SystemBranch, Cash & Contact Center

Secure Message Triage

Every request in the secure message center on its own legal clock, started the day the member wrote, under one reply a person checks

Every request in a message on its own legal clock, started the day it arrives.

See one case, screen by screen ↓
demo241notices of errorfound inside 2,186 secure messages since Friday 6 PM, each clock started the day the message arrived
demo26minutesfrom a member's three-request message to a supervisor-checked reply, with three cases open
target100%of notices of error caught inside messages, each clock started the day the message arrived
target0repliessent with a promise outside policy: every draft and every edit passes the Language Check first
In short

What is Secure Message Triage?

Secure Message Triage reads every message members send through the secure message center in online and mobile banking as it arrives. Agents split each message into its separate requests, start each request's legal clock on the day the message arrived (a Regulation E notice of error, a Regulation Z billing error, a stop payment, a complaint, a closure or a record change), and draft one reply from approved language. A representative edits and sends it, and a supervisor who did not draft it checks every reply that matters.

AI use cases in banking: a buyer's guide to agentic AI for bank and credit union operations →

Updated

The problem

Why a notice of error in the secure message center starts its clock late

Members write to their credit union through the secure message center in online and mobile banking, and one message can carry a Regulation E notice of error, a complaint, a request to close an account and a question, all in one paragraph. A member's written notice of a card charge she did not make is a notice of error, and the 10-business-day investigation clock runs from the day the credit union receives it, not the day someone keys it.

Today a member service representative reads the message when the queue reaches it, often the next morning, behind the phones. The member picked "Other" from the topic list. The representative picks one topic, opens one case and types a reply from memory: the notice hidden behind a closure request starts late, the complaint inside a fee question is never logged, and the reply promises a refund that policy does not allow. Secure Message Triage puts seven agents in front of that reading, so the representative spends the morning deciding and sending, with a supervisor checking every reply that matters.

typical10business daysto investigate a notice of error or provisionally credit, counted from the day the credit union receives it (Regulation E)
typical60daysafter the statement is sent, the window in which a member's notice of error must be received (Regulation E)
typical67,900complaintsabout checking or savings accounts reached the CFPB in 2024, led by unauthorized transactions
Where a representative's minutes go on one secure messageestimated
By hand6 minutes
With the solution1.1 minutes
  • Reading the message and deciding what it is1.5 → 0.3 min
  • Looking the member and accounts up in the core banking system1 → 0.1 min
  • Keying the dispute into the card processor's dispute system1.5 → 0.1 min
  • Opening the complaint in complaint management0.5 → 0.1 min
  • Typing the reply and checking the policy1.5 → 0.5 min

Estimated split of about six minutes a representative spends on one message by hand, against the same message with the agents; our arithmetic, kept modest. A supervisor's check, where one is needed, is not counted here.

How it works

How one secure message is answered

Seven agents split each message, start each legal clock and draft one reply; a representative sends, a supervisor checks.

What comes in
What it readsabout 38,000 messages a month · messages and attachments, the core, card records, the rules, approved language
Agents at work
Intake agentmember, accounts, masking
Then
Splitting agentone request per part
Clock agentwhich clock, which day
Then
Routing agentdispute, complaint, core
Reply agentapproved language
Then
Language Check agentno promise outside policy
Sample agentdaily 5% check
A person decides
A representative edits and sends; a supervisor who did not draft it checks complaint, claim and closure repliesbelow 0.85 confidence, the representative decides
What comes out
Every request on its clock
One reply, checked
Cases filed, trail kept
One case, step by step

One secure message center message, split into three requests and answered in 26 minutes

Janelle Okafor, a member of Norrell Federal Credit Union since 2011, writes through online banking at 8:47 AM on Monday, October 19, 2026. Here is what happens to her message, screen by screen, in the working solution.

  1. 01Monday morning

    The weekend's messages, each drawn as its requests

    Talia Brooks · Member Service Representative

    2,186 secure messages arrived since Friday 6 PM, and the agents have read 2,151 of them. They found 241 notices of error and logged 131 complaints, each the day it arrived. Of Talia's 46 messages, 11 need her; 32 more routine replies are already drafted. Her queue is ordered by first-response due time, and every row shows how many requests the message holds and which clocks they started.

