Free tool · 18 checks

Free mortgage website compliance checklist

Answer 18 questions about any loan officer or broker website. You'll get a score, the items to fix first, and the public rule behind each one. Educational, not legal advice.

0%

Answer the questions below

0 of 18 answered · weighted by risk

01 Identity & licensing

Is your individual NMLS ID shown on the site (footer or profile) and on ads? High priority

Why it matters & how to fix

Under the SAFE Act framework, state rules require a loan originator's unique NMLS identifier on solicitations and advertisements, websites included.

Fix: Add "NMLS ID ######" next to your name in the footer, on your bio page and on the contact page.

Source: SAFE Act / Regulation G & H (12 CFR 1007, 1008)

Is your company's legal or trade name and company NMLS ID shown? High priority

Why it matters & how to fix

Borrowers and regulators need to see which licensed company you originate for. Most companies dictate the exact wording.

Fix: Add the company name and company NMLS ID to the footer block, using your company's approved wording.

Source: SAFE Act / Regulation G & H (12 CFR 1007, 1008)

Are your licensed states listed, and only states you're actually licensed in?

Why it matters & how to fix

Advertising to borrowers in a state where you aren't licensed is a common exam finding. Licenses change; the site must keep up.

Fix: List licensed states (or link to your NMLS Consumer Access record) and remove any you no longer hold.

Source: NMLS Consumer Access

Do your NMLS IDs link to NMLS Consumer Access so borrowers can verify them?

Why it matters & how to fix

Not always required, but it is the easiest way to let borrowers verify your license, and many companies ask for it.

Fix: Link "NMLS ID" to nmlsconsumeraccess.org.

Source: NMLS Consumer Access

Does the site include any state-specific license statements your states require?

Why it matters & how to fix

Some states require particular license wording or regulator details in advertising. Requirements vary by state and change.

Fix: Ask your compliance team for each state's required statement and add it to the disclosures page or footer.

Source: SAFE Act / Regulation G & H (12 CFR 1007, 1008)

02 Fair lending

Does every page show Equal Housing Opportunity (or Equal Housing Lender) text or the official logo? High priority

Why it matters & how to fix

Fair housing advertising guidance expects the equal housing statement or logo; most lenders require it on all marketing.

Fix: Add "Equal Housing Opportunity" (or your company's required wording) to the site-wide footer.

Source: HUD Fair Housing advertising (24 CFR Part 110)

Is all wording and imagery free of preferences for or against any protected group?

Why it matters & how to fix

Fair lending laws prohibit discouraging applicants on a prohibited basis — including through ad language or who appears (or never appears) in images.

Fix: Remove phrases like "perfect for young families" and use varied, representative imagery.

Source: HUD Fair Housing advertising (24 CFR Part 110)

03 Advertising & trigger terms

If any page mentions a down payment %, number of payments, term, or payment/finance charge amount, does it also give the full required disclosures? High priority

Why it matters & how to fix

Under Regulation Z §1026.24(d), these "trigger terms" require the down payment, terms of repayment and APR to be disclosed too.

Fix: Remove the trigger term, or add the full disclosures right beside it — and have compliance approve.

Source: CFPB Regulation Z §1026.24 (advertising)

If a rate is shown, is it stated as an APR (with the APR at least as prominent)? High priority

Why it matters & how to fix

Regulation Z §1026.24(c) requires that a rate of finance charge be stated as an annual percentage rate.

Fix: Show the APR with any rate, or remove rates from the site and talk about programs instead.

Source: CFPB Regulation Z §1026.24 (advertising)

Is the site free of misleading claims (e.g. "fixed" without the period, "lowest rates", implying government endorsement)? High priority

Why it matters & how to fix

Regulation Z §1026.24(i) lists misleading terms for closed-end credit ads, and Regulation N prohibits misrepresentations in mortgage advertising.

Fix: Remove superlatives and government-affiliation wording; describe programs accurately.

Source: CFPB Regulation N (Mortgage Acts and Practices — Advertising)

Are there no outdated rate or payment examples anywhere (old blog posts, flyers, images)?

Why it matters & how to fix

An example that was accurate last year can be misleading today, and images are easy to forget.

Fix: Search the site and PDFs for "%" and "$" in rate or payment contexts; remove or update with dated, approved disclosures.

