and after
Earlier action
Downgrades in the right quarter
Riskiest-first order and nightly signals move the slipping borrowers to the front.
months from first signal to grade change, before and after
Covenants
Every certificate recomputed
Each test by the agreement's definitions, every quarter, with the clause shown.
breaches found ÷ certificates tested, by the agreement and by the certificate
Exams
Evidence ready to hand
Every figure's page, every challenge, signature and approval, for loan review and examiners.
hours spent assembling support for an exam or loan review
Annual reviews a year times hours saved per review
Only the hourly cost is built from published figures: the BLS median wage for credit analysts, $83,510 (2025, as published on O*NET), divided by 2,080 hours and by the 70% wage share of private employers' costs.28,29 Every input marked illustrative is an assumption.
Your volumeHours per reviewYour cost
Illustrative yearly value
Review time today, valued$0
Analyst time released, valued$0
After your yearly cost$0
Analyst hours released a year0
Analyst working weeks released (40 hours)0
Reviews a year to cover your cost0
Formulas, per year: Review time today = reviews × hours today × hourly cost Time released = reviews × (hours today − hours with automation) × hourly cost After your cost = time released − yearly cost Working weeks = hours released ÷ 40 Break-even reviews = yearly cost ÷ (hours saved × hourly cost); a very large number means the hours saved never cover the cost
Count quarterly reviews of criticized loans and semiannual reviews of large ones as well as annual reviews. Not counted: earlier downgrades, breaches found, exam preparation and the borrower relationship. Released hours are value only when you decide what they are for: more relationships per analyst, deeper work on the loans that moved, or fewer reviews outsourced.
Hours saved per review decide how many reviews pay for the tool
Reviews a year to cover $150,000 of yearly cost, at $57 an analyst hour
Saves 14 hours a review188 reviews
Saves 8 hours a review329 reviews
Saves 4 hours a review658 reviews
Illustrative · replace with your own numbers
Show the numbers
Hours saved
Reviews a year
Saves 14 hours a review
188 reviews
Saves 8 hours a review
329 reviews
Saves 4 hours a review
658 reviews
A bank doing 600 reviews a year clears the first two lines on this chart; at 4 hours saved it would need about 660. A bank with 60 relationships, most of them stable, clears none of them; for that bank, the honest answer from this calculator is to wait.
Start here20 · Readiness check
Overdue reviews, grading policy and a budget owner: scoring your credit team before annual review automation
In shortPick the answer closest to your team today. Eight questions score 0 to 2; the last is for reflection. The meter adds up your score as you go, and each question says why it matters and what a strong answer sounds like.
1
Volume
How many annual, semiannual and quarterly reviews does your team complete in a year?
Why it mattersVolume turns hours per review into analyst capacity. Quarterly reviews of criticized loans count too.
A strong answer"About 650: 540 annual reviews, 80 quarterly reviews on criticized loans, the rest semiannual."
2
Timeliness
How many reviews were overdue at each of the last six month-ends?
Why it mattersExaminers ask whether annual reviews are completed "in a timely manner".3 A backlog is the clearest case for change, and the easiest to measure.
A strong answer"Between 25 and 40, peaking in the summer, with the reasons for each."
3
Your baseline
Do you know your hours per review, split between stable credits and ones that moved?
Why it mattersNo public benchmark exists, so your own baseline is the only way to prove an improvement.
A strong answer"About 12 hours for a stable relationship and 20 for one that moved, from timing ten reviews last quarter."
4
Policy and grading model
Are review frequency, early-warning thresholds and the grading scale written down and applied the same way by every analyst?
Why it mattersSoftware applies your policy. A policy that lives in people's heads has to be written first.
A strong answer"A written frequency policy, a scorecard with weights, and the regulatory definitions mapped to our scale."
5
Findings
Have examiners or loan review found late reviews, stale statements or grades that should have moved sooner in the last two years?
Why it mattersFindings bring deadlines and budgets. The OCC's 2026 booklet lists stale statements and covenant breaches as exceptions to track.3
A strong answer"Loan review downgraded six credits last year that our annual reviews had left at pass."
6
Files and systems
Can software reach the credit files, the loan agreements, the borrower portal and twelve months of account history?
Why it mattersThe annual review draws on five sources. Scanned files work but take longer to set up than systems with an API or a file feed.
A strong answer"Documents in one system with an API; core banking exports usage and overdrafts nightly."
