AI/ML governance and vendor oversight
Published April 8, 2026 and effective 120 days from publication. The letter requires policies/procedures for AI/ML risk, compliance with information-security requirements, governance of subcontractor/vendor AI use that is no less protective, and prompt disclosure of AI/ML use and safeguards upon request.
Read the official Lender Letter →