  2. 028:48 AM · 38 seconds

    One message, three requests, three legal clocks

    Splitting agent and Clock agent

    Janelle wrote about three gas station charges in Ohio she never made, an old Holiday Club savings account she wants closed, and a $30 fee she is frustrated about. The agents cut the message into those three requests and marked the sentence that decides each one. The notice of error, $193.44 in all, starts the Regulation E clock on Monday, October 19 and is due Monday, November 2; the closure is due Wednesday, October 21; the complaint is logged today, to be resolved by Monday, November 9.

    Notice of error · Regulation E · 12 CFR 1005.11 · Started Mon Oct 19 → Due Mon Nov 2

  3. 03One click

    Is it legally a notice of error? Every element, with its sentence

    Clock agent

    Before anyone relies on the clock, the Clock agent shows why the message is a notice of error under Regulation E. The statement went out on Friday, October 16, so the window runs to Tuesday, December 15; the authenticated session identifies her checking and debit card; she says why she believes there is an error, and gives the type, dates and amounts. A missing element would never delay the clock: the reply would ask for it.

    “I haven’t been to Ohio this year and I still have my card.”

  4. 049:10 AM

    A refund promise outside policy, blocked before it can be sent

    Language Check agent

    The Reply agent drafted one reply from approved language, a numbered paragraph for each request, at reading grade 6.8. The agents had linked the $30 fee to the dispute: it posted after the $58.90 charge took checking below zero. Talia adds "We’ve refunded your $30 fee today", and the Language Check agent blocks it under Fee Policy FP-3 § 2.4, offering the approved, conditional wording instead.

    Approved wording: “If we find these charges were not yours, we will also refund the $30 fee.”

  5. 059:13 AM

    A supervisor who did not draft it checks the reply and sends it

    Marcus Ellery · Member Service Supervisor

    Talia takes the approved wording and sends the reply for check at 9:11 AM, because it carries a complaint and confirms a closure. Marcus reads the reply and its seven checks, sees what happens on approval, ticks the checklist and approves at 9:13 AM. The reply goes out, and the dispute, the closure and the complaint are filed in their systems with the member's own notice date.

    Approved and sent at 9:13 AM by Marcus Ellery, 26 minutes after Janelle wrote.

  6. 0626 minutes after she wrote

    One plain answer to everything she asked

    Janelle Okafor · Member

    In her secure message center, Janelle sees one reply that answers each request in plain words, with the reference numbers she may need: DSP-26-118402 for the dispute, AM-26-55120 for the closure, CMP-26-02291 for the complaint. Agent notes, template codes, the supervisor's check, restricted reviews and full account numbers never travel with it.

  7. 07The same morning

    Every request handed to the system that owns it

    Routing agent

    Disputes go to the card processor's dispute system, complaints to complaint management, closures and changes to the core banking system, referrals to case management. When the complaint system timed out on another message at 8:58 AM, the hand-off waited to resend, and the message kept its clock.

  8. 08The next ten business days

    Every legal clock in one view, counted in business days

    Priya Raman · Card Dispute Specialist

    Priya sees what falls due on each of the next ten business days and the clocks closest to due. Monday, November 2 carries every notice of error that arrived today. Lorraine Abernathy's notice is on day 9 of 10: escalated, with provisional credit proposed for approval.

  9. 09Examiner-ready

    Every split, clock, edit and approval on the record

    Ruth Kincaid · Internal Auditor

    The audit trail records who did what, when, why and on what evidence, for people and agents alike. An export pack for NCUA examiners, internal audit or the supervisory committee builds in one step: for October 1 to 19, 22,140 messages and 31,920 requests, with 41,377 account and card numbers masked and restricted reviews excluded.

Who it’s for

Built for everyone who answers a secure message.

The same message, seen by the four people who carry it: what their day looked like, and what it looks like now.

