Mortgage lenders evaluating artificial intelligence products now have a new industry-backed credential to consider as vendor oversight becomes a larger part of AI adoption.
MISMO has launched two certifications aimed at different sides of the governance problem: one evaluates the practices supporting AI-enabled mortgage technology, while the other identifies advisory firms capable of helping lenders and servicers implement an AI governance program.
The certifications build on the Framework for Responsible AI in the Mortgage Ecosystem, or FRAME, introduced by MISMO in June. FRAME gave mortgage companies a structure for identifying, assessing, documenting, and monitoring their AI use. The new credentials extend that work into vendor evaluation and implementation.
“AI is moving quickly into mortgage workflows, and organizations need practical ways to understand and manage the risks that come with it,” MISMO President Brian Vieaux, CMB, said. “These certifications give the industry another way to build confidence in responsible AI adoption by recognizing organizations that can help lenders put good governance practices into action and technology providers that can demonstrate how their AI-enabled products are governed.”
A Product-Level Review
The MISMO AI Governance Certification is designed for mortgage technology providers, but its intended beneficiaries are lenders evaluating products that contain AI.
Rather than evaluating a platform under one broad label, MISMO said each AI use case within a product will be assessed according to its individual risk profile. Factors include the use case’s potential consumer impact, compliance exposure, influence over decisions, and operational risk.
The review examines the governance controls, documentation, testing, oversight, and ongoing monitoring supporting those uses. A product then receives a certification designation level based on the evidence covering all AI use cases included in the assessment.
As AI becomes more embedded in document review, income calculations, fraud detection, borrower communications, quality control, underwriting support, and other mortgage functions, that distinction matters. Lenders may not simply be purchasing an “AI product”; they may be taking responsibility for multiple AI uses carrying substantially different risks.
The certification also arrives as mortgage companies face heightened expectations around their oversight of third-party AI. Freddie Mac’s vendor AI requirements took effect in March, while Fannie Mae’s standards became effective Aug. 6. Those requirements have pushed lenders to look beyond general cybersecurity reviews and examine how vendors identify, test, monitor, and control AI systems.
As NMP has recently published, a SOC 2 report may address information security controls without answering questions about model governance, decision-making influence, explainability, fair lending risk, or performance drift.
MISMO’s certification could give lenders a more standardized starting point for that review and reduce some duplicative assessment work. It does not, however, remove the need for lenders to understand how a product is configured and used within their own operations. The designation validates the governance practices supporting the AI functionality within the scope of the assessment; it should not be treated as a guarantee of every output or a substitute for a lender’s own compliance and vendor-management obligations.
Help Putting FRAME Into Practice
The second credential addresses a different problem: finding qualified help to build the governance program itself.
The MISMO FRAME Advisory Partner Certification is intended for consulting and advisory organizations working with lenders and servicers.
Certified organizations must demonstrate the knowledge and practical ability to convert FRAME into operating processes covering AI risk assessments, controls, documentation, oversight, evidence collection, and reporting to executives.
That could be particularly relevant for small and midsize mortgage companies without large internal legal, compliance, technology, and model-risk teams.
“For mid-sized mortgage companies that may not have extensive AI, risk and compliance resources, FRAME will be a lifeline — providing a practical, mortgage-specific foundation for building an effective AI governance program,” said Lindsy Gwozdz, senior vice president of compliance and general counsel at HMA Mortgage.
Gwozdz said the certifications could help lenders identify both AI products that have been evaluated for responsible governance and advisors qualified to assist with implementation.
The move also adds an industry-led option to a developing market for private AI reviews. In May, mortgage banking law firm Brody | Gapp launched an AI governance audit practice, while Friday Harbor became the first mortgage technology provider to receive the firm’s AI governance limited attestation.
MISMO introduced the two certifications during its Fall Summit in Reston, Virginia. Applications are now being accepted.
