Meeting lender investor and regulatory insurance requirements at scale

An auditor doesn't want to hear that insurance was verified. They want to see it: timestamped, sourced, and consistent across every loan in the file.

For most lenders and servicers, that standard is about to get harder to meet. In March 2026, Fannie Mae issued Lender Letter LL-2026-03, a set of property insurance updates aligned with Freddie Mac and coordinated with FHFA. It acknowledges the strain of rising premiums and limited insurance availability, and it loosens some coverage requirements. It also tightens what servicers must monitor and document. Servicers are encouraged to implement the changes now and must do so by January 1, 2027, according to the August Servicing Guide update that incorporated them.

What servicers will need to do

For one- to four-unit properties, the letter's servicer-only provisions set these minimums:

• Confirm new and renewal policies. New policies are checked against insurer rating, deductible, perils, and replacement cost requirements. Renewal policies must be re-confirmed at least annually.
• Watch for coverage decreases. If a servicer can't confirm replacement cost coverage from the evidence it has, it may check whether the coverage amount has dropped from the last known amount. If it has, or the last known amount can't be determined, the servicer must take further steps and document those efforts in the loan file.
• Notify borrowers of insufficiency when a policy falls short.
• Document the method. Servicers need written procedures describing how they monitor for coverage decreases and how they resolve noncompliant policies, which can include lender-placed insurance.
• Remind borrowers annually to maintain and review their coverage, a new requirement.

The Servicing Guide also spells out the lender-placed insurance trigger: servicers must act when notified that coverage is being cancelled, non-renewed, or has lapsed.

What's loosening, and why it doesn't mean less work

On the selling side, Fannie Mae retired the requirement to document replacement cost value to verify the coverage amount, and it no longer requires roofs to be insured on a replacement cost basis. Roofs must still be insured, and the policy must otherwise provide replacement cost coverage. Actual cash value terms on personal property and non-building structures are acceptable.

That trims some origination paperwork, but it shifts the burden to reading what a policy actually says. Roof loss settlement terms can now legitimately vary, and deductibles remain capped: the Selling Guide limits deductibles to 5 percent of the coverage amount, and separate windstorm or roof deductibles count toward that total. In states with heavy wind and hail exposure, confirming those terms is a data problem, not a checkbox.

The evidence standard behind the rules

Several requirements converge on one point: you have to be able to show your work.

• Evidence retention. Under Selling Guide B7-3-07, lenders and servicers must retain acceptable evidence of insurance with enough information about the policy, property, and borrower to confirm compliance. If a lender can't determine whether a policy meets requirements, the loan isn't eligible for purchase by Fannie Mae. Electronic data files can substitute for hard-copy policies if they carry enough information to support monitoring.
• Servicing records. Under Regulation X section 1024.38, servicers must keep policies and procedures reasonably designed to meet servicing objectives, retain records of actions taken until one year after a loan is discharged or servicing transfers, and maintain documents and data so a servicing file can be compiled within five days.
• Lender-placed insurance data. Under Servicing Guide B-6-01, servicers must provide documentation or data on lender-placed insurance activity within 30 days of Fannie Mae's request.

Five days. Thirty days. If evidence is scattered across email, imaging systems, and vendor portals, those windows get tight fast.

Where self-reported documents fall short

Documents were never designed to be audit evidence at portfolio scale:

• No provenance. A PDF shows what someone uploaded, not where it came from or when it was retrieved.
• Hard to compare. The coverage-decrease test depends on comparing today's coverage amount with the last known amount. That's difficult across declarations pages whose layouts vary by carrier.
• Inconsistent at scale. Manual review across thousands of loans every renewal cycle produces the variation auditors find. 

What an audit-ready workflow looks like

A compliance-ready process doesn't need to be complicated, but it does need to be systematic:

• Capture structured policy data at origination as the baseline.
• Re-verify at each renewal and compare against the last known values.
• Receive alerts on cancellations, non-renewals, lapses, and coverage changes for continuous insurance monitoring.
• Route exceptions through a documented workflow: borrower notice, outreach, resolution, and lender-placed insurance as a last resort.
• Retain a record of every check and action, retrievable on request.
• Map data fields to requirements, such as coverage amount, deductible, perils, roof loss settlement, and mortgagee, and ask any vendor which of them it returns.

Making the data do the compliance work

MeasureOne's homeowners insurance verification retrieves policy information with the borrower's permission, either through a connected insurance account or an uploaded policy document, and delivers structured data into lender systems. Insurance monitoring then sends updates when a policy is altered, cancelled, lapses, or renews, and intelligent document processing converts uploaded documents into usable data. That structure is what makes it possible to build the consistent, sourced record auditors expect, in place of a folder of PDFs.

Lenders should still confirm how a vendor's data fields, timestamps, and retention practices fit their own audit and record-keeping requirements, and compliance teams should verify how these rules apply to their portfolios. This post isn't legal advice.

The January 1, 2027 deadline is a policy change on paper, but in practice it's a documentation project. Servicers that treat it that way, and build monitoring and recordkeeping into their workflow now, will be in the strongest position when the first audit request arrives. In the final post of this series, we'll look further ahead at where mortgage risk is heading and what predictive insurance intelligence could mean for lenders and insurers alike.