TB
Talia BrooksMember service representative · works about 120 secure messages a day
Member Service Representative
Before
Reads each message when the queue reaches it, picks one topic, opens one case and types the reply from memory.
Now
Opens a message already split into its requests, each clock cited to the member's sentence and the rule, and edits a drafted reply.
ME
Marcus ElleryMember service supervisor · checks complaint, claim and closure replies
Member Service Supervisor
Before
Samples a few replies a month, weeks after they were sent.
Now
Checks every reply on a complaint, or that confirms a claim, closure or fee refund, before it goes, and never one he drafted.
PR
Priya RamanCard dispute specialist · owns Regulation E and Regulation Z disputes
Card Dispute Specialist
Before
Receives disputes keyed days after the member wrote, with the keying date where the notice date should be.
Now
Gets the dispute with the notice date the member wrote, every clock counted in business days, and the card block waiting for her approval.
GH
Gwen HollisterComplaint management officer · owns the complaint log and its root causes
Complaint Management Officer
Before
Sees a complaint only when a representative recognizes it as one and has time to log it.
Now
Has every complaint inside a message logged the day it arrives, categorized and linked to the dispute behind it.
Built on the engine

7 agents. Each with one job, and hard limits.

Seven agents split each message, start each legal clock and draft one reply; a representative sends, a supervisor checks.

Intake agent

Reads the message and its attachments, matches the member and accounts from the authenticated session, masks account and card numbers and stamps the received time.

  • Never reads an account the session does not own
  • Never changes a record
Splitting agent

Cuts the message into its separate requests, marks the deciding sentence, and links requests that depend on each other, such as a fee caused by a disputed charge.

  • Never merges two requests to save work
  • Below 0.85 confidence, leaves the part for the representative
Clock agent

Decides which legal clock each request starts and on which day, tests the elements of a notice of error, and counts business days on the credit union's calendar.

  • Never starts a clock later than the day the message arrived
  • Never closes a clock
Routing agent

Prepares the dispute, the complaint and the maintenance request for their systems, proposes card blocks and verification steps, and sends restricted accounts to the BSA team.

  • Never files before the reply is sent or approved
  • Never tells the representative why an account is restricted
Reply agent

Drafts one reply from approved language, one numbered paragraph per request, in the member's language, under reading grade 8.

  • Never sends
  • Never drafts for a restricted account
Language Check agent

Checks every draft and every human edit for promises outside policy, blame words, required statements and anything that could reveal a restricted review, and offers the approved sentence with its source.

  • Never rewrites without showing the change
  • Blocks rather than guesses
Sample agent

Draws the daily 5% sample of sent replies and lists every complaint reply for a supervisor.

  • Never passes or fails a reply
Member Service Supervisor

Checks every complaint reply; never one they drafted. The agents propose; a named person decides.

Ask in plain words

Ask the agents about any message

Every message has its own question box. The agents answer from the message, the core postings and the rules, and every answer cites its source.

Why does the notice clock start today?

Because Regulation E counts from the day the credit union receives the notice, and Janelle’s message arrived today at 8:47 AM. Ten business days on Norrell’s calendar end Monday, November 2. Her card is a debit card used at a point of sale, so the outer limit is 90 days: January 17, 2027.

Why is the $30 fee linked?

The courtesy pay fee posted at 11:58 PM on October 13, after the $58.90 charge took checking to −$21.36. Without that charge the balance would have stayed at $37.54. If the investigation finds an error, the correction includes refunding the fee.

What if it were a credit card?

Then it would be a billing error under Regulation Z: acknowledge within 30 days (November 18) and resolve within two billing cycles, at most 90 days. Owen Delacroix’s message this morning is one.

Which outage messages also carry a legal notice?

Nine of the 412 outage messages ask for something else, so they are held out of the bulk reply with their own clocks: three notices of error, three complaints, two fraud reports and one closure.

Every screen

The working solution, as it ships.

12 screens from the working solution, on its sample data. Pick one to see it large.

