Logo Mortgage Compliance

What Stops An Agent From Making A Bad Call, Unsupervised

An agentic AI positioning raises the stakes. If you're about to let an agent touch condition-clearing or QC decisions, you deserve a direct answer, not a reassurance.

Logo Mortgage Security Standards

Certifications & Compliance

Held at the Flatworld Solutions group level, per our published certification pages.

SOC 2 Type II

SOC 2 Type II

Attestation covering security, availability, and confidentiality controls.

ISO/IEC 27001

ISO/IEC 27001

Information security management certification.

ISO 9001:2015

ISO 9001:2015

Quality management certification.

HIPAA & PCI DSS

HIPAA & PCI DSS

Aligned data handling practices.

Wondering whether Flatworld Mortgage Solutions LLC itself is in scope? See the FAQ below. ↓

Logo Mortgage Licensing

Nationwide Mortgage Licensing

State-by-state mortgage broker/processor licensing.

Florida
#MBR2725
New Hampshire
#1665574MBR
New York
#RMB 208918
Oklahoma
#MB018278
Texas
SML
Washington
#CL-1665574
Georgia
#61714
New Jersey
Exempt Company Registration
North Carolina
#R-180448
South Carolina
DCA
California
#60DBO-126286
Illinois
#EEP.0000103
Nationwide mortgage licensing map
Logo Mortgage Governance Framework

Human-In-The-Loop Governance

Human-in-the-Loop (HITL) is the operating principle referenced on the Platform page and in every Solutions callout: the agent handles what it can verify, a person handles what requires judgment. Here is where that principle needs to become an actual, auditable policy rather than a design intent.

Defined Decision Boundaries

Decision scope

What an agent is permitted to decide without human review, and what must always route to a HITL checkpoint.

Traceable Agentic Workflow Activity

Audit trail

How every agentic decision is logged: which document triggered it, which rule applied, and which HITL checkpoint it hit, or didn't.

Human Review Where It Matters

Human placement

Where a human reviewer sits in the loop today for each workflow named on the Platform and Solutions pages (origination, underwriting, QC), and how that scope is expected to change over time.

Controlled Data Access

Data handling

What borrower PII the platform touches, where it's stored, and how access is restricted.

Data handling framework

What "Data Handling" Needs To Answer

We haven't published detailed answers here yet. Rather than guess, here's exactly what this section will cover once our compliance team supplies the specifics:

  • What categories of borrower PII does the platform touch, for example, SSN, date of birth, income documentation, and credit report data
  • Where that data is stored, including data residency and hosting environment, and how long it's retained
  • Who, and what, has access, and whether an agent's access to PII is logged the same way as a human reviewer's access is
  • Whether any borrower data is used to train or fine-tune models, and under what consent or anonymization standard
Logo Mortgage Framework, Not Finished Policy

The four areas above are what our HITL governance covers. The finished policy, including escalation thresholds, audit log retention, model change control, and who owns override authority, is being finalized with our legal and compliance teams before we publish it as an audited commitment. If HITL governance detail is a requirement for your vendor-risk review, contact us and we'll walk you through where each workflow stands today.

Logo Mortgage Your Questions, Answered

Frequently Asked Questions

The certifications are held at the Flatworld Solutions group level. If your vendor-risk team needs the audit scope statement confirming whether Flatworld Mortgage Solutions LLC, our separately NMLS-licensed entity, is itself within scope or covered via shared infrastructure and parent-company policy, ask us directly, and we'll get you the documentation.

Security, governance, and human oversight should not be afterthoughts in mortgage automation. They should be built into how workflows are designed, managed, and scaled.

Logo Mortgage Vendor Risk & Due Diligence

Have A Vendor-Risk Questionnaire
To Work Through?

Have a vendor-risk questionnaire to work through? Send it our way. We'll provide the documentation, controls, and operational details your team needs to complete your review with confidence.