CHECKLIST

The ECOA Compliance Checklist for AI Lending Agents

A practical, step-by-step checklist compliance officers can use to verify their AI lending agents meet Equal Credit Opportunity Act (ECOA) and Regulation B requirements before production deployment.

What's Inside

  • Adverse Action Notice Requirements — Verify your AI agent generates compliant notices with specific reason codes for every denial, counteroffer, or unfavorable term change
  • Prohibited Basis Checks — Ensure your model does not use race, color, religion, national origin, sex, marital status, age, or public assistance status as decision factors
  • Proxy Discrimination Testing — Identify features that correlate with protected classes (zip code, institution type, employment patterns) and test for disparate impact
  • Spousal Signature Rules — Confirm your agent does not require a spouse's signature, co-signature, or guarantee in violation of Regulation B
  • Record Retention Requirements — Validate that all applications, adverse action notices, and decision logs are retained for the required 25-month period
  • Notification Timing — Ensure adverse action notices are delivered within 30 days of the credit decision or 90 days of an incomplete application
  • Explainability Documentation — Confirm every AI-driven denial includes a human-readable explanation of the principal reasons for the adverse action
  • Monitoring & Audit Trail — Establish ongoing monitoring for ECOA compliance with immutable audit logs for regulatory examinations

Who This Is For

  • Chief Compliance Officers at banks and fintech lenders
  • Fair lending officers evaluating AI underwriting models
  • Risk managers responsible for model governance
  • AI/ML engineers building lending agents for regulated institutions

Related Reading

Automate your ECOA compliance checks

XeroML scores every AI lending decision against ECOA requirements in real time. Auto-generate adverse action notices, detect proxy discrimination, and maintain audit-ready logs.

Book a Demo