# License Loan Underwriting and Credit Decision Data for AI

> How lenders and credit unions can license credit memos, underwriting files and loan outcomes for AI training, and the GLBA, ECOA and exam limits.

Canonical: https://origindatapartners.com/guides/license-loan-underwriting-decision-data-ai
By: Origin Data Partners
Status: Published
Published: 2026-11-12
Updated: 2026-11-12
Sources checked: 2026-11-12

## Quick answer

A lender can sometimes license its underwriting decision records for AI training, but only as de-identified records with account numbers and customer identities removed. Credit memos, exception approvals and the repayment outcome that followed are what buyers want: a decision linked to its result. Regulation P limits sharing consumer financial information, ECOA and Regulation B apply to any model built on credit decisions, and examination reports belong to the regulator, not the lender.

## Key points

- The valuable record is a credit decision tied to how the loan actually performed.
- Account numbers, names, addresses and other identifiers never go in.
- Regulation P covers consumer borrowers; business, commercial and agricultural borrowers fall outside it, but contracts still apply.
- Supervisory information, such as exam reports, stays out: the regulator owns it.
- Fair-lending rules apply to credit decisions whatever technology makes them.

## Can a lender license loan underwriting data for AI?

Yes, in a narrow form. AI developers building agents for financial work want to see how credit decisions are made and how they turn out. Mercor lists "Finance & Insurance Statements, underwriting files, claims" among the data it seeks ([Mercor](https://www.mercor.com/data/)), and micro1 lists finance workflows including "reconciliations, approvals, reporting workflows" ([micro1](https://company.micro1.ai/register/?referralCode=24823479-4339-4311-a157-2600b8cf72cf&utm_source=referral&utm_medium=share&utm_campaign=job_referral)).

The reason is the shape of the record. Springbolt Group, an advisory firm, describes the most valuable category as "Data that captures a real decision, the context around it, and what happened afterward." ([Springbolt](https://springboltgroup.com/what-ai-labs-pay-for-enterprise-data/)). A loan file is exactly that: an application, an analysis, a decision with conditions, and years of payment history that show whether the decision was right.


## Which lending records are useful for AI

Lenders hold several record sets. The table shows what each teaches and what has to come out first.

| Record set | What it holds | What has to come out |
| --- | --- | --- |
| Credit memos and underwriting narratives | The analyst's reasoning: cash flow, collateral, risks and mitigants | Borrower and guarantor names, addresses, tax IDs, account numbers |
| Underwriting files and checklists | Documents reviewed, conditions set, verifications done | Statements, pay stubs and IDs; keep the checklist and the conditions |
| Exception approvals | Requests to go outside policy, who approved and why | Names of borrowers; replace approvers with roles |
| Credit committee minutes | Debate, votes and conditions on larger loans | Identifiers and any supervisory findings |
| Servicing and collections outcomes | Payment history, modifications, delinquency, charge-off or payoff | Account numbers and contact details |
| Policies and procedures | Credit policy, pricing rules, workflow guides | Usually little; often the easiest place to start |
| Equipment-finance files | Asset details, residual assumptions, vendor programs, end-of-term results | Vendor and lessee identities if contracts make them confidential |


## GLBA and Regulation P: what they say

Regulation P implements the privacy rules of the Gramm-Leach-Bliley Act for most lenders. It "applies only to nonpublic personal information about individuals who obtain financial products or services primarily for personal, family, or household purposes", and it "does not apply to information about companies or about individuals who obtain financial products or services for business, commercial, or agricultural purposes." ([12 CFR 1016.1](https://www.consumerfinance.gov/rules-policy/regulations/1016/1/)). So consumer and mortgage files sit inside it; commercial and equipment-finance files mostly do not, though loan agreements and confidentiality clauses still apply.

