Regulatory Compliance
11 min read

QM/ATR Compliance in 2026: Automating All 8 Factors Under 12 CFR § 1026.43(c)

Complete regulatory analysis of Qualified Mortgage and Ability-to-Repay compliance. Learn how Confer automates all 8 ATR factors, TRID timer management via Temporal workflows, 7-year audit trails, and HMDA auto-population to eliminate compliance defects.

Yatin Karnik

CEO & Founder, Confer Solutions

The Consumer Financial Protection Bureau's Ability-to-Repay (ATR) rule under 12 CFR § 1026.43(c) requires lenders to verify 8 specific factors before extending mortgage credit. Qualified Mortgage (QM) loans meeting strict underwriting standards receive ATR safe harbor. Manual compliance checking fails: ACES data shows income/employment defects (directly tied to ATR) led all categories at 25% of critical defects in Q2 2025. Confer automates each of the 8 ATR factors, manages TRID timers via Temporal durable workflows, maintains 7-year immutable audit trails, and auto-populates HMDA fields — eliminating compliance defects while reducing the 7+ hours per week compliance officers spend tracking regulatory changes.

The 8 Ability-to-Repay Factors: A Regulatory Breakdown

Under 12 CFR § 1026.43(c), lenders must make a reasonable, good-faith determination of a consumer's ability to repay any residential mortgage loan. The rule requires consideration and verification of eight specific factors:

1

Current or Reasonably Expected Income or Assets

12 CFR § 1026.43(c)(2)(i)

Lender must verify current income (W-2, pay stubs, tax returns) or reasonably expected income (employment offer letters with start date). For assets, verify bank statements, investment accounts, retirement funds used to support repayment capacity.

Confer Automation: Confer's Income Agent calculates qualifying income per Fannie Mae 1084 for all income types (salary, self-employment, rental, investment, retirement). Deterministic calculations with full add-back documentation.

2

Current Employment Status

12 CFR § 1026.43(c)(2)(ii)

Verify borrower is currently employed or has documented income from other stable sources. For self-employment, verify business continuity and 2-year operating history.

Confer Automation: Instant VOE (Verification of Employment) via MCP tools. For self-employment, automated analysis of tax returns verifying 2-year business operation and income stability.

3

Monthly Payment on the Covered Transaction

12 CFR § 1026.43(c)(2)(iii)

Calculate the monthly payment for the mortgage being originated, including principal, interest, mortgage insurance, and any balloon payment.

Confer Automation: Deterministic PITIA (Principal, Interest, Taxes, Insurance, Association dues) calculation. Accounts for ARM adjustment caps, mortgage insurance requirements, and scheduled payment changes.

4

Monthly Payment on Simultaneous Loans

12 CFR § 1026.43(c)(2)(iv)

If borrower is taking out multiple loans secured by the same property (first mortgage + HELOC, or first + second), calculate combined monthly payment obligation.

Confer Automation: Multi-loan detection and combined payment calculation. Flags simultaneous loan scenarios requiring additional documentation.

5

Monthly Payment for Mortgage-Related Obligations

12 CFR § 1026.43(c)(2)(v)

Property taxes, homeowner's insurance, HOA dues, ground rent, special assessments, leasehold payments. All recurring obligations tied to the property.

Confer Automation: Automated property tax lookup via public records. Insurance quote validation. HOA fee extraction from preliminary title report or declaration documents.

6

Current Debt Obligations, Alimony, and Child Support

12 CFR § 1026.43(c)(2)(vi)

All recurring debt obligations: credit cards, auto loans, student loans, personal loans, alimony, child support. Must include debts not reported on credit if borrower has actual payment obligations.

Confer Automation: Credit report tradeline analysis. Alimony/child support extraction from divorce decrees or court orders. Cross-reference borrower-disclosed debts against credit report.

7

Monthly Debt-to-Income Ratio or Residual Income

12 CFR § 1026.43(c)(2)(vii)

Calculate DTI (total monthly debt obligations divided by gross monthly income) or, for certain programs (VA loans), calculate residual income. QM loans typically require DTI ≤ 43%.

Confer Automation: Deterministic DTI calculation: (PITIA + all monthly debts) / qualifying income. Fannie Mae/Freddie Mac guideline enforcement. Flags DTI violations before submission.

