# Your Subservicer's Calls Become Your Exam Findings: Overseeing a Mortgage Subservicer When You Can Review Every Call and Letter

*November 10, 2026 · 5 min read · Pranay Shetty*

> A bank or IMB that owns servicing rights and outsources the work keeps the regulatory liability, and most oversight programs still run on the subservicer's own scorecard, an annual audit and a sampled call file. What changes when the owner can score every call and every letter against Regulation X, Regulation F, UDAAP and its own procedures, what the contract has to say first, and what we learned codifying hundreds of SOP documents for a lender's call review.

## Who This Is For

Heads of Servicing and servicing oversight at banks, credit unions and independent mortgage banks that own mortgage servicing rights and pay a subservicer to do the work. Also vendor management leads and Chief Compliance Officers, who sign the oversight report that goes to the board.

## The Work Moves, the Liability Does Not

Retaining servicing rights and outsourcing the servicing is a common structure, and for good reasons. The owner keeps the asset and the borrower relationship and avoids building a servicing platform. What the owner cannot outsource is the obligation. The CFPB's [Compliance Bulletin and Policy Guidance 2016-02](https://www.consumerfinance.gov/compliance/supervisory-guidance/compliance-bulletin-and-policy-guidance-2016-02-service-providers/) says plainly that using a service provider does not absolve a supervised entity of responsibility for complying with federal consumer financial law, and it expects ongoing monitoring of the provider's compliance, not only diligence at onboarding. Regulation X makes the same expectation specific to servicing. Under [12 CFR 1024.38(b)(3)](https://www.consumerfinance.gov/rules-policy/regulations/1024/38/), a servicer's policies and procedures have to be reasonably designed to "provide appropriate servicing personnel with access to accurate and current documents and information reflecting actions performed by service providers" and to "facilitate periodic reviews of service providers."

So when an examiner looks at the owner, the subservicer's calls are in scope. A loss mitigation acknowledgment that went out late, or a collector who told a borrower the foreclosure sale could not be stopped when it could, becomes the owner's finding.

## What Oversight Usually Looks Like

The typical program has a few parts. The subservicer sends a monthly scorecard of service-level and compliance metrics it measured itself. There is an annual on-site review, and the subservicer provides its SOC 1 report. And the owner's oversight analyst listens to a sample of calls, often a few dozen a month out of tens of thousands, and reads a sample of letters.

Each part is reasonable and each has the same weakness. The scorecard is self-reported. The audit is annual. The sample is small enough that a problem confined to one site, one script or one shift can run for months without appearing in it. The owner learns about it from a complaint trend, or from the examiner.

We know what a sample-based review looks like from the inside because we replaced one. At [Better Mortgage](/case-study/sei-x-ny-mortgage-lender), the loan-officer call review was at the ceiling of what reviewers could do by hand, about four calls a day, against a backlog of more than 1,000. After we put the call review on every call, a full month of calls scored in under an hour, with no sampling, and analyst productivity went up four times. That was origination conduct rather than servicing, but the shape of the problem is the same, and so was the hardest part of the work, which is the subject of the next section.

## The Hard Part Is Writing Down What "Compliant" Means Here

Scoring a call is easy once you know what the call is being scored against. At Better, that meant codifying hundreds of their own SOP documents, plus UDAAP, TILA, RESPA and Fair Housing, into the [Rulebook](/how-it-works#rulebook). The documents disagreed with each other in places. Older procedures had never been retired. And the edge cases, the calls a senior reviewer would know were fine despite looking wrong, lived in reviewers' heads rather than in any document. Writing them down, getting compliance to rule on each conflict, and versioning the result took longer than any of the technical work, and it was the most useful thing that came out of the project, because the lender now has one written standard that any reviewer, person or agent, applies the same way.

Subservicing adds a layer, because there are two sets of procedures. The subservicer has its own, written for every client. The owner has its own requirements, sometimes stricter: a shorter callback window, a hardship script for a specific population, a prohibition on certain fee waivers without approval. Which governs is a contract question, and we encode the answer explicitly. Each rule in the owner's Rulebook carries its source (Regulation X, Regulation F, the investor guide, the subservicing agreement, the owner's SOP) and the precedence the contract sets, so a finding says which standard was missed and why that standard applies.