7
Owner and budget
Is there a named owner of the annual review process with a budget to change how it is done?
Why it mattersReviews cross credit administration, relationship managers, analysts, credit officers and IT. Without one owner the change stalls.
A strong answer"The chief credit officer sponsors it, and the credit administration manager runs it."
8
Governance
Do you have a way to approve AI in credit work: vendor due diligence, a view on SR 26-2, named sign-offs and an audit trail?
Why it mattersThe 2026 model guidance leaves generative AI to your own framework, and third-party guidance keeps the responsibility with you.8,13
A strong answer"Vendor management and model risk have a path for AI tools, and every grade change needs two named people."
9
Vision · for reflection
If every relationship opened each morning with this year's numbers already beside last year's approval, which of your loans would you look at first, and what would you do with the hours?
Why it mattersYour answer shows where the value is: earlier downgrades, more relationships per analyst, or deeper work on the weakest loans.
A strong answerA short, specific list, for example: "the eight relationships with lines above 85%, and quarterly reviews on every special mention loan instead of every other one."
Low scores start by timing ten annual reviews
0–6
Explore
Build the baseline first: time ten reviews, count overdue reviews at month-end, write down the frequency policy and the grading scale, and name an owner. Start narrow, for example with covenant recomputation on every certificate.
7–11
Ready to pilot
Run a measured pilot on 40 to 60 relationships due in the next two quarters. Compare analyst minutes, documents found, covenant results and proposed grades with your current process, and keep your people signing every review.
12–16
Ready to implement
Plan the whole review book: your policy and grading model as settings, approval limits, links to core banking, the document system and the borrower portal, board reporting, and the evidence loan review and examiners will ask for.
21 · Questions for any vendor
Eighteen vendor questions on covenant definitions, grade decisions and annual review evidence
In shortAsk every vendor the same questions, us included. The answers show how each product builds the review: what it reads, whose covenant definitions it applies, who decides the grade, what evidence you keep, how it fits your policy, and how you would measure it on your own relationships.
Ask
A good answer
A warning sign
What it reads
Which documents does it read for a review, and how does it know what each borrower owes?
Statements, returns, certificates, guarantor statements, agreements and amendments; deadlines read from each agreement
"Upload the statements and we spread them"
Does it use the bank's own account data: payments, overdrafts, line usage?
Yes, twelve months from core banking, by month-end
Only what the borrower sends
Does it tie the statements to the tax return?
Yes, with a tolerance you set and both pages shown
Each document read on its own
Covenants and cash flow
Whose definitions does it use to test covenants?
The agreement's and its amendments', with the clause shown beside the result
The figures on the compliance certificate
What does it do when the certificate and the agreement disagree?
Shows both calculations and explains the difference line by line
Reports one number
How does it build global cash flow and handle guarantors' new debts?
Your method, counted once, from statements it can show; contingent liabilities included
Guarantor figures carried from last year
The grade
Who sets the grade?
The analyst; the software proposes with reasons and what would move it; a second approver for changes
"The model assigns the grade"
Does it use our scale, our scorecard and the regulatory definitions?
Your 1-to-N scale and weights, mapped to special mention, substandard, doubtful and loss
A fixed vendor scale
Can the analyst challenge a figure, and what happens?
The figure is rechecked against its source and the answer kept on the record
The analyst edits the number directly
Evidence
Can loan review open the page behind any number in the review?
One click from each figure and each sentence
A list of attachments
What does the audit trail record?
Every step, challenge, edit, signature and approval, with name, meaning and time
The final PDF only
How are settings changes recorded?
Versioned, with who changed what and when
Admin screen with no history
Your policy and systems
Can we set frequency by grade and size, early-warning thresholds and approval routes?
Yes, as settings in plain words
A change request to the vendor
Where does the signed review go?
Into your credit system and document store through your normal process
It lives only in the vendor's tool
How does it scale to our whole book, and to peak season?
The whole book screened nightly; reviews drafted ahead of due dates
Reviews processed one at a time on request
Proof
Will you run it on our relationships before we sign?
Yes, on a sample you choose, with your people judging
Demos on vendor data only
How do you measure accuracy on covenants and spreads?
Against your recomputed certificates and figures checked to their pages
A single accuracy percentage with no test set
What due diligence material can you give our vendor management?
Security, data handling, model governance and subcontractor details
"We're compliant"
We found no published independent test of any annual review vendor's accuracy, as of October 2026. A test on your own relationships, with certificates you have recomputed by hand, is the fairest comparison, and the same test measures your current process.