One secure message, split into its requests, each on its own legal clockJanelle Okafor's message, received Monday at 8:47 AM through online banking, cut by the agents into three requests in 38 seconds, with the deciding sentence marked in each. Beside every part sits its clock: the notice of error for $193.44 under Regulation E, started Mon Oct 19 and due Mon Nov 2; the account closure due Wed Oct 21; and the queue and case each goes to.
The secure message center inbox, each message drawn as its requests2,186 messages since Friday 6 PM, 241 notices of error found and 131 complaints logged, each the day it arrived. The representative's queue is ordered by first-response due time, and each row shows how many requests the message holds and which clocks they started.
Is it legally a Regulation E notice of error? Every element, with its sentenceReceived within 60 days of the statement, it identifies the member and the account, says why she believes there is an error, and gives the type, dates and amounts. Each element opens its source, and a missing one would never delay the clock: the reply would ask for it.
A refund promise outside policy, blocked before it can be sentThe representative edits the complaint paragraph to say the $30 fee has been refunded. The Language Check agent blocks it under Fee Policy FP-3 § 2.4 and offers the approved wording: "If we find these charges were not yours, we will also refund the $30 fee."
A supervisor who did not draft it checks the reply and sends itMaker Talia Brooks at 9:11 AM, checker Marcus Ellery at 9:13 AM. Seven checks passed; on approval the reply is sent and the dispute, the closure and the complaint are filed in their systems, 26 minutes after the member wrote.
What the member sees in her secure message centerOne plain reply that answers each request, with the reference numbers she may need. Agent notes, template codes, the supervisor's check, restricted reviews and full account numbers never travel with it.
Below the confidence threshold, the representative decidesA joint owner writes about her 81-year-old father sending $4,800 to someone he met online. The agents refer the exploitation the same day, hold the closure because a joint account needs both owners, and leave the notice-of-error question, at confidence 0.71, to the representative, with the options and a reason to give.
One approved reply for an outage flood, without burying a legal notice412 messages about a weekend sign-in outage are answered with one approved reply once a supervisor approves the bulk send. Nine that also carry a notice of error, a complaint, a fraud report or a closure are held out and keep their own clocks.
Every Reg E dispute timeline and legal clock, counted in business daysWhat falls due on each of the next ten business days, the clocks closest to due with their owners, and the escalation ladder: a reminder on day 8 of a notice of error, an escalation on day 9, provisional credit proposed on day 10.
Every request handed to the system that owns it, and a failed hand-off caughtDisputes to the card processor's dispute system, complaints to complaint management, closures and changes to the core, referrals to case management. When a system does not answer, the hand-off waits to resend and the message keeps its clock.
Every split, clock, edit and approval on the record, exported for examinersWho did what, when, why and on what evidence, for people and agents alike, kept five years. An export pack for NCUA examiners, internal audit or the supervisory committee builds in one step, masked, with restricted reviews excluded.
Regulation E error resolution and every other clock rule, set by the credit unionNotice of error, billing error, stop payment, complaint, account closure, record change and first response, each with when it starts, when it is due and the rule behind it. The administrator proposes a change and the VP of Member Experience approves it.
Governance

Built for Regulation E and UDAAP risk: cited, checked, on the record.

Roles separated by dutyA representative edits and sends; a supervisor checks, returns and approves; a card dispute specialist approves card blocks; the complaint management officer co-approves language; the BSA officer handles restricted messages; an administrator proposes settings and the VP of Member Experience approves them; an internal auditor reads and exports, changing nothing.
A second person before the reply goesEvery reply on a complaint, every reply that confirms a claim, closure, fee refund or record change, and every bulk reply is checked by a supervisor who did not draft it. A daily 5% sample of the rest is checked the next morning.
Every clock cites its sentence and its ruleClick any clock to open the member's own sentence or the rule text, highlighted. Every reply paragraph names its approved template and version.
Reason codes on every overrideChanging a request's type, deciding a part below the 0.85 confidence threshold, and returning a reply all need a reason code, and each is logged with who and why.
No tipping off, numbers maskedRestricted reviews never appear on a representative's view, the member's view or a standard export, and the Language Check blocks any mention of one. Account and card numbers are masked to their last four digits on every screen, attachment and export.
A five-year trail, exported for examinersWho, what, when, why and which evidence, for people and agents alike, kept five years, with masked export packs for NCUA examiners, internal audit and the supervisory committee.
Configuration

Your clock rules and policies, not ours

How each clock is counted, which replies need a second person and how member data is kept are settings. The administrator proposes a change and the VP of Member Experience approves it; both go on the record.

