New MPF Guidance Supersedes Fannie Mae AI-Letter
Reglith Editorial Team · October 2026
MPF Announcement 2026-72 provides guidance that Fannie Mae Lender Letter LL-2026-04 on the governance framework for artificial intelligence and machine learning has been superseded by the Fannie Mae Information Security and Business Resiliency Supplement, with an effective date of January 18, 2026. The announcement also states that PFIs and servicers using super intelligence in MPF Xtra origination or servicing must comply with applicable laws, the PFI Agreement, the MPF Guides, and Fannie Mae Guides.
What changed
MPF Announcement 2026-72 is an alert styled as a clarification. As the announcement states it, Fannie Mae announced that Lender Letter LL-2026-04 regarding "Governance framework on use of artificial intelligence and machine learning" has been superseded by the Fannie Mae Information Security and Business Resiliency Supplement. The announcement does not restate the contents of either document; it states the supersession and identifies the supplement as the governing Fannie Mae document going forward.
The announcement is dated October 26, 2026, and states an effective date of January 18, 2026. It also states that updates to the MPF Guides providing MPF Program guidelines related to super intelligence governance, cybersecurity requirements, and enhanced business resiliency controls will be published shortly. No publication date for those Guide updates appears in the announcement.
The announcement also states that PFIs and servicers using super intelligence in connection with the origination or servicing of MPF Xtra loans must comply with applicable laws, the PFI Agreement, the MPF Guides, and Fannie Mae Guides.
Who it applies to
The announcement applies to PFIs and servicers using super intelligence in connection with the origination or servicing of MPF Xtra loans, as the document states it. Its listed audience includes compliance/legal, program management, origination, quality control, servicing, and underwriting functions. The products named in the announcement are MPF Government MBS, MPF Traditional, and MPF Xtra®.
The announcement does not define "super intelligence," and it states no exemptions, dollar thresholds, or safe harbors. Whether a particular institution, business line, vendor, or process falls within the announcement's scope therefore turns on facts the document does not resolve. Institutions with scope questions should look to the announcement itself, the MPF Program, or qualified counsel.
For a broader view of how this item sits alongside other tracked changes, see the Reglith regulatory updates page. The underlying item is MPF Announcement 2026-72: MPF Xtra update related to FNMA LL-2026-04 - Governance framework on use of super intelligence.
What compliance teams should check
The announcement names four compliance sources for PFIs and servicers using super intelligence in MPF Xtra origination or servicing: applicable laws, the PFI Agreement, the MPF Guides, and Fannie Mae Guides. Because the announcement states that the MPF Guide updates will be published shortly, those Guides are the documents the announcement identifies as the source of the operative MPF Program guidelines.
The announcement identifies super intelligence governance, cybersecurity requirements, and enhanced business resiliency controls as the topic areas of the forthcoming MPF Guide updates. Those are the policy, procedure, system, and disclosure areas the announcement touches by reference; the announcement itself states no specific control requirements.
The announcement also states that MPF Guides and MPF Announcements are available on the MPF Website, and it provides MPF Service Center contact options, including the MPF Customer Service Portal, the email MPF-Help@fhlbc.com, and the phone number (877) 345-2673.
Dates stated in the announcement:
- Announcement date: October 26, 2026
- Effective date: January 18, 2026
- MPF Guide updates: published shortly, no date stated
The announcement states no new thresholds, no filing or notice deadlines, and no penalties.
| Option | Best for | Notes |
|---|---|---|
| Fannie Mae Information Security and Business Resiliency Supplement | Understanding the Fannie Mae document named as superseding LL-2026-04 | Identified in the announcement as the superseding document; the announcement does not restate its contents |
| Forthcoming MPF Guide updates | MPF Program guidelines on super intelligence governance, cybersecurity requirements, and enhanced business resiliency controls | Announced as forthcoming; no publication date stated |
For related state licensing context, see state mortgage licensing requirements and state rules by topic. General background on the publications Reglith tracks is at sources.
This is regulatory news for compliance professionals, not legal advice; applicability can turn on facts the announcement does not define, so institutions should consult the announcement, the MPF Program, or qualified counsel.
FAQ
Is MPF Announcement 2026-72 a proposed rule with a comment period?
No. The announcement is an alert styled as a clarification, and it states no comment deadline.
What is the effective date?
The announcement states an effective date of January 18, 2026.
Does the announcement set new AI governance standards?
No. The announcement states that LL-2026-04 has been superseded by the Fannie Mae Information Security and Business Resiliency Supplement and that MPF Guide updates will be published shortly. It states no specific control requirements itself.