8

Credit History

12 CFR § 1026.43(c)(2)(viii)

Review borrower's credit report for payment history, derogatory accounts, collections, judgments, bankruptcies, foreclosures. Assess overall credit risk profile.

Confer Automation: Automated credit report pull and parsing. Tradeline analysis for late payments, derogatory marks, recent inquiries. Credit score trends across all three bureaus.

All 8 factors must be verified and documented. Missing verification of even one factor constitutes an ATR violation. ACES data confirms this: income and employment defects (factors 1 and 2) accounted for 25% of all critical defects in Q2 2025 — the single largest defect category. Manual compliance checking cannot keep pace with 8-factor verification across hundreds of loans per month.

Qualified Mortgage (QM) Status: The Safe Harbor

While ATR applies to all mortgage loans, Qualified Mortgage (QM) status provides legal protection. QM loans that meet specific underwriting criteria receive either:

Safe Harbor QM

Requirements: APR does not exceed APOR (Average Prime Offer Rate) by 1.5% or more (for first liens).

Protection: Conclusive presumption of ATR compliance. Borrower cannot challenge ATR compliance in litigation or regulatory examination.

Rebuttable Presumption QM

Requirements: APR exceeds APOR by 1.5%+ but meets all other QM standards.

Protection: Presumption of ATR compliance. Borrower can rebut in court, but lender has strong defense if documentation is complete.

QM Underwriting Standards

To qualify for QM status, loans must meet these criteria:

  • DTI Limit: Back-end debt-to-income ratio ≤ 43% (for agency loans following GSE guidelines, this may be higher if approved by AUS)
  • No Risky Features: Prohibited features include negative amortization, interest-only payments, balloon payments, terms exceeding 30 years
  • Points and Fees Cap: Total points and fees cannot exceed 3% of total loan amount (higher thresholds for smaller loans)
  • Income Verification: Must use tax returns, W-2s, pay stubs, or other third-party documentation (no stated income)
  • Consideration of Payment Shock: For ARMs, must qualify borrower at maximum rate during first 5 years

Confer enforces all QM standards automatically: DTI calculations flag violations before submission, loan features are validated against prohibited list, points/fees are calculated and capped, ARM payment shock scenarios are tested, and income verification uses third-party documents only.

TRID Timer Management via Temporal Workflows

The TILA-RESPA Integrated Disclosure (TRID) rule imposes strict timing requirements:

Loan Estimate (LE) Delivery: 3 Business Days

Lender must deliver Loan Estimate within 3 business days of receiving a complete application (6-piece application: name, income, SSN, property address, property value, loan amount).

Intent to Proceed: After LE Receipt

Lender cannot charge application fees (except credit report fee) until borrower indicates intent to proceed after receiving Loan Estimate.

Closing Disclosure (CD) Delivery: 3 Business Days Before Closing

Closing Disclosure must be delivered at least 3 business days before consummation (signing). If CD is mailed, add 3 business days for delivery. If significant changes occur (APR increase >0.125%, loan product change, prepayment penalty added), the 3-day clock resets.

Business Day Calculation

"Business day" for LE = calendar day except Sundays and federal holidays. "Business day" for CD = all calendar days except Sundays and federal holidays. Must account for federal holiday schedules (New Year's, MLK Jr Day, Presidents Day, Memorial Day, Independence Day, Labor Day, Columbus Day, Veterans Day, Thanksgiving, Christmas).

How Temporal Ensures Compliance

Temporal is a durable workflow orchestration engine. Unlike cron jobs or manual spreadsheet tracking, Temporal workflows:

  • Survive System Restarts: Workflow state persists across application deployments, server crashes, or infrastructure changes
  • Maintain Exact Timing: Business day calculations account for weekends, federal holidays, timezone changes
  • Provide Audit Logs: Every timer event, delivery confirmation, and reset is logged immutably
  • Enforce Deadlines: Cannot proceed to closing if CD 3-day waiting period hasn't elapsed
// Temporal Workflow Example: TRID Timer Management
workflow.start("trid_timer", {loan_id: "LN12345"})
↓ Application complete date: 2026-03-10 10:00 AM
→ LE due date: 2026-03-13 (3 business days)
↓ LE delivered: 2026-03-12 2:30 PM (email confirmation)
→ Intent to proceed received: 2026-03-13 9:00 AM
↓ Initial CD sent: 2026-03-20 (mailed, +3 days assumed delivery)
→ Earliest closing date: 2026-03-27 (3 business days after 3/23 delivery)
⚠ APR changed by 0.15% on 2026-03-25 → CD reset triggered
→ Revised CD sent: 2026-03-25
→ New earliest closing date: 2026-03-28

Manual TRID tracking fails when closing dates change, holidays aren't accounted for, or CD revisions reset timers. Temporal workflows eliminate all three failure modes with deterministic, auditable timer management.

