You're accountable for your vendors' AI.
Fannie Mae LL-2026-04 requires written governance for every AI system touching origination or servicing — including your vendors', held to a standard no less protective than your own. FASS Attest produces the evidence.
Answered live. Three minutes tells you whether you have exposure — no form, no signup.
Nobody knows which vendors use AI
And the deadline doesn't care.
The vendor's output is never treated as true
Most "AI checking AI" tools ask a second model whether the first one was right — inheriting the same failure mode. FASS Attest decomposes the output into atomic claims and requires each one to resolve to a span in your source documents. No span, no support — enforced in the architecture, not in a prompt.
Supported by a cited source span and conforms to policy. Passes with the citation on record.
A source span or policy rule directly conflicts. Blocks release.
Unverifiable — not disproven. No substantiating span exists. Goes to human review.
Passes by recorded override, not verification. Original verdict, authority, and basis retained.
Outside the declared engagement scope. Deliberately not assessed — never guessed at.
Deciding would require inventing a fact. Escalates. Never overridable.
UNSUPPORTED and CONTRADICTED are different verdicts. One means we found a problem. The other means we couldn't check. Collapsing them into "fail" is the most common error in compliance tooling — and it's the difference between a queue your team can work and a number nobody trusts.
Coverage, not accuracy
A vendor telling you their model is "95% accurate" has told you nothing about which 5%. FASS Attest reports coverage — the fraction of the output it could adjudicate either way — above every pass count. A run with 60% coverage and zero contradictions hasn't validated the output. It validated 60% of it, and says so.
Deterministic findings are reported separately from model-assisted ones, so an auditor can filter to rules-only evidence and see what survives. And an override never inflates coverage — accepting something unverified isn't the same as verifying it.
See it work in 60 seconds
A vendor income calculation checked against the source paystub. The output claims a YTD figure the paystub disagrees with, and a bonus that appears nowhere. Edit either box and re-run. No signup.
One claim per line, matched against the source by figure. A figure absent from the source returns UNSUPPORTED — never a guess.
Ready. Press "Run attestation".
Engagements
Scoped, fixed-fee, delivered as evidence your examiner can read. Final scope set after a 20-minute call.
Vendor AI Inventory
- Identify which vendors embed AI, and where in the loan lifecycle
- Map each to LL-2026-04 and Bulletin 2025-16 obligations
- Gap register with owner and target date
- Board-ready summary
Attestation Run
- Independent verification of live vendor output against your source docs
- Full record: coverage, verdicts, cited spans
- Override ledger with authority, basis, and expiry
- Reproducible — replays against pinned policy versions
Governance Retainer
- Quarterly re-attestation as vendors ship model updates
- Policy-version tracking against GSE guide changes
- Annual review documentation LL-2026-04 requires
- Examiner-request support
What this is not
FASS Attest produces documentation and validation evidence. It is not a legal opinion, a certification, or a fair lending analysis, and it does not transfer regulatory accountability away from the seller/servicer. Approval is recorded by a named individual with delegated authority at your institution — the accountability stays where the regulation puts it.
Find out in three minutes
Call and the line will ask which of your vendors use AI, where they sit in the loan file, and who owns vendor risk. Answered live, no phone tree.
Call (443) 347-6785 →Answered by a FASS Voice agent — the same product we sell. English and Spanish.
Send it over and Maurice follows up within one business day. No newsletter, no drip sequence.
Same team. Same standards. Same login.
FASS Attest joins Flow, Voice, Opps, and the Data API — one company, a growing set of tools. Each one gets built because it solves a real problem for a real business, not the other way around.