What it protects is broad. Personally identifiable financial information includes information "About a consumer resulting from any transaction involving a financial product or service between you and a consumer" ([12 CFR 1016.3](https://www.consumerfinance.gov/rules-policy/regulations/1016/3/)). Before disclosing such information to a nonaffiliated third party, "you may not, directly or through any affiliate, disclose any nonpublic personal information about a consumer to a nonaffiliated third party unless" notice and opt-out conditions are met ([12 CFR 1016.10](https://www.consumerfinance.gov/rules-policy/regulations/1016/10/)). Section 1016.11 sets "Limits on redisclosure and reuse of information." ([12 CFR 1016.11](https://www.consumerfinance.gov/rules-policy/regulations/1016/11/)).

The definition also marks the way through. Personally identifiable financial information does not include "Information that does not identify a consumer, such as aggregate information or blind data that does not contain personal identifiers such as account numbers, names, or addresses." ([12 CFR 1016.3](https://www.consumerfinance.gov/rules-policy/regulations/1016/3/)). Separately, section 1016.12 bars disclosing "an account number or similar form of access number or access code for a consumer's credit card account, deposit account, share account, or transaction account to any nonaffiliated third party for use in telemarketing, direct mail marketing, or other marketing" ([12 CFR 1016.12](https://www.consumerfinance.gov/rules-policy/regulations/1016/12/)). Whether a given data set counts as blind data is a question for your counsel.

- Account numbers, card numbers and access codes never go in, in any form.
- Names, addresses, Social Security numbers, tax IDs, dates of birth, phone numbers and emails come out of fields and free text.
- Property addresses and exact loan amounts can identify a borrower; generalize them.
- Replace borrowers with stable tokens so one borrower's history still links across years.


## ECOA and fair-lending concerns

Regulation B, which implements the Equal Credit Opportunity Act, states: "A creditor shall not discriminate against an applicant on a prohibited basis regarding any aspect of a credit transaction." ([12 CFR 1002.4](https://www.consumerfinance.gov/rules-policy/regulations/1002/4/)). It reaches business lending too; section 1002.9 sets rules "For business credit" notifications ([12 CFR 1002.9](https://www.consumerfinance.gov/rules-policy/regulations/1002/9/)).

The CFPB has said the requirements "apply equally to all credit decisions, regardless of the technology used to make them", and that "ECOA and Regulation B do not permit creditors to use complex algorithms when doing so means they cannot provide the specific and accurate reasons for adverse actions." ([CFPB Circular 2022-03](https://www.consumerfinance.gov/compliance/circulars/circular-2022-03-adverse-action-notification-requirements-in-connection-with-credit-decisions-based-on-complex-algorithms/)). These rules bind creditors that use models, not the lender licensing past records. But a buyer training a credit model on your decisions inherits any pattern in them, and your name may be attached to the data set. Questions to settle with counsel and the buyer:

- Remove demographic and monitoring fields collected for fair-lending reporting.
- Remove proxies that could stand in for a protected characteristic, such as exact address, where possible.
- Ask how the buyer will use the data: to build agents that do underwriting work, or to train a credit scoring model.
- Ask for a contract term limiting use to the purposes you agree.


## Examination findings and supervisory information stay out

Exam reports and supervisory letters are not the lender's to license. For the Federal Reserve, "All confidential supervisory information and other nonpublic information, including but not limited to information made available under this subpart, remains the property of the Board", and no one holding it "may use any such information for an unauthorized purpose or disclose any such information without the prior written permission of the General Counsel" ([12 CFR 261.20](https://www.ecfr.gov/current/title-12/chapter-II/subchapter-A/part-261/subpart-C/section-261.20)). For national banks, "All non-public OCC information made available pursuant to this paragraph is OCC property", and possession of it "does not constitute a waiver by the OCC of its right to control, or impose limitations on, the subsequent use and dissemination of the information" ([12 CFR 4.37](https://www.ecfr.gov/current/title-12/chapter-I/part-4/subpart-C/section-4.37)).