22 · How to start
How to start: a twelve-week annual review pilot your credit committee can judge
In shortMeasure first, then run the software beside your analysts on reviews that fall due during the pilot, then decide with four numbers. None of these steps commits you to a vendor.
Time ten reviews, five stable and five that moved, by step, and count overdue reviews at the last six month-ends. That is your baseline.
Pull last year's evidence: grades changed by loan review or examiners, double downgrades, and covenant breaches found late.
Pick 40 to 60 relationships due in the next two quarters, with your policy, scorecard and review template. Recompute ten recent certificates by hand as a test set.
Run in parallel for six weeks, with your analysts judging and signing every review.
Decide with four numbers: analyst minutes to a signed review, covenant results that match your hand recomputation, proposed grades your officers accepted, and overdue reviews at month-end.
A twelve-week pilot ends with a decision on four numbers
Your teamVendor
Time ten reviews; count overdue
Choose relationships; recompute ten certificates
Load policy, scorecard, template
Connect documents and account history
Parallel run on reviews due
Score minutes, covenants, grades, overdue
Week 04812
Illustrative · replace with your own numbers
Show the numbers
Activity
From
To
Time ten reviews; count overdue
0
2
Choose relationships; recompute ten certificates
1
4
Load policy, scorecard, template
2
5
Connect documents and account history
2
5
Parallel run on reviews due
5
11
Score minutes, covenants, grades, overdue
10
12
Analyst minutes, covenant matches and grades accepted in the pilot
Measure
How
Why
Analyst minutes
Stopwatch from opening a review to signing it, stable and moved separately
The cost case rests on it
Covenant agreement
Software results against your hand recomputation by the agreement
The most expensive error to miss
Figures to source
200 random figures checked against their pages
Shows whether the numbers can be trusted at a glance
Grades accepted
Proposed grades your officers approved unchanged, and why the others changed
Shows whether the reasoning matches your policy
Overdue at month-end
From the tickler, before and during the pilot
The examiner's first question
Signals found early
Relationships flagged by the nightly screen before their due date
Earlier action is the value no timesheet shows
The full working-session questions: 18 questions in six groups
A
How many reviews, which by exception, who signs
A1
How many reviews do we do a year, split by annual, semiannual, quarterly and interim?
Why it mattersQuarterly reviews of criticized loans repeat the work four times.
Strong answer · warning sign
Counts by type from the tickler.
One number, nobody sure of the mix.
A2
Which relationships would we keep on review by exception?
Why it mattersThe OCC allows smaller performing credits to be "reviewed as exceptions".1
Strong answer · warning sign
A written size floor and a trigger list.
"We review everything the same way."
A3
Who signs, and who approves a grade change or exception?
Why it mattersApproval routes become settings.
Strong answer · warning sign
Named roles by grade and exposure.
"It depends who is in."
B
Written review frequency, scorecard and breach path
B1
Is our frequency policy written, and does it name triggers for an interim review?
Why it mattersRatings should move "whenever relevant new information is received".1
Strong answer · warning sign
Frequency by grade and size, plus signals.
Anniversary only.
B2
Does our scorecard have weights, and is each grade mapped to the regulatory definitions?
Why it mattersConsistency between analysts, and a defensible grade.
Strong answer · warning sign
Weights, factors and mapping on paper.
Grades by feel.
B3
What do we do when a certificate shows a pass and our recomputation shows a breach?
Why it mattersWaived breaches still count as exceptions.3
Strong answer · warning sign
A written path: reservation of rights, waiver, grade review.
What did loan review or examiners say about our annual reviews in the last two years?
Why it mattersFindings show where the process breaks.
Strong answer · warning sign
A list, with root causes.
"Nothing material."
C2
Recompute ten recent compliance certificates by the agreement: how many differ?
Why it mattersThe cheapest way to size the covenant risk.
Strong answer · warning sign
Done, with the differences explained.
Never tried.
C3
How many loans fell two grades in one review last year?
Why it mattersThe OCC asks banks to track "double downgrades".1
Strong answer · warning sign
A number, and why each was late.
Not tracked.
D
Where agreements, line usage and lapse dates live
D1
Where do agreements and amendments live, and can software read them?
Why it mattersCovenant definitions come from them.
Strong answer · warning sign
One document system, searchable.
Paper in the vault.
D2
Can core banking give month-end line usage and overdrafts for twelve months?
