Before you give a lender’s AI mortgage assistant a pay stub, bank statement, tax return, Social Security number, or detailed financial question, establish what the system collects, why it uses the information, who can access it, how long it keeps it, and what happens if something goes wrong. Treat the assistant as a data-processing service connected to a mortgage workflow—not as a private chat window.
The questions below are designed for a prospective borrower. Ask them in the chat if a human can answer, then request the current written privacy notice, vendor disclosures, and any AI-specific terms. If the answer in the conversation conflicts with the documents, pause before uploading sensitive material and ask the lender to resolve the mismatch.
As an Amazon Associate I earn from qualifying purchases.
Why mortgage-assistant privacy deserves extra scrutiny
Mortgage applications contain information that can identify you, describe your finances, and reveal the transaction you are pursuing. Under the Gramm-Leach-Bliley Act (GLBA), examples of nonpublic personal information (NPI) include information supplied to obtain a financial product, data from a transaction, and information collected while providing the service. A prompt that mentions your income, debts, planned down payment, property address, or credit history can therefore be sensitive even if it does not contain a formal application number.
Recommended Free Tools
The Federal Trade Commission (FTC) says GLBA applies to financial institutions that offer loans. Covered institutions must explain their information-sharing practices and safeguard sensitive data. FTC Safeguards Rule guidance specifically lists mortgage lenders and mortgage brokers among examples of financial institutions and describes written security programs using administrative, technical, and physical safeguards. Whether a particular lender, broker, technology company, or service provider is directly covered depends on the entity and the applicable rules, so ask the lender how it governs the assistant and its vendors.
#1 Best Overall
- 【Instant Snap-on Magnetic Attachment】- The Patented Magnetic Privacy Screen – Protected by U.S. Patents 9,829,669 and D844,012. Simply place the privacy screen along the top of your MacBook and let the magnets attach along the top. No need for tricky placement, messy tape, or damaging adhesive. Easily remove and reattach when you need it.
- 【Filter Dimensions】: Width: 11 15/16" (304 mm), Height: 7 1/2" (190 mm), Diagonal: 14.1" (358.14 mm) - SightPro Blackout Privacy Filter is engineered to be compatible with Lenovo, HP, Dell, Acer, Asus, Samsung, and other laptop brands. Please verify your screen's width and height measurements before ordering. It's not recommended to make your selection based solely on your screen's diagonal size. [Not optimized for touchscreens.]
- 【Superior Privacy】- Our advanced multi-layered film filter blacks out your screen when viewing from the side, while maintaining a crystal clear screen straight-on. It also protects your eyes from harmful UV and blue light. [Note: It does not block visibility directly behind you, regardless of the distance.]
- 【Perfect for Travel and Open Workspaces】- The Laptop Privacy Screen Filter is the ideal solution for healthcare providers, mobile workers, commuters, students, and business travelers. Now you can stay compliant and safeguard sensitive corporate information while working in airplanes, subways, airports, and public areas.
- 【Package Contents】- Each package includes a magnetic privacy screen filter, magnetic stickers, a webcam privacy cover, a storage folder, and a cleaning cloth. Buy with confidence – located in the US, Sight Pro specializes in providing best-in-class privacy solutions to individuals, small businesses, corporations, government, and educational institutions. Our privacy screens are Section 889 and TAA compliant.
If the lender sells or services loans connected with Fannie Mae, its Selling Guide requires covered parties to protect confidential information, follow applicable privacy laws, limit disclosure, and securely dispose of information. The guide says disclosure of borrower NPI requires borrower authorization unless applicable law permits disclosure. Those are obligations in a Fannie Mae business relationship; they are not proof that every AI assistant has identical contracts or controls.
Start with the data-collection questions
Do not assume the assistant sees only the text you type. It may receive uploaded files, account details, application fields, device or usage information, conversation history, and data transferred from another system.
Ask exactly what enters the system
- What information do you collect from my prompts, uploaded files, account profile, mortgage application, loan-servicing records, and other sources?
- Are conversation transcripts, message timestamps, clickstream events, device identifiers, IP addresses, recordings, or support tickets stored?
- Does optical character recognition or another extraction service copy data from my PDF, image, or scanned document?
- Are inferred or derived records created—for example, an estimated income, debt-to-income ratio, property value, risk flag, or customer segment?