The FDIC, NCUA and state regulators have their own rules; ask counsel which apply to you. In practice, search credit memos, committee minutes and board packs for references to exam findings, matters requiring attention and regulator correspondence, and take them out.


## What lending records are worth

No buyer publishes a price for lending records specifically. General company data programs publish ranges: micro1 "payments typically ranging from $100K to over $3M" ([micro1](https://company.micro1.ai/register/?referralCode=24823479-4339-4311-a157-2600b8cf72cf&utm_source=referral&utm_medium=share&utm_campaign=job_referral)) and Handshake AI "$100K to $4M+ payouts" ([Handshake AI](https://joinhandshake.com/ai/data-partnerships/license/)). These are published ranges, not offers.

| Raises value | Lowers value |
| --- | --- |
| Decision linked to repayment, modification or loss | Approvals with no performance history |
| Credit memo reasoning in full text | Scores and fields only |
| Exceptions, declines and conditions kept | Only approved, clean files |
| Many years across a credit cycle | A short period with no downturn |
| Commercial or equipment files outside Regulation P | Consumer files that cannot be de-identified |


## How to prepare

Related: [mortgage lenders in the United States](https://origindatapartners.com/sell-company-data/united-states/mortgage-lenders), [transaction data](https://origindatapartners.com/guides/license-transaction-data-ai-training), [insurance claims](https://origindatapartners.com/guides/sell-insurance-claims-data-ai) and [which training data holds its value](https://origindatapartners.com/guides/ai-training-data-that-holds-value).

- Pick one product, such as equipment leases or small-business loans, and one span of years.
- Count files, and note what share have a known outcome.
- List where identifiers sit: core system fields, scanned documents, memo text.
- Check loan agreements, participations and servicing agreements for confidentiality terms.
- Flag any file that references supervisory findings.
- Ask counsel whether your consumer files can meet the Regulation P blind data standard.


## Next step

This page states what each rule says and where to read it. It is not legal advice: your counsel decides how the rules apply to your records.

Does your company hold records like these? [See what your data is worth](https://origindatapartners.com/check-fit).

Origin Data Partners works with companies that own data and helps get it bought. We are independent of the services on this page, and a buyer may pay us when a deal closes ([how Origin is paid](https://origindatapartners.com/referral-disclosure)). [See what your data is worth](https://origindatapartners.com/check-fit).


## Questions and answers

### Can a bank sell loan data to AI companies?

Only in de-identified form and within the rules. Regulation P limits disclosing consumer financial information to nonaffiliated third parties, but excludes blind data without identifiers such as account numbers, names or addresses. Counsel decides whether a data set qualifies.

### Does GLBA apply to commercial loan files?

Regulation P says it does not apply to information about companies or individuals who obtain credit for business, commercial or agricultural purposes. Loan agreements and confidentiality terms still apply.

### Which underwriting records do AI buyers want?

Credit memos, underwriting files, exception approvals and committee minutes linked to how each loan performed. Mercor lists underwriting files among target finance data.

### Can we include exam reports or regulator letters?

No. Federal Reserve and OCC rules say confidential supervisory information remains the regulator's property and cannot be disclosed without permission.

### Does ECOA affect licensing past credit decisions?

Regulation B binds creditors, and the CFPB says it applies to all credit decisions regardless of technology. A buyer training on your decisions inherits their patterns, so remove demographic fields and agree permitted uses.

### How much is lending data worth?

No buyer publishes a lending-specific price. General programs publish $100K to over $3M (micro1) and $100K to $4M+ (Handshake AI); value rises with outcomes, reasoning text and years of history.