## What Gets Scored on Every Call and Letter

The [Compliance Manager](/for-servicers/compliance-manager) scores servicing and collections conversations and the written notices that follow them. On the servicing side, the timing rules in Regulation X do most of the work, because they can be checked against dates:

- An acknowledgment of a loss mitigation application within five business days of receipt, under [1024.41(b)(2)](https://www.consumerfinance.gov/rules-policy/regulations/1024/41/), and an evaluation within 30 days of a complete application received more than 37 days before a scheduled sale.
- An acknowledgment of a notice of error within five business days, under [1024.35(d)](https://www.consumerfinance.gov/rules-policy/regulations/1024/35/).
- Live contact, or good-faith efforts at it, by the 36th day of delinquency under 1024.39.
- What was said about foreclosure status while a complete application was under review, which is where dual-tracking problems show up in conversation before they show up in a file.

On calls, each finding is cited to the timestamp. On letters, the agent checks content against the requirement and checks the date against the date the triggering document arrived. That second check is where letter review earns its keep, because a well-written acknowledgment sent on day eight is still late. The received date comes from the indexed mail: when the subservicer's correspondence feed or the owner's own [Indexing Manager](/for-servicers/indexing-manager) records the day a hardship package or a notice of error landed, the clock starts there, not on the day someone opened it.

Collections conversations are scored against Regulation F and the FDCPA where the subservicer is acting as a debt collector, and against TCPA consent and calling-hours rules on every outbound call. UDAAP sits across all of it, and is the standard most often missed in conversation rather than in a letter, because it lives in how a representative describes a borrower's options.

## What the Owner Sees That a Sample Never Shows

Complete coverage changes the questions an oversight team can ask. Instead of "did the calls we pulled pass," the questions become: which site has a late-acknowledgment rate twice the others, which script produces foreclosure-status findings, which representatives account for most of the UDAAP flags, and whether last month's fix actually moved the number. Complaints from the CFPB Consumer Response portal, which we wrote about in our post on [complaint handling timelines](/blog/cfpb-consumer-response-portal-ai-complaint-handling-15-60-day), are trended beside the call findings, so a complaint pattern can be traced to the calls behind it.

The output is evidence the owner can hand to the subservicer: the call, the timestamp, the rule, the source of the rule. That changes the oversight conversation. A subservicer can dispute a scorecard metric. It is much harder to dispute a recording.

## What the Contract Has to Say First

None of this works if the owner cannot get the data, and this is the step most owners underestimate. Before anything is scored, the subservicing agreement needs to give the owner access to call recordings, letter images and servicing notes for its loans, in a usable format, on a schedule measured in days. Many older agreements give audit rights and reports, not raw recordings. The 1024.38(b)(3) language about access to documents reflecting the provider's actions is a good anchor for that negotiation, because it frames access as something the owner's own regulation requires.

The recordings are borrower data, so they arrive under the owner's information security program and its [GLBA Safeguards Rule](/blog/glba-safeguards-rule-ai-vendors-banks-non-banks) obligations, and our access to them is governed by the owner's vendor review like any other provider's.

When the owner changes subservicers, the transfer is its own risk point. The [Loan Boarding Agent](/for-servicers/loan-boarding-agent) reconciles the outgoing subservicer's transfer file against the documents behind each loan and groups exceptions by cause, which is how a mapping defect that touches thousands of loans gets found once instead of once per loan. The CFPB's [2020 guidance on servicing transfers](https://files.consumerfinance.gov/f/documents/cfpb_policy-guidance_mortgage-servicing-transfers_2020-04.pdf) is a useful checklist for what that reconciliation has to cover, and our post on [Regulation X 1024.33 transfers](/blog/respa-servicing-transfer-reg-x-1024-33-ai-servicing-agent) goes through it.

## Where the Agent Stops

The agent scores and evidences. It does not direct the subservicer's staff, it does not decide whether a pattern is a contract breach, and it does not decide remediation. Those decisions belong to the owner's oversight team and, through the contract, to the subservicer's management. What changes is what the oversight team walks into the monthly governance meeting with: every call and every letter for the month, scored against one written standard, with the moments behind each finding, instead of a scorecard the subservicer graded itself.

---

_Source: [https://www.seiright.com/blog/subservicer-oversight-mortgage-servicing-rights-owner-ai-call-letter-review-reg-x-1024-38](https://www.seiright.com/blog/subservicer-oversight-mortgage-servicing-rights-owner-ai-call-letter-review-reg-x-1024-38) · Sei AI_