HMDA · fair lending · CRA
Mortgage compliance software, HMDA software and fair lending software for US lenders
Mortgage compliance software scrubs and files your HMDA loan/application register, tests loans against TRID and high-cost rules, runs fair lending analysis, and tracks the CFPB and banking agency rules those checks are built on. Ncontracts (which owns QuestSoft), Wolters Kluwer, Asurity and ComplianceEase sell the loan-level side, all on quote. 2026 moved three of the underlying rules, which is the part we watch.
§ Live · Compliance scan
One free run. Nothing you pick is stored.
Bank, US · first rows of a real scan
- § 01 Written AML program with a named officer
- § 02 KYC / Customer identification program
- § 03 Customer due diligence and beneficial ownership
- § 04 Transaction monitoring and SAR filing
What the software has to deliver
HMDA software and loan compliance tools are bought for these deadlines
Every feature list in this category traces back to a short set of federal rules. If a tool cannot prove each of these for every file in the period an examiner picks, it is not doing the job you are paying for.
25 / 200
Closed-end loans or open-end lines in each of the two prior years that make you a HMDA reporter (12 CFR 1003.2(g))
March 1
Annual loan/application register due for the prior calendar year (12 CFR 1003.5(a))
60 days
Quarterly filing window for lenders with 60,000 or more covered loans and applications
$59M
HMDA asset exemption for 2026 data, set by the CFPB on January 7, 2026
3 business days
Loan Estimate after application, and Closing Disclosure before consummation (12 CFR 1026.19)
30 days
Adverse action notice after a completed application (12 CFR 1002.9)
What moved this year
Fair lending software settings written before 2026 are already out of date
Loan-level tools test files against rules. When the rules move, somebody has to notice, read the Federal Register notice and change the program. These are the changes from the last twelve months that touch a US mortgage lender, each read from the Federal Register.
January 7, 2026
HMDA asset exemption rises to $59 million for 2026 data collection (91 FR 445).
April 22, 2026
Regulation B final rule: the CFPB states ECOA does not authorize disparate-impact liability, narrows discouragement and sets new conditions for special purpose credit programs. Effective July 21, 2026.
May 1, 2026
Section 1071 final rule: one compliance date, January 1, 2028, for lenders with at least 1,000 covered small business originations in each of 2026 and 2027.
July 9, 2026
Fifth Circuit dismisses the OCC and FDIC appeal; the 2023 CRA rule stays enjoined.
August 12, 2026
OCC and FDIC publish a new CRA proposal, comments due October 13, 2026. The Federal Reserve did not join.
No change
HMDA reporting thresholds and data points. No CFPB proposal to change them was published in 2025 or 2026 to date.
The Regulation B rule interprets ECOA only. It does not amend the Fair Housing Act, and state fair lending laws are separate, so a fair lending program that simply drops its disparate impact testing is taking a position the rule does not cover. That judgment belongs to your counsel; the job of software is to make sure the question reaches them the week the rule lands.
The vendors
Mortgage compliance software compared on coverage and public price evidence
None of these vendors prints a price list. We checked their sites, US federal award records, Vendr and banker forums. Where a dollar figure exists, it is below with its source; where it does not, we say so rather than estimate.
| Vendor | What it covers | Public price evidence | Best fit |
|---|---|---|---|
| Ncontracts (QuestSoft) | HMDA, CRA, fair lending, 1071, plus compliance, vendor and risk management. Bought QuestSoft in January 2021 | Quoted. 2017 BankersOnline posts put QuestSoft between under $1,000 and $3,500 a year; Vendr shows no usable Ncontracts contract data | Banks and credit unions wanting lending compliance inside one risk suite |
| Wolters Kluwer (HMDA Wiz, CRA Wiz, Fair Lending Wiz) | HMDA collection and scrubbing, CRA analysis and mapping, regression, matched-pair and redlining analysis | Federal awards: OCC paid $482,132 for CRA Wiz licenses, maintenance and training over 2014 to 2019, then $457,200 for a base year and four options from October 2019; DOJ paid $10,872 a year for maintenance, flat from 2011 to 2016 | Larger lenders that need examiner-grade fair lending statistics |
| Asurity (RegCheck, RiskExec) | Loan-level compliance testing linked to root causes; RiskExec for fair lending, redlining, CRA and HMDA | Quoted | Lenders testing every file before closing |
| ComplianceEase (SitusAMC) | Loan audits for originators, secondary-market buyers and regulators since 2001 | Quoted | Originators and investors auditing purchased loans |
| Your LOS compliance engine | Disclosure timing and fee tolerance checks inside the loan origination system | Bundled with the LOS contract | TRID timing on every file, with no extra vendor |
| ComplianceOfficer | Watches the federal regulator sites daily for changes to the rules on your register and drafts the policy update for each gap you mark. Does not scrub a LAR or test loans | $149 a month or $894 a year, published | Knowing when Reg B, Reg C, 1071 or CRA moves |
The OCC figure is worth reading twice. The regulator that examines national banks licenses the same CRA tool many of those banks run, which tells you what examiners will reproduce. It also sets a ceiling: a federal agency with nationwide examination needs paid under $100,000 a year on average across the 2014 contract, so a community lender quoted anywhere near that for one module should ask what else is in the bundle.