Why it mattersIt is the bank's own record of how the borrower behaved.
Strong answer · warning sign
A nightly or monthly file.
Screen prints.
D3
How do we track insurance expiry, UCC lapse dates and appraisal age?
Why it mattersA lapsed filing becomes unperfected.17
Strong answer · warning sign
An exception report reviewed monthly.
Found at review, if at all.
E
Model risk, vendor checks and who funds the review pilot
E1
Has our model risk policy been updated from SR 11-7 to SR 26-2?
Why it mattersThe old letter was replaced on April 17, 2026.8
Strong answer · warning sign
Updated, with a path for AI tools.
Still citing SR 11-7.
E2
What does vendor management need before a pilot sees real borrower data?
Why it mattersDue diligence stays with the bank.13
Strong answer · warning sign
A checklist and a timeline.
Unknown until asked.
E3
Who sponsors the change, and what budget can move?
Why it mattersA pilot without a sponsor ends as a demonstration.
Strong answer · warning sign
The chief credit officer, with a named budget line.
"IT will look at it."
F
Reviews drafted early, covenants tested every quarter
F1
What if every review were drafted the week its statements arrived?
Why it mattersTests the appetite for reviews ahead of the due date.
Strong answer · warning sign
"Then we'd review criticized loans more often."
"Then we'd wait for the due date anyway."
F2
What if every certificate were recomputed by the agreement each quarter?
Why it mattersMoves covenant checks from annual to continuous.
Strong answer · warning sign
A plan for what happens on a breach.
No owner for the answer.
F3
Which steps would we never let software do without a person?
Why it mattersTells you where the signatures belong.
Strong answer · warning sign
"Grade, waiver, and the conversation with the borrower."
"None" or "all of them".
23 · Frequently asked questions
From review frequency to Regulation B: fourteen annual credit review questions with short answers
In shortThe questions credit teams and buyers search for most, each answered on its own.
What is an annual credit review?
An annual credit review is a bank's yearly re-underwriting of a business borrower: new statements and tax returns are spread, every covenant is re-tested by the loan agreement, account behavior, collateral and guarantors are checked again, and the analyst confirms or changes the risk grade. A senior officer approves any change. The OCC expects every credit to receive "a formal review at least annually".
How often should commercial loans be reviewed?
At least once a year, and more often for large, new, complex, higher-risk and problem credits, according to the OCC's Rating Credit Risk booklet. Smaller performing loans may be reviewed by exception. A bank's policy might review special mention and classified loans quarterly and its largest relationships twice a year.
What is included in an annual review of a commercial loan?
The last approval, new year-end and interim statements, the business tax return, compliance and borrowing base certificates, twelve months of payments, overdrafts and line usage, collateral values, insurance and UCC filings, and the guarantors' statements and returns. The review compares each with last year's approval and ends in a grade decision and a list of actions.
What is the difference between an annual credit review and loan review?
The annual credit review is the lending side re-underwriting its own loans and proposing grades. Loan review, or credit risk review, is an independent function that tests a sample of those grades and reports to the board, under the 2020 interagency guidance. When they disagree, the lower grade usually prevails unless the line brings new information.
What is the difference between special mention and substandard?
Special mention means potential weaknesses that deserve management's close attention and could worsen repayment prospects if left uncorrected. Substandard means the loan is inadequately protected by the borrower's sound worth and paying capacity or the collateral, with a well-defined weakness that jeopardizes repayment. Special mention loans are criticized; substandard, doubtful and loss loans are classified.
How do you test covenant compliance at an annual review?
Recompute each covenant from the loan agreement's own definitions and amendments using the latest statements, then compare the result with the borrower's compliance certificate and explain any difference. Add-backs to EBITDA are the usual source of differences. Record breaches even when they are waived, because the OCC treats them as financial exceptions.
What is a compliance certificate in commercial lending?
A compliance certificate is a form signed by a borrower's officer, usually each quarter or year, that reports the financial covenant calculations and states whether each test passed. It is the borrower's own calculation. The bank should recompute it by the agreement's definitions before relying on it.
What is global debt service coverage?
Global debt service coverage combines the cash flow of the business and its guarantors and divides it by all of their debt payments, counting each dollar once. The 2023 interagency workout statement describes it as including both borrower and guarantor cash flows and their combined obligations, including contingent ones. Each bank sets its own minimum in its credit policy; the fictional bank in this guide uses 1.15x.
