SystemLending Compliance & Fair Lending

Regulatory Change Management

Regulatory change management for lenders: every new rule scoped to your products and states, and owned the day it lands

Every new rule scoped to products and states, and owned the day it lands.

See one case, screen by screen ↓
demo7.2sto read a new Regulation Z rule, score it, map it to 5 policy sections and assign 5 owners
demo918itemsread in 30 days from 41 sources, every one with a verdict and a reason
demo5of 918items that needed a person; the rest were closed with a reason
targetSamedayfrom publication to scoped, owned tasks
In short

What is Regulatory Change Management?

Software that tracks new laws, rules, guidance and enforcement orders, decides which ones apply to your institution, and follows each one through to updated policies, procedures, systems and controls before its effective date. Regulatory Change Management adds agents that read every item, score it against your products and states, map it to policy sections and controls and assign owners, so the analyst’s time goes on the calls that need judgement.

How to choose AI solutions for lending →

Updated

The problem

Why a new rule sits “under review” until the week it takes effect

New laws, proposed rules, bulletins and enforcement orders arrive every week from several federal agencies and every state you lend in. Each one has to be read, matched to the products you sell and the states you sell them in, and turned into policy, procedure, system and training changes before its effective date. Most of them do not apply, but someone still has to read them all to find the few that do.

Today that runs on an alert email, a spreadsheet and a weekly meeting. The analyst matches each rule by hand to products, states and hundreds of policies and procedures. Ownership is negotiated by email, due dates are set late, and the evidence of the assessment lives in a spreadsheet, so when an examiner asks to see how a change was assessed and closed, the answer takes days.

typical≈217alerts a dayfor a typical financial services firm to sort through
typical1.9FTEspent by an average community bank absorbing one quarter’s regulatory changes
target1–3weeksfrom publication to scoped, owned tasks by email
Where a new rule’s days go, from publication to owned tasksestimated
By hand14 days
With the solution1 days
  • Reading the alert and deciding if it matters2 → 0.1 d
  • Scoping it to products and states3 → 0.1 d
  • Finding the policy sections and controls it touches3 → 0.2 d
  • Agreeing owners and due dates4 → 0.5 d
  • Updating the tracker and the board summary2 → 0.1 d

Estimated split for one rule that applies to several products, by email and spreadsheet and with the solution.

How it works

How a new rule moves

Seven agents read, score, map and assign every new rule; the regulatory change lead confirms the scope.

What comes in
Rules in41 sources · federal and 9 states
Agents at work
Feed readerwhat changed
Then
Applicability scorerproducts × states
Then
Impact mapper
Owner assigner
Deadline watcher
Then
Redline drafterpolicy wording
Board summary writer
A person decides
Regulatory change leadconfirms the scope
What comes out
Impact matrix
Owned tasks
Board summary
One case, step by step

One rule, from the Federal Register to owned tasks

Kestrel Bank lends in nine states across seven products. At 08:02 on Tuesday, October 13, the Federal Register publishes the Regulation Z 2027 annual threshold adjustments. Here is what happens next, screen by screen, in the working solution.

  1. 0108:02

    The morning, on one matrix

    Nadia Ferreira · Regulatory change lead

    Nadia opens the impact matrix: rules, laws and orders down the side, Kestrel’s seven products across the top. 8 open changes, 16 owned tasks, 2 at risk, and 3 items waiting for her call. Overnight the feed reader went through 38 items and none of them applied. A new item is at the top of the rail: Regulation Z, 2027 annual threshold adjustments, not read yet.

    Run log, 07:30: “Read 38 overnight items — 0 apply, 38 do not apply, each with a reason.”

  2. 02One click

    “Read 1 new item”, and the agents work in view

    Feed reader · Applicability scorer · Impact mapper

    The feed reader reads FR Doc. 2026-20417: a CFPB final rule, 6 pages, 14 dollar thresholds, effective January 1, 2027. The applicability scorer marks it applies: consumer credit, 6 of 7 products in scope, all 9 states. The impact mapper searches 312 policies and procedures and 486 controls and finds 5 policy sections and 5 controls. Auto loans: no change.

    Every step shows what it found and how long it took.

  3. 037.2 seconds later

    Five cells light up, each with an owner

    Owner assigner · Deadline watcher

    First mortgage, home equity loan, HELOC, credit card and personal loan light up on the Regulation Z row, each with the impact in a few words, the policy section, the owner and the date: HOEPA $28,268, QM tier $141,320, late fee $33/$44, exempt above $73,400. Owners come from the ownership map. The deadline watcher starts the clock: 80 days to January 1, a nudge on December 2, an escalation on December 18.