Geocoding is the line item to question. The FFIEC geocoder at geomap.ffiec.gov returns the census tract and demographics for a single address at no charge. Batch geocoding of a full LAR is what the paid tools add, so ask whether it is inside the quote or billed per record. For the vendor side of the same budget, see Ncontracts competitors and pricing.
Getting a quote
How much mortgage compliance software costs and what moves the quote
With no list prices, every quote is built from four numbers you already know. Send the same four to each vendor and the proposals become comparable.
1
LAR rows a year
Applications and originations, not closed loans. Pricing bands and the 60,000 quarterly line both key off it.
2
Modules
HMDA only, or CRA, fair lending regression and 1071 too. Do not buy 1071 for 2026 if you will not reach 1,000 originations.
3
Loan testing volume
Per-loan testing tools bill on files run. Count pre-closing and post-closing runs separately.
4
Integration
A direct LOS export saves the most labor. Ask who maintains the field mapping when the LOS upgrades.
The 1071 change is real money for small lenders. Under the 2023 rule a lender with 100 covered small business originations was in scope; the May 2026 rule raised that to 1,000 in each of two years. A community bank that bought a 1071 module in 2024 may now be outside the rule entirely, which is a renewal conversation worth having before the auto-renewal date. Our bank compliance software page covers the BSA/AML side of the same program.
What examiners find
HMDA reporting software exists because of orders like this one
On November 28, 2023 the CFPB fined Bank of America $12 million for reporting false HMDA demographic data: loan officers recorded that applicants had declined to give their race, ethnicity or sex without ever asking. The order ran until the CFPB terminated it on June 5, 2025, after the bank met its terms. It remains the most recent HMDA penalty we could find.
The lesson for a buyer is that HMDA errors are rarely arithmetic. They are process: who collects the demographic fields, when, and whether anyone checks. A scrubber catches a missing field; it cannot tell you that your written procedure still describes a collection step your loan officers stopped doing. That gap between the procedure and the rule is what an examiner reads first.
The other side of 2025 is that federal fair lending enforcement pulled back. A federal court vacated the Trustmark redlining judgment on May 21, 2025, and several redlining orders ended early. State regulators and attorneys general did not sign up to that shift, so a multi-state lender still answers to them.
Where ComplianceOfficer fits
Buy a HMDA tool for the register and keep the rules behind it current
Buy a loan-level tool for
LAR scrubbing, geocoding, loan testing, regression
Field edits before submission, census tracts in batch, TRID and high-cost tests on every file, and the statistics a fair lending exam asks for. Ncontracts, Wolters Kluwer, Asurity and ComplianceEase do this. We do not.
Buy ComplianceOfficer for
Knowing when Reg B, Reg C, 1071 or CRA moves
The CFPB, OCC, FDIC and Federal Reserve sources checked daily against your lending register, a status on every obligation, a policy update drafted for each gap you mark, and a dated trail to hand an examiner. The April 2026 Regulation B rule is exactly the kind of change it is built to catch.
Questions buyers ask
How much does HMDA software cost?
No major vendor publishes a price. Public records give a range: the Department of Justice paid Wolters Kluwer $10,872 a year for CRA Wiz maintenance from 2011 to 2016, the OCC paid $457,200 for CRA Wiz licenses over a base year and four option years from 2019, and bankers on BankersOnline reported QuestSoft quotes from under $1,000 to $3,500 a year in 2017. Quotes scale with LAR volume and the modules you add.
Who has to report HMDA data?
A bank, savings association or credit union is covered if it originated at least 25 closed-end mortgage loans in each of the two preceding calendar years, or at least 200 open-end lines of credit, and meets the asset, location and federal-relationship tests. For 2026 collection the asset exemption is $59 million: institutions at or below it on December 31, 2025 are exempt.