The 7-Year Audit Trail Requirement

Regulatory retention periods require lenders to maintain complete loan files for:

  • CFPB (ATR/QM): 3 years from consummation
  • Fannie Mae/Freddie Mac: 7 years from sale or transfer of loan
  • HMDA: 3 years from submission of annual LAR (Loan Application Register)

In practice, lenders retain files for 7 years to satisfy the longest retention period (GSE requirements). The audit trail must demonstrate:

What Was Verified

  • • Income calculations with methodology
  • • Employment verification timestamps
  • • Asset documentation and sourcing
  • • Credit report pull dates and scores
  • • DTI calculation worksheets

When It Was Done

  • • Document upload timestamps
  • • MCP tool invocation logs
  • • Underwriting decision dates
  • • Condition clearing timestamps
  • • TRID delivery confirmations

Who Made Decisions

  • • Underwriter user ID and timestamp
  • • AI agent actions with confidence scores
  • • Manual overrides with justification
  • • Condition clearance approvers
  • • Final approval signatures

Why Decisions Were Made

  • • Guideline references (Fannie Mae 1084, etc.)
  • • Exception justifications
  • • Risk rating explanations
  • • Compensating factors documentation
  • • Stipulation rationale

Confer's audit trail is comprehensive and immutable. Every MCP tool call, AI agent decision, document upload, and manual action is logged with full context. When a repurchase request asks "How did you calculate this borrower's self-employment income?" the system provides the exact Fannie Mae 1084 worksheet, source tax returns, add-back justifications, trending analysis, and underwriter notes — all timestamped and traceable.

HMDA Auto-Population: Reducing Reporting Burden

The Home Mortgage Disclosure Act (HMDA) requires lenders to report 110+ data points for every loan application. Key fields include:

HMDA Field CategoryData PointsConfer Automation
Applicant DemographicsEthnicity, race, sex, ageAuto-populated from 1003 application
IncomeGross annual incomeDerived from qualifying income × 12
Loan DetailsLoan amount, purpose, type, lien statusAuto-populated from loan application
PropertyAddress, value, occupancy, property typeAuto-populated from 1003 + AVM
PricingRate, points, fees, APRAuto-calculated from pricing engine
Action Taken & DatesApplication date, approval/denial, closing dateAuto-tracked from workflow events

Manual HMDA population is error-prone. Data is re-keyed from loan files into HMDA reporting software, creating opportunities for transcription errors. Confer auto-populates all HMDA fields from the loan application and workflow events — no re-entry, no reconciliation. At year-end, the Loan Application Register (LAR) exports directly from the system with all required fields validated for completeness and accuracy.

Compliance Burden Reduction

HousingWire's 2024 report found that 60% of compliance officers spend 7+ hours per week just tracking regulatory changes — before any file-level compliance work begins. By automating QM/ATR verification, TRID timer management, audit trail generation, and HMDA population, Confer frees compliance teams to focus on policy review and exception handling instead of manual data validation.

The result: 7+ hours per week reclaimed, critical defect rates reduced (income/employment defects down from 25% industry average), and complete defensibility when regulators or GSEs request loan file documentation.

Frequently Asked Questions

YK

Yatin Karnik

CEO & Founder, Confer Solutions

Yatin Karnik spent nearly two decades as Senior Vice President at Wells Fargo Home Mortgage, where he navigated QM/ATR implementation, TRID rollout, and countless regulatory examinations. He founded Confer Solutions to eliminate compliance defects through deterministic automation and immutable audit trails.

Learn More About Yatin →

Ready to Eliminate Compliance Defects?

See how Confer automates all 8 QM/ATR factors, manages TRID timers with Temporal workflows, maintains 7-year audit trails, and auto-populates HMDA — reducing compliance burden while ensuring regulatory defensibility.