TrueBankFlowTrueBankFlow home
BlogSign inGet started

Lending compliance and borrower data

This category covers the rules a lender follows when it collects and analyzes bank statements: privacy and safeguards duties, consumer report questions, adverse action notices, fair lending, ability to repay, open banking under section 1033, small business data collection and state disclosure laws for MCA funders. It also covers retention, consent forms and vendor risk. Start with Is Bank Statement Analysis a Consumer Report?, then read FTC Safeguards Rule for Lenders and Mortgage Brokers.

  1. Third Party Risk Management for Lenders Buying Software

    Third party risk management for lenders buying statement analysis software: security questions, SOC reports, data location and contract terms.

    Published October 17, 2026vendor riskSOC 2Safeguards Ruledue diligence

  2. Secure Document Upload for Lenders Collecting Statements

    Why lenders need secure document upload instead of email for bank statements: encryption, access control, retention settings and borrower ease.

    Published October 17, 2026document uploaddata securityborrower experience

  3. Section 1071 Small Business Lending Rule Explained

    What the section 1071 small business lending rule requires: covered lenders, the data points collected, firewall rules and compliance dates.

    Published October 17, 2026section 1071Regulation Bsmall business data

  4. Section 1033 Rule: Open Banking Data for Lenders

    What the section 1033 rule means for lenders: consumer-permissioned account data, consent, data limits and how it changes statement collection.

    Published October 17, 2026section 1033open bankingconsumer consent

  5. Regulation B Public Assistance Income Rules

    What Regulation B says about public assistance income, why lenders cannot discount it, and how to verify benefit deposits without bias.

    Published October 17, 2026Regulation BECOAbenefit income

  6. OFAC Screening for Loans: Who to Check and When

    How OFAC screening for loans works: which parties to check, when to screen, handling possible matches and the records to keep for each loan file.

    Published October 17, 2026OFACsanctionsloan file

  7. Model Risk Management for Underwriting Software

    How model risk management for underwriting applies to statement analysis tools: validation, monitoring, change logs and what examiners ask.

    Published October 17, 2026model riskvalidationvendor softwareSR 26-2

  8. MCA Broker License: States That Require One

    Which states require an MCA broker license or registration, what ISOs must disclose and how funders check broker compliance before paying.

    Published October 17, 2026MCA brokersISOregistration

  9. Loan File Retention Requirements for Bank Statements

    Loan file retention requirements for bank statements and analysis: federal minimums, state rules, declined files and how to delete data safely.

    Published October 17, 2026record retentionRegulation Bdata disposal

  10. KYB Verification for Lenders: Checking the Business

    How KYB verification for lenders confirms a business exists: filings, owners, EIN and address, and how bank statements match the business identity.

    Published October 17, 2026KYBbeneficial ownershipbusiness lendingidentity

  11. Is Bank Statement Analysis a Consumer Report?

    Is bank statement analysis a consumer report under the FCRA? When a lender's own review stays outside it, when a vendor's report falls inside and why.

    Published October 17, 2026FCRAconsumer reportsvendors

  12. Is a Merchant Cash Advance a Loan? Court Tests

    Is a merchant cash advance a loan? The court tests for a true sale, reconciliation and term limits, and what recharacterization means for funders.

    Published October 17, 2026MCAusurytrue sale

  13. GLBA Privacy Notice: What Lenders Must Send

    When a GLBA privacy notice is required, what it must say about sharing borrower data, the annual notice exception and how brokers deliver it.

    Published October 17, 2026privacyRegulation Pborrower data

  14. FTC Safeguards Rule for Lenders and Mortgage Brokers

    What the FTC Safeguards Rule requires of lenders and mortgage brokers holding bank statements: a written program, encryption, MFA and breach notice.

    Published October 17, 2026Safeguards Ruleinformation securityGLBA

  15. Fair Lending in Cash Flow Underwriting: Bias Checks

    How fair lending rules apply in cash flow underwriting: disparate impact from deposit rules, testing outcomes and documenting the reason for each rule.

    Published October 17, 2026fair lendingRegulation Bcash flow

  16. ESign Consent for Loan Documents: Getting It Right

    How to get esign consent for loan documents under the E-SIGN Act: disclosures, hardware notice, withdrawal rights and keeping the consent record.

    Published October 17, 2026E-SIGN Actelectronic disclosuresconsent

  17. ECOA Spousal Signature Rule for Loan Guarantees

    What the ECOA spousal signature rule allows and bans, when a lender may require a spouse to sign and how it applies to business guarantees.

    Published October 17, 2026ECOARegulation Bguaranteessignatures

  18. Data Breach Notification for Lenders Holding Statements

    Data breach notification for lenders: federal and state deadlines, who must be told, what notices say and how to prepare before statements leak.

    Published October 17, 2026data breachincident responsenotification

  19. Commercial Financing Disclosure Laws for MCA Funders

    Which states have commercial financing disclosure laws, what MCA funders and business lenders must disclose and how estimated APR is calculated.

    Published October 17, 2026disclosureMCAestimated APR

  20. CCPA for Lenders: Where GLBA Stops and CCPA Starts

    How CCPA for lenders works alongside GLBA: which borrower data is exempt, which is not, deletion requests and notices for California residents.

    Published October 17, 2026CCPAGLBAprivacy

  21. Business Purpose Loan Definition and Why It Matters

    The business purpose loan definition lenders use, how it changes which consumer laws apply and how to document purpose for investor and owner loans.

    Published October 17, 2026business purposeRegulation Zinvestor loans

  22. BSA AML Program for Lenders Outside Banking

    Which nonbank lenders need a BSA AML program, the parts it must include, suspicious activity reporting and where bank statement reviews fit.

    Published October 17, 2026BSAAMLsuspicious activity

  23. Borrower Authorization Form for Bank Statement Access

    What a borrower authorization form must cover before a lender verifies accounts or pulls statement data, the signature rules and how long it lasts.

    Published October 17, 2026borrower consentverificatione-signature

  24. Adverse Action Notice for Cash Flow Based Declines

    How to write an adverse action notice when bank statement cash flow drove the decline: specific reasons, timing and the ECOA and FCRA content rules.

    Published October 17, 2026adverse actionECOAFCRA

  25. Ability to Repay Rule for Bank Statement Mortgages

    How the ability to repay rule applies to bank statement mortgages: the eight factors, reasonable income verification and the records lenders keep.

    Published October 17, 2026ability to repayRegulation Znon-QMincome verification