    “Owner assigner — 5 owners · From the ownership map · due Dec 11 (effective − 21 days)”

  4. 04One cell

    What changes, where, and who owns it

    Daniel Okoye · Mortgage compliance manager

    The first mortgage cell opens its impact: the high-cost (HOEPA) total loan amount threshold rises from $27,592 to $28,268 and the points-and-fees trigger from $1,380 to $1,414, with the rule text quoted. It touches MTG-POL-118 §3.2 of the High-Cost Mortgage Policy, control CTL-MTG-031 (the pre-closing high-cost test) and the high-cost test table in the loan origination system. Daniel Okoye owns it, due December 11, with three tasks.

  5. 05The rule

    The rule itself, with margin notes

    Nadia Ferreira · Regulatory change lead

    Nadia opens the rule as published. Each highlighted passage carries a margin note from the impact mapper: the product, the policy section, the old and new value and the owner. The rail shows the effective date, the scope (small business struck out as out of scope) and all five owners, due December 11.

    Auto loans, reviewed with no change: “Largest auto balance $68,450; all under the $73,400 exemption threshold.”

  6. 0608:14

    She confirms the scope, and signs

    Nadia Ferreira · Regulatory change lead

    Nadia confirms that the rule applies to 5 products in all 9 states, that auto loans need no change and small business loans are out of scope, and that the 5 owners are right. Her electronic signature records the meaning with it.

    “Signed as Nadia Ferreira, regulatory change lead. Meaning: scope reviewed and confirmed. The redlines go to their owners.”

  7. 07Confirmed

    Redlines out to five owners

    Nadia Ferreira · Regulatory change lead

    The rule shows “Scope confirmed · 08:14”. The five margin notes move to In progress, and each owner has a redline of their section waiting. The same rule went from the Federal Register to confirmed, owned work in twelve minutes.

  8. 08Redline

    The policy owner approves the wording

    Daniel Okoye · Mortgage compliance manager

    Daniel sees MTG-POL-118 §3.2 with the rule passage that drives it, the current text struck through and the proposed text with the 2027 values. Control CTL-MTG-031 is retested after the change goes live. He can approve, edit the wording or send it back to the redline drafter with a note.

    The redline drafter only drafts. Nothing is published until the policy owner approves.

  9. 09Every morning

    Every effective date on one runway

    Deadline watcher

    One lane per owner, each task a bar to its due date and each effective date a flag: 28 open tasks across 9 changes, 2 at risk, 0 overdue. The HELOC piece of the OCC reconsideration of value bulletin is at risk: the 30-day answer clock is not yet set up, so at 06:00 the deadline watcher escalated it to Victor Hale, 17 days before it takes effect.

  10. 10Quarter end

    The board summary, already written and cited

    Victor Hale · Chief Compliance Officer

    The Q4 change summary for the Risk Committee meeting on November 18 is drafted from the matrix: 9 open changes, 28 owned tasks, what takes effect this quarter, what is at risk and what the order against another lender means for Kestrel. Five sections and 14 citations, each line tied to its rule and task. Victor signs it before it goes into the committee pack.

Who it’s for

Built for everyone who owns a rule change.

The same rule changes, seen by five of the people who carry them — what their week looked like, and what it looks like now.

NF
Nadia FerreiraRegulatory change lead
Scope decider
Before
Reads 30–40 alerts a day, decides what applies, then chases owners. “I spend Monday deciding what applies and Friday chasing who owns it.”
Now
Starts from a scored feed and a lit matrix; decides only the “may apply” items and confirms each scope with one signature.
VH
Victor HaleChief Compliance Officer
Board reporting and escalations
Before
Assembles the quarterly change summary by hand. “The board asks one question: did we miss anything?”
Now
Gets a summary drafted from the matrix with every line cited, and escalations 14 days before an effective date while there is still time to act.
DO
Daniel OkoyeMortgage compliance manager
Policy owner
Before
Owns the high-cost and QM policies and the loan system’s test tables. “Tell me the section, the number and the date. I’ll change it.”
Now
Gets exactly that: the section, the old and new value, the control to retest and a due date 21 days before the effective date.
PD
Priya DesaiCard product lead
Policy owner
Before
Owns card pricing, fees and disclosures. “I hear about a fee change from the vendor before I hear it from us.”
Now
Sees the late-fee safe harbor change on her lane the morning it is published, with the fee table and agreement tasks already listed.
GK
Grace KimInternal audit
Internal audit
Before
Tests that every change was assessed and closed before its date. “Show me the trail from the rule to the closed task.”
Now
Reads every item’s verdict and reason, every scope signature and every closed task, and exports the trail.
Built on the engine

7 agents. Each with one job, and hard limits.

Seven agents read, score, map and assign every new rule; the regulatory change lead confirms the scope.

Feed reader

Reads the Federal Register, 9 state registers and legislatures, regulator bulletins and enforcement orders every 30 minutes, and extracts what changed, who issued it and when it takes effect.