What is a stale financial statement exception?
A stale financial statement exception is a credit administration exception recorded when the statements, tax returns or borrowing base certificates in a loan file are older than the bank's policy or the loan agreement allows. The OCC's 2026 lending booklet lists stale financial statements among its examples of credit administration exceptions. A review written on stale documents meets the calendar and misses the borrower's current condition.
What happens if annual reviews are overdue?
Grades stay where they were while borrowers change, so problems are found late and loss estimates lag. Examiners ask whether annual reviews are completed in a timely manner and expect management to see reports of reviews coming due and late. A persistent backlog is likely to become an examination finding on credit administration.
How long does an annual credit review take?
No regulator or study publishes a figure. One lending-software vendor estimates about two days for an ordinary commercial relationship and a week for a complex one. The time depends on how many entities and guarantors are involved and how much changed, so the best number is your own, timed over ten reviews.
Can AI write annual credit reviews?
AI can gather documents, spread statements, recompute covenants by the agreement and draft the comparison and the review, with every figure linked to its source. The grade, any waiver and the conversation with the borrower stay with named people, and a second officer should approve any grade change. Banks should test accuracy on their own files before relying on it.
Is annual review software a model under SR 26-2?
Mostly not. SR 26-2, issued April 17, 2026 to replace SR 11-7, excludes simple arithmetic and deterministic rule-based software from its definition of a model and places generative and agentic AI outside its scope. A scorecard that drives grades may still fall under a bank's own model policy, and vendor oversight follows the third-party guidance.
Is a reduced credit line at annual review adverse action under Regulation B?
It can be. Regulation B treats a termination or unfavorable change in the terms of an account as adverse action, unless it affects all or substantially all of a class of accounts or is taken because of inactivity, default or delinquency. For business applicants with revenue over $1 million, notice may be given orally or in writing within a reasonable time.
24 · One-page summary
Track, spread, re-test, compare, sign: the annual review checklist on one page
Print this page
In shortThe whole guide on one screen: the method, the rules as of October 2026, the readiness bands and the terms.
The method
Track what each borrower owes and when; chase late items before the review starts.
Spread the new statements and tie them to the tax return.
Recompute every covenant by the agreement's definitions; compare with the certificate.
Read twelve months of account behavior, collateral, insurance and UCC dates.
Rebuild global cash flow with current guarantor statements, counted once.
Compare everything with the last approval; write what moved; propose a grade with reasons and what would move it.
Sign; a second officer approves any grade change or exception; set the next review date.
Readiness: score 0–2 on eight questions: 0–6 explore · 7–11 pilot · 12–16 implement.
As of October 2026: OCC Rating Credit Risk current (formal review at least annually) · OCC Lending and Loan Portfolio Risk Management issued June 25, 2026 · 2020 credit risk review guidance in force · SR 26-2 replaced SR 11-7 on April 17, 2026 · third-party guidance replacement proposed September 11, 2026, comments to November 16.
14 terms
Annual credit review
The lending side's yearly re-underwriting of a relationship, ending in a grade decision.
Loan review
Credit risk review: an independent team that tests a sample of grades and reports to the board.
Risk grade
The bank's number for how likely a loan is to be repaid as agreed.
Pass
Grades with no regulatory criticism, often 1 to 5.
Special mention
Potential weaknesses that deserve management's close attention.
Substandard
A well-defined weakness; inadequately protected by the borrower or the collateral.
Doubtful · loss
Collection in full improbable; uncollectible.
Covenant
A promise in the loan agreement, financial or about reporting.
Compliance certificate
The borrower's signed covenant calculations.
Add-back
A cost the borrower adds back to earnings; the agreement decides how much counts.
Fixed charge coverage
Cash available for fixed charges ÷ those charges.
Global cash flow
Business and guarantors combined, against all their debt payments.
Tickler
The system that tracks what each borrower owes and when each review is due.
Rating migration
How loans move between grades from one period to the next.
25 · Sources
Sources
Accessed October 2026. Regulatory status statements are as of October 2026.