## Sources

- [CFPB: Regulation P, 12 CFR 1016.1 (purpose and scope)](https://www.consumerfinance.gov/rules-policy/regulations/1016/1/)
- [CFPB: Regulation P, 12 CFR 1016.3 (definitions)](https://www.consumerfinance.gov/rules-policy/regulations/1016/3/)
- [CFPB: Regulation P, 12 CFR 1016.10 (limits on disclosure to nonaffiliated third parties)](https://www.consumerfinance.gov/rules-policy/regulations/1016/10/)
- [CFPB: Regulation P, 12 CFR 1016.11 (limits on redisclosure and reuse)](https://www.consumerfinance.gov/rules-policy/regulations/1016/11/)
- [CFPB: Regulation P, 12 CFR 1016.12 (account number sharing)](https://www.consumerfinance.gov/rules-policy/regulations/1016/12/)
- [CFPB: Regulation B, 12 CFR 1002.4 (general rules)](https://www.consumerfinance.gov/rules-policy/regulations/1002/4/)
- [CFPB: Regulation B, 12 CFR 1002.9 (notifications, including business credit)](https://www.consumerfinance.gov/rules-policy/regulations/1002/9/)
- [CFPB Circular 2022-03: adverse action and complex algorithms](https://www.consumerfinance.gov/compliance/circulars/circular-2022-03-adverse-action-notification-requirements-in-connection-with-credit-decisions-based-on-complex-algorithms/)
- [12 CFR 261.20: Federal Reserve confidential supervisory information (eCFR)](https://www.ecfr.gov/current/title-12/chapter-II/subchapter-A/part-261/subpart-C/section-261.20)
- [12 CFR 4.37: non-public OCC information (eCFR)](https://www.ecfr.gov/current/title-12/chapter-I/part-4/subpart-C/section-4.37)
- [Mercor: data monetization](https://www.mercor.com/data/)
- [micro1: Company Data Partnerships](https://company.micro1.ai/register/?referralCode=24823479-4339-4311-a157-2600b8cf72cf&utm_source=referral&utm_medium=share&utm_campaign=job_referral)
- [Handshake AI: data partnerships](https://joinhandshake.com/ai/data-partnerships/license/)
- [Springbolt Group: What AI labs actually pay for](https://springboltgroup.com/what-ai-labs-pay-for-enterprise-data/)

## Related reading

- [/sell-company-data/united-states/mortgage-lenders](https://origindatapartners.com/sell-company-data/united-states/mortgage-lenders)
- [Licensing payments and transaction data to AI companies](https://origindatapartners.com/guides/license-transaction-data-ai-training)
- [Can you sell insurance claims data to AI companies?](https://origindatapartners.com/guides/sell-insurance-claims-data-ai)
- [How to de-identify company data before licensing it](https://origindatapartners.com/guides/de-identify-company-data-before-licensing)
- [Can investment firms license deal and credit data to AI companies?](https://origindatapartners.com/guides/license-deal-data-investment-firms)
- [Which AI Training Data Holds Its Value in 2026?](https://origindatapartners.com/guides/ai-training-data-that-holds-value)
- [Non-Bank Lender Loan Data for AI: What Buyers Want](https://origindatapartners.com/guides/non-bank-lender-loan-file-data)
- [/glossary/loan-tape](https://origindatapartners.com/glossary/loan-tape)
- [Loan Tape Template: Fields, Example and Format](https://origindatapartners.com/guides/loan-tape-template)
- [License Audit Workpapers for AI: What Firms Can Share](https://origindatapartners.com/guides/license-audit-workpapers-ai)
- [License Insurance Underwriting Files to AI Companies](https://origindatapartners.com/guides/license-insurance-underwriting-files-ai)
- [/case-studies](https://origindatapartners.com/case-studies)
- [/refer](https://origindatapartners.com/refer)
- [/case-studies/financial-services-firm-data-license-835000](https://origindatapartners.com/case-studies/financial-services-firm-data-license-835000)
- [/case-studies/neobank-data-license-375000](https://origindatapartners.com/case-studies/neobank-data-license-375000)
- [/case-studies/mortgage-lender-loan-data-1-15-million](https://origindatapartners.com/case-studies/mortgage-lender-loan-data-1-15-million)