  • Every item gets a verdict and a reason; nothing is dropped silently
  • Quotes are exact, with page and paragraph kept
Applicability scorer

Scores each item against the product and state footprint: applies, may apply or does not apply, with the reason in one sentence.

  • Never closes a “may apply” — the regulatory change lead decides
  • A sample of “does not apply” is re-read by a person each week
Impact mapper

Maps each applying change to the policy and procedure sections, controls, systems and forms it touches, quoting the rule passage and the policy passage side by side.

  • Read-only access to policies
  • Every mapping quotes both texts
Owner assigner

Assigns each lit cell to its owner from the ownership map, or the backup when the owner is away, and sets the due date 21 days before the effective date.

  • Never assigns outside the ownership map
Redline drafter

Drafts the smallest wording change that brings each affected policy or procedure section in line with the rule, showing old and new text in the house style.

  • Drafts only; the policy owner approves
Deadline watcher

Counts down every effective date and task due date each morning, nudges owners at 30 days and escalates open work to the Chief Compliance Officer at 14.

  • Cannot extend a date
Board summary writer

Keeps the quarterly change summary for the board’s risk committee current: open changes, what takes effect this quarter, what is at risk and what closed, every line cited.

  • Never sends — the Chief Compliance Officer signs
Regulatory change lead

Confirms the scope. The agents propose; a named person decides.

Ask in plain words

Ask about any rule, product or owner

Anyone on the compliance team can ask in plain words, or tell it what to change. Answers cite the rule and the task they rest on.

What changes for us in the new Regulation Z update?

Five products, one date: January 1, 2027. The high-cost (HOEPA) trigger moves to $28,268 and the points-and-fees trigger to $1,414, which touches first mortgages (MTG-POL-118 §3.2) and HELOCs (HE-PRO-061 §2.4). The QM 3 % tier starts at $141,320 for home equity loans; the card late-fee safe harbor becomes $33 / $44; personal loans above $73,400 are exempt. Auto loans are reviewed with no change. Each has an owner, due Dec 11.

Which changes could miss their effective date?

Two are at risk. OCC reconsideration of value, HELOC: effective Oct 30, the 30-day answer clock is not set up; Marcus Bell, due Oct 16. Ohio HB 214, personal loans: effective Nov 30, note form CL-OH-04 not yet ordered; Tomás Rivera, due Nov 9.

Our auto balloon loans can top $73,400 — add Auto to the Reg Z review

Done. Balloon auto loans reach $81,200 at the top of the range, above the new exemption threshold. Auto loan is now lit on the Regulation Z row: AUT-PRO-012 §2.2, owner Luis Ortega, due Dec 11. The change and the reason are on the record.

Draft the Q4 board summary

Drafting it from the matrix: open changes, what takes effect this quarter, what is at risk and what closed, every line cited to its rule and task. Victor Hale signs it before it goes to the risk committee.

Every screen

The working solution, as it ships.

13 screens from the working solution, on its sample data. Pick one to see it large.

The impact matrixRules, laws and orders down the side, products across the top; each lit cell is an owned piece of work with its policy section and due date.
The morningOpen changes, what is at risk, the items waiting for the regulatory change lead’s call, and what the agents read overnight.
Agents at workA new Federal Register item read, scored and mapped step by step, with the cells lighting up as owners are assigned.
One cell’s impactWhat changes, the quoted rule text, the policy section, the control, the system, the owner, the due date and the tasks.
The rule with margin notesEach highlighted passage tied to the product, policy section, old and new value and owner it affects.
Scope confirmationThe regulatory change lead confirms products, states and owners with an electronic signature and its meaning.
Scope confirmedSigned at 08:14; redlines sent to the five owners and every note moved to In progress.
The change feedEvery item read in the last 30 days, scored applies, may apply or does not apply, each with its reason.
RedlinesThe affected section with the rule passage behind it, the current text and the proposed text, for the policy owner to approve.
The effective-date runwayOne lane per owner, tasks as bars to their due dates, effective dates as flags, at-risk work in red.
Products and statesWhat the bank offers where; switch a square on, such as auto loans in New Jersey, and see which open changes would apply.
The board change summaryThe quarterly summary for the risk committee, drafted from the matrix with every line cited, signed by the CCO.
Your rulesSources watched, verdict rules, due dates, nudges and escalations, the ownership map and approvers.
Governance

Built for examiners and the board: reasoned, signed, on the record.