Source: CFPB Regulation Z §1026.24 (advertising)

Do calculators say they are estimates for education, not an offer or a commitment to lend?

Why it matters & how to fix

Calculator results can look like quotes. A clear disclaimer sets expectations and many compliance teams require it.

Fix: Add a short disclaimer under each calculator and keep default inputs neutral.

Source: CFPB Regulation Z §1026.24 (advertising)

04 Privacy & consent

Is a privacy policy linked from every page and next to every form?

Why it matters & how to fix

State privacy laws (such as California's CCPA/CPRA) require notice at collection; the GLBA privacy rules also apply to financial institutions' customer data.

Fix: Link the privacy policy beside every submit button and in the footer.

Source: California Attorney General — CCPA

Do forms that lead to calls or texts include clear consent language? High priority

Why it matters & how to fix

The TCPA restricts automated calls and texts without the right consent. Clear, separate consent language protects both you and the borrower.

Fix: Add a consent statement (and an unchecked box) that names the ways you'll contact them and says consent isn't required to buy.

Source: FCC — Telephone Consumer Protection Act

Do analytics and ad pixels wait for consent where required?

Why it matters & how to fix

Several US state privacy laws give opt-out rights over tracking and "sharing"; a consent banner that actually blocks scripts is the simplest way to respect them.

Fix: Use a consent tool that blocks analytics/pixels until the visitor agrees, and offer an opt-out link.

Source: California Attorney General — CCPA

05 Trust & accessibility

Are all testimonials genuine, from real customers, and not paid or edited to mislead?

Why it matters & how to fix

The FTC's rule on consumer reviews and testimonials (16 CFR Part 465) bans fake or misleading reviews.

Fix: Show only real reviews with source and date; label any illustration as a sample.

Source: FTC rule on consumer reviews and testimonials (16 CFR Part 465, eCFR)

Can the site be used with a keyboard, with readable contrast and alt text?

Why it matters & how to fix

Accessibility complaints and demand letters reach mortgage sites too, and an accessible site is easier for every borrower.

Fix: Aim for WCAG 2.2 AA: keyboard access, contrast, alt text, form labels and an accessibility statement.

Source: W3C — WCAG 2.2

Has your company's compliance or marketing team approved the current version?

Why it matters & how to fix

Most lenders and brokers require approval of LO marketing, and keeping a record of what was approved helps in an exam.

Fix: Send the current site and disclosure list for approval and keep the approval email.

Source: SAFE Act / Regulation G & H (12 CFR 1007, 1008)

Keep a copy

Email yourself these results

We'll send your answers and the list of fixes, so you can forward it to your compliance team. We'll also offer — once — to rebuild the site for you. That's it.

Your checklist answers are added to the message only if you send this form.

We use this only to answer you. No selling, no spam. Privacy policy · reply within 4 business hours.

About this checklist

We wrote this list from the public rules mortgage advertising is checked against — the SAFE Act framework, Regulation Z §1026.24, Regulation N, HUD's fair housing advertising guidance, the TCPA, state privacy law and the FTC's rule on reviews — and from what compliance teams typically ask us to change. It is not exhaustive, it is not legal advice, and it doesn't replace your company's policies. State requirements vary and change.

Last reviewed 2026-10-19. Found something that should be on the list? Tell us.

Spiral notebook and pen ready for a checklist

FAQ

Compliance checklist questions

What does a mortgage website need to be compliant?

At a minimum most need: your individual NMLS ID and your company's name and NMLS ID, accurate licensed-state information, an Equal Housing Opportunity statement or logo, no trigger terms without full Regulation Z disclosures, a privacy policy, and consent language on forms that lead to calls or texts. Your company and states may require more.

Is this checklist legal advice?

No. It is an educational tool that GetsMortgageNow uses as a quality pass on the sites we build. Rules vary by state and by company. Your compliance team or counsel has the final word.

Does the tool scan my website automatically?

No — you answer each question about the site you're checking. That keeps it honest: many items (like "only licensed states listed") need a human who knows your licenses.

Is my answer data saved?

Your answers stay in your browser on this page. Nothing is sent unless you choose to email yourself the results with the form at the bottom.

Launch day in 5 business days

Want a site that passes before launch day?

Every site we build goes through this checklist on Day 1, and your compliance team gets a packet on Day 3.

No payment on the form · Monthly plans cancel any time · Reply within 4 business hours