When is HMDA data due?
The loan/application register for a calendar year is due by March 1 of the following year under 12 CFR 1003.5(a). Institutions that reported at least 60,000 covered loans and applications, excluding purchased loans, for the preceding year also file quarterly, within 60 calendar days after the end of each of the first three quarters.
What is the Section 1071 compliance date?
January 1, 2028. The CFPB final rule published on May 1, 2026 replaced the old tiered dates with one date, and it applies only to lenders that originate at least 1,000 covered small business credit transactions in each of 2026 and 2027. The small business definition dropped from $5 million to $1 million in gross annual revenue.
Does ECOA still allow disparate impact claims?
Not under the CFPB's reading. Its Regulation B final rule published April 22, 2026, effective July 21, 2026, states that ECOA does not authorize disparate-impact liability and narrows what counts as discouragement. It interprets ECOA only, so the Fair Housing Act and state fair lending laws still need their own review.
Is the 2023 CRA rule in effect?
No. The 2023 rule remains enjoined and banks are examined under the CRA rules that predate it. The Fifth Circuit dismissed the OCC and FDIC appeal on July 9, 2026, and the two agencies published a new proposal on August 12, 2026 with comments due October 13, 2026. The Federal Reserve did not join it.
See which lending rules on your register moved this year
One register of the rules that apply to your institution, checked daily, with a policy update drafted for each gap you mark. $149 a month for one owner, $298 for up to three people, month to month. Compare every plan on pricing.
Related registers
- Continuous Compliance Monitoring
- Compliance Monitoring Software
- Compliance Software Cost
- Enterprise Compliance Software for CCOs and CISOs
- GRC Software and Governance Risk Compliance Software
- GDPR Compliance Software
- Compliance Automation Software
- AML Transaction Monitoring and the Rules Behind It
- SOC 2 Compliance Software Beyond Audit Readiness
- Policy Compliance Software and Policy Tracking Software
- Policy Attestation Software and Acknowledgement Tracking
- Regulatory Change Management Software, Tools and Platform
- HIPAA Compliance Software and the Security Rule Rewrite
- ISO 27001 Software for ISMS Compliance and Annex A
- Vendor Risk Management Software for Third Party Risk
- PCI Compliance Software Tied to PCI DSS 4.0.1
- Audit Management Software and the Rules Behind the Audit
- SOX Compliance
- Segregation of Duties Software
- Financial Services Compliance Software for RIAs and BDs
- 21 CFR Part 11 Compliant Software, GxP Compliance Software
- ITGC Controls Software for SOX IT General Controls Audits
- Compliance Reporting and Dashboard Software Compared by Cost
- SOX Compliance Software Prices for Six SOX 404 Tools
- Best Compliance Software in 2026, Compared
- CMMC Compliance Software for DoD Contractors
- Enterprise Risk Management Software
- Compliance Software Pricing Comparison
- Healthcare Compliance Software for OIG Compliance Programs
- Bank Compliance Software for Financial Institutions, BSA/AML
- Personal trading compliance software
- RIA Compliance Software
- Broker Dealer Compliance Software
- Hedge Fund Compliance Software
- Insurance Compliance Software
- AI Compliance Software
- AML Compliance Software, KYC and Screening Tools Compared
- Regulatory Compliance Software with Compliance Tracking
- CCPA Compliance Software, Data Privacy Management Software
- Compliance Risk Assessment Software
- AI Governance Tool, Platform and Software for US Teams
- Business Continuity Plan Software, BCM and Disaster Recovery
- SOX 404(b) Compliance Software, Requirements and Threshold
- Integrated Risk Management Software, IRM Platform and Tools
- AuditBoard Pricing and Cost 2026
- PowerDMS Pricing and Cost 2026
- Regulatory change management software pricing
- NAVEX Pricing 2026
- Hyperproof Pricing and Cost 2026
- Diligent Pricing and Diligent Boards Pricing
- OneTrust Pricing 2026
- Workiva Pricing 2026 (Wdesk)
- Drata Pricing 2026
- Vanta Pricing 2026
- Vanta Competitors and Alternatives
- Drata Competitors and Alternatives
- Secureframe Alternative for Regulatory Change
- Sprinto Alternative for Regulatory Change
- AuditBoard Competitors and Alternatives (Now Optro)
- SecurityScorecard pricing
- Global Relay pricing vs Smarsh
- Regology alternatives
- NAVEX Competitors and NAVEX Global Alternatives, Priced
- OneTrust Competitors
- Workiva Competitors and Alternatives