SettingDefaultChoose from
Notice of errorStarts the day the message arrived · 10 business days45 days (90 for point-of-sale debit, foreign-initiated and new accounts); 20 business days for new accounts · Regulation E 1005.11
Billing errorAcknowledge within 30 daysResolve within 2 billing cycles, at most 90 days · Regulation Z 1026.13
Stop payment3 business days before the debitLater than that: we try · Regulation E 1005.10(c)
ComplaintLogged today · acknowledge in 2 business daysResolve in 15 business days · complaint policy CMP-2
Business-day calendarMonday to Friday; Saturday is not a business dayFederal holidays; received the day it arrives, Eastern time, no cut-off hour
Which replies need a checkComplaints; replies confirming a claim, closure, fee refund or record change; bulk repliesEverything else: a daily 5% sample
Agent confidence threshold0.85Below it, the representative decides, with a reason
Retention and masking5 years · numbers masked to last four digitsRestricted reviews visible to the BSA officer only
Connections

Works with the systems behind your secure message center

Digital banking secure messagingmessages and attachments in, replies out
Core banking systemaccounts, postings and statements; closures and record changes
Card processor dispute systemcard authorizations in, disputes out with the member's notice date
Complaint management systemevery complaint logged the day it arrives
Case managementelder exploitation and fraud referrals
What it changes

The difference, in numbers.

Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.

target
100%
of notices of error caught inside messages, each clock started the day the message arrived
Clocks started on time
the day the message arrived
target
0
replies sent with a promise outside policy: every draft and edit passes the Language Check first
Typed from memoryunchecked
Approved language, checkedevery reply
typical
67,900
checking or savings complaints the CFPB received in 2024, led by unauthorized transactions

Sources: Regulation E, 12 CFR 1005.11 (error resolution; 10 business days from receiving a notice of error) and 1005.10(c) (stop payments) · Regulation Z, 12 CFR 1026.13 (billing errors) · CFPB Consumer Response Annual Report 2024, March 2025 (about 67,900 checking or savings complaints) · "demo" = seen in the working solution, on its sample data · "target" = design goal, measured in the live solution · "typical" = published figures and the rules' own time limits · "estimated" = our arithmetic, kept modest. Norrell Federal Credit Union, its members and the people named on this page are fictional: characters and sample data in the working solution.

Questions

What credit unions and banks ask about secure message triage.

What is Secure Message Triage?

Secure Message Triage reads every message members send through the secure message center in online and mobile banking as it arrives. Agents split each message into its separate requests, start each request's legal clock on the day the message arrived (a Regulation E notice of error, a Regulation Z billing error, a stop payment, a complaint, a closure or a record change), and draft one reply from approved language. A representative edits and sends it, and a supervisor who did not draft it checks every reply that matters.

Is a secure message a Regulation E notice of error?

It can be. A written message that identifies the member and the account, says why the member believes there is an error, and gives the type, date and amount, received within 60 days of the statement, meets the elements of 12 CFR 1005.11(b)(1). The Clock agent tests each element and shows the sentence that meets it; a missing element never delays the clock, and the reply asks for it.

What is the Reg E dispute timeline for a notice that arrives by secure message?

The clock runs from the day the institution receives the notice: 10 business days to investigate, or to provisionally credit and take up to 45 days (90 for point-of-sale debit, foreign-initiated and new accounts). Secure Message Triage starts that clock the day the message arrived, on the credit union's own business-day calendar, with a reminder on day 8 and an escalation on day 9.

How does it handle a message with several requests?

The Splitting agent cuts the message into its requests and marks the sentence that decides each one, and the Clock agent gives each its own clock. Requests that depend on each other are linked: a fee that posted because a disputed charge took the account below zero is tied to the dispute, so the reply treats them together.

Can a reply promise a refund before the investigation is done?

No. The Language Check agent reads every draft and every edit a person makes, blocks a refund or timing promise outside policy, and offers the approved sentence with its source. The reply cannot be sent until the blocked sentence is fixed.

Do people stay in control of what is sent?

Yes. The agents read, split, clock, route and draft; they never send a reply, file a case before approval, change a record or close an account. A representative sends, a supervisor who did not draft it checks every complaint, claim, closure, fee refund, record-change and bulk reply, and below 0.85 confidence the representative decides, with a reason code.

Does anything about a restricted review reach the member?

No. Messages on restricted accounts go to the BSA team; the representative sees only that a specialist team answers, the Reply agent drafts nothing, and the Language Check blocks any mention of a review. Restricted reviews never appear on the member's view or in a standard export.

How long does it take to go live?

The Agentic Solution Engine builds and deploys it from your requirements and documents: your clock rules, complaint and fee policies, business-day calendar, approved reply language and a sample of past secure messages. It goes live once every quality gate has passed, and we will walk you through it on your own messages first.

See it on
your secure messages.

We'll run Secure Message Triage on a sample of your own secure messages, clock rules and approved language.