OCC, Comptroller's Handbook, Rating Credit Risk, April 2001, updated June 2017 and March 2025. occ.gov
Federal Reserve, Commercial Bank Examination Manual, section 2010.1, Loan Portfolio Management (November 2020 pages). federalreserve.gov
OCC, Comptroller's Handbook, Lending and Loan Portfolio Risk Management, Version 1.0, July 2026. occ.gov
Business loan agreement of a community bank, June 14, 2018, filed with the SEC as Exhibit 10.1 (reporting covenants and EBITDA definition). sec.gov
OCC, Federal Reserve, FDIC and NCUA, "Interagency Guidance on Credit Risk Review Systems", 85 FR 33278, June 1, 2020. govinfo.gov
W. Treacy and M. Carey, "Credit Risk Rating at Large U.S. Banks", Federal Reserve Bulletin, November 1998. federalreserve.gov
OCC Bulletin 2026-29, "Credit Risk: 'Lending and Loan Portfolio Risk Management' Booklet of the Comptroller's Handbook and Rescissions", June 25, 2026. occ.gov
Federal Reserve, SR 26-2, "Revised Guidance on Model Risk Management", April 17, 2026. federalreserve.gov
OCC, Federal Reserve, FDIC and NCUA, "Proposed Third-Party Risk Management Guidance", 91 FR 58536, September 15, 2026 (comments due November 16, 2026), announced September 11, 2026. occ.treas.gov · ncua.gov
12 CFR Part 30, Appendix A, Interagency Guidelines Establishing Standards for Safety and Soundness. ecfr.gov
"Policy Statement on Prudent Commercial Real Estate Loan Accommodations and Workouts", 88 FR 43115, July 6, 2023. federalregister.gov
"Interagency Guidance on Third-Party Relationships: Risk Management", 88 FR 37920, June 9, 2023. federalregister.gov
Mayer Brown, "CFPB Issues Final Section 1071 Rule on Small Business Lending Data Collection", May 2026. mayerbrown.com
Colorado General Assembly, SB26-189, Automated Decision-Making Technology, signed May 14, 2026. leg.colorado.gov
G. Chodorow-Reich, O. Darmouni, S. Luck and M. Plosser, "Bank Liquidity Provision across the Firm Size Distribution", NBER Working Paper 27945, October 2020, revised December 2020 (Federal Reserve Y-14 data: loans over $1 million at banks with more than $100 billion of assets). nber.org
Uniform Commercial Code, section 9-515, Duration and Effectiveness of Financing Statement. law.cornell.edu
OCC, bank appeal summary, Shared National Credit, third-quarter 2024 examination (substandard rating upheld). occ.gov
FDIC Office of Inspector General, "Material Loss Review of First NBC Bank, New Orleans, Louisiana", AUD-18-002, November 2017. fdicoig.gov
FDIC, RMS Manual of Examination Policies, Section 3.2, Loans. fdic.gov
G. Nini, D. Smith and A. Sufi, "Creditor Control Rights, Corporate Governance, and Firm Value", Review of Financial Studies 25(6), 2012, with figures as summarized in "Lenders in Charge", University of Chicago, March 1, 2011. chicagobooth.edu
Federal Reserve Bank of St. Louis, FRED, Commercial and Industrial Loans, All Commercial Banks (BUSLOANS), from the Federal Reserve H.8 release, through September 2026. fred.stlouisfed.org
FDIC, Quarterly Banking Profile, Second Quarter 2026 (data as of June 30, 2026). fdic.gov
Federal Reserve, FDIC and OCC, "Agencies issue 2025 Shared National Credit Program report", January 12, 2026. federalreserve.gov
O*NET OnLine (U.S. Department of Labor), Credit Analysts, 13-2041.00: median wages (2025) and employment, from Bureau of Labor Statistics wage data. onetonline.org
U.S. Bureau of Labor Statistics, "Employer Costs for Employee Compensation – June 2026", USDL-26-1494, September 9, 2026 (archived copy on FRASER). fraser.stlouisfed.org
nCino (software vendor), "Commercial relationship reviews in two days", blog, September 10, 2026. Vendor-reported figures. ncino.com
OCC, Semiannual Risk Perspective, Spring 2026. occ.gov
U.S. Department of the Treasury, "Artificial Intelligence in Financial Services", December 2024. home.treasury.gov
Crisil Integral IQ (service provider), case study on the credit review process of a US community bank, August 29, 2025. Vendor-reported. integraliq.crisil.com
Next step
See it on your own annual reviews.
Explore the solution, or bring a few relationships due for review with your credit policy and grading scale, and we will re-underwrite them with you, every figure linked to its page.
We use essential cookies to make this site work, and cookieless, anonymised analytics to understand how it's used. "Accept all" also turns on Google Analytics, which sets cookies. Privacy policy