Every verdict carries a reasonEach item read gets applies, may apply or does not apply, with a one-sentence reason. A 5 % sample of “does not apply” is re-read by a person each week, and anyone can send an item for a second look.
Every mapping quotes both textsThe impact on a policy section always shows the rule passage that drives it, with its citation, next to the policy text it changes.
A named person confirms the scopeThe regulatory change lead confirms each change’s scope with an electronic signature, and the meaning — scope reviewed and confirmed — is recorded with it. “May apply” items are always her call.
Policies are read, never changedThe agents have read-only access to policies and procedures. Redlines are drafts until the owner of the policy or procedure approves them.
Dates the agents cannot moveDue dates are 21 days before each effective date. The deadline watcher nudges and escalates but cannot extend a date; only the Chief Compliance Officer can move one.
A trail from the rule to the closed taskEvery agent step and every human decision is on the record, from publication to scope signature to task closed with proof. The board summary is signed by the CCO, and internal audit can read everything and export the trail.
Configuration

Your compliance program’s rules, not ours

Sources, verdicts, clocks, owners and approvers are settings, changed by the compliance team.

SettingDefaultChoose from
“May apply” goes toNadia FerreiraNadia Ferreira · Victor Hale
Proposed rulesScore and track commentsScore and track comments · Score only
Second look at “does not apply”5 % sample weekly5 % · 10 % sample weekly · Off
Due date for owners21 days before14 · 21 · 30 days before the effective date
Nudge the owner30 days before30 · 45 days before
Escalate to the Chief Compliance Officer14 days before14 · 21 days before
Confirm scope of a changeNadia FerreiraNadia Ferreira · Victor Hale
Approve a redlinePolicy ownerPolicy owner · Policy owner and Nadia Ferreira
Connections

Works with the sources and systems you already have

Federal RegisterCFPB, OCC, FDIC, Federal Reserve, FinCEN and HUD final rules, proposed rules and notices
State registers and legislaturesevery state you lend in, bills tracked from introduction
Bulletins, press releases and enforcement ordersbanking departments, attorneys general, federal agencies, and orders against other lenders
Product and state footprintwhat you offer where, with your licences
Policy and procedure librarythe sections each change touches, and their owners
Control inventorythe controls to retest when a rule changes
What it changes

The difference, in numbers.

Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.

target
Sameday
from publication to scoped, owned tasks
By email1–3 weeks
With agentssame day
target
80days
of runway kept on Regulation Z 2027, owners due 21 days early
Due day 59
21 days to spare
typical
1.9FTE
a quarter spent absorbing changes at a community bank, freed for judgement
TodayWith agents

“demo” = seen in the working solution, on its sample bank data · “target” = the design goal, measured in the live solution · “estimated” = our estimate · “typical” = published figures (Thomson Reuters Cost of Compliance 2019: about 217 regulatory alerts a day for a typical financial services firm; cdbanks.org: 653 hours, 1.86 FTE, for an average community bank to absorb the 82 regulatory changes of Q3 2014). People, banks and lenders named on this page, including Kestrel Bank and Ridgemoor Auto Finance, are fictional — characters and sample data in the working solution.

Questions

What compliance officers ask us.

What is regulatory change management software?

Software that tracks new laws, rules, guidance and enforcement orders, decides which ones apply to your institution, and follows each one through to updated policies, procedures, systems and controls before its effective date. Regulatory Change Management adds agents that read every item, score it against your products and states, map it to policy sections and controls and assign owners, so the analyst’s time goes on the calls that need judgement.

How does it decide whether a rule applies to us?

The applicability scorer compares the rule’s scope — products, borrowers, states and entity type — with your product and state footprint. It returns applies, may apply or does not apply, with a one-sentence reason. It never closes a “may apply” itself; the regulatory change lead decides.

Does it track state laws as well as federal rules?

Yes. It reads the Federal Register and the registers and legislatures of every state you lend in, with bills tracked from introduction, plus regulator bulletins, press releases and enforcement orders against other lenders. You can switch the matrix from products to states, and the footprint view shows which open changes would apply if you started offering a product in a new state.

Does the AI change our policies?

No. The agents have read-only access to policies and procedures. The redline drafter proposes the wording change with the old and new text, and the owner of the policy or procedure approves, edits or sends it back.

Do people stay in control?

Yes. The regulatory change lead confirms every scope with an electronic signature, policy owners approve every redline, and the Chief Compliance Officer signs the board summary and is the only one who can move a date. The agents propose; named people decide.

How does it help with exams and internal audit?

Every item read has a verdict and a reason, every impact quotes the rule and the policy section, and every scope signature, redline approval and closed task is on the record. Internal audit can follow the trail from the rule to the closed task and export it.

Can we set our own due dates and escalations?

Yes. Owner due dates, nudges, escalations to the CCO, who decides “may apply” items, how proposed rules are tracked, the weekly second-look sample, the ownership map and the approvers are all settings.

How long does it take to go live?

The Agentic Solution Engine builds and deploys it from your requirements — your product and state footprint, policy and procedure library, control inventory and ownership map — and it goes live once every quality gate has passed. We will walk you through it on your own footprint and recent rules first.

See it on
your products and states.

We’ll run Regulatory Change Management on your own footprint, policy library and the last month of rules.