- Does the assistant connect to credit-bureau, employment, property, fraud-prevention, identity-verification, or public-record databases?
Request a field-level description if possible. “We collect information needed to provide the service” does not tell you whether the provider stores every prompt, retains an original file, or creates a separate profile from the conversation.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Separate required information from optional information
Ask which fields are mandatory for a particular answer and which are optional. You may be able to ask a general question without entering a full Social Security number or account number. Ask whether redaction is supported and whether the assistant can answer using a document excerpt instead of the complete file. Never paste credentials, one-time passcodes, full payment-card numbers, or an entire bank account number into a conversational tool unless the lender gives a specific, authenticated workflow that requires it.
Rank #2
- Filter Dimensions: Width: 11 15/16" (304 mm), Height: 7 1/2" (190 mm), Diagonal: 14.1" (358.14 mm) - SightPro Blackout Privacy Filter is engineered to be compatible with Lenovo, HP, Dell, Acer, Asus, Samsung, and other laptop brands. Please verify your screen's width and height measurements before ordering. It's not recommended to make your selection based solely on your screen's diagonal size. [Not optimized for touchscreens.]
- Two Attachment Options - Installs in minutes. Option 1 uses clear adhesive strips that securely attach to any screen. Option 2 uses slide mount tabs that easily stick to the display frame, allowing you to slide the filter on and off the screen as needed.
- Superior Privacy and Anti Glare - Our advanced multi-layered film filter blacks out your screen when viewing from the side, while maintaining a crystal clear screen straight-on. It also protects your eyes from harmful glare, UV, and blue light. [Note: It does not block visibility directly behind you, regardless of the distance.]
- Perfect for Travel and Open Workspaces - Our computer screen privacy filter is the ideal solution for healthcare providers, mobile workers, commuters, students, and business travelers. Now you can stay compliant and safeguard sensitive corporate information while working in airplanes, subways, airports and public areas.
- Package Contents - Each package includes one privacy screen shield filter, two sets of clear adhesive strips, two sets of slide mount tabs, and a microfiber cleaning cloth. Buy with confidence – located in the US, Sight Pro specializes in providing best-in-class privacy solutions to individuals, small businesses, corporations, government, and educational institutions. Our privacy screens are Section 889 and TAA compliant.
Ask what each category of data is used for
A provider can use the same information for several purposes, each with different privacy implications. Get a separate answer for each purpose rather than accepting a broad statement that data is used “to improve your experience.”
Purpose questions to put in writing
- Is my information used only to answer the current question, or also to service my loan, process my application, prevent fraud, perform analytics, improve products, or develop models?
- Is information from this assistant combined with my information in other lender systems?
- Are my prompts or documents used to personalize responses for me, to create general statistics, or to train a model used for other customers?
- Are human quality reviewers, contractors, or support agents allowed to read conversations or documents? Under what circumstances?
- Does the provider use information for advertising, cross-selling, eligibility screening, or decisions unrelated to my mortgage request?
Ask whether each purpose is based on consent, contract necessity, a legal obligation, fraud prevention, or another stated basis. A purpose that sounds benign can still expand who handles your data or how long it is retained.
Find out whether your information trains an AI model
“The assistant uses AI” does not answer whether your content becomes training data. Training, fine-tuning, evaluation, safety testing, and prompt logging can be separate activities, and a lender’s policy may differ from the policy of its model vendor.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Questions about model improvement
- Are my prompts, transcripts, uploads, extracted text, or feedback used to train, fine-tune, evaluate, or improve any model?
- Is my data isolated from models used by other customers?
- Can I opt out before submitting information, and does opting out stop future use only or also remove data already used?
- Does the answer differ for the lender’s own systems and an external AI vendor?
- Are de-identification or aggregation techniques used, and what information remains in logs or evaluation datasets?
- Can a human review my conversation for model quality, abuse investigations, or troubleshooting?
Obtain the opt-out method, effective date, and exceptions in writing. An opt-out that applies to model training may not delete operational records, legal records, fraud logs, or a copy held by a vendor.
Rank #3
- 【Instant Snap-on Magnetic Attachment】- The Patented Magnetic Privacy Screen – Protected by U.S. Patents 9,829,669 and D844,012. Simply place the privacy screen along the top of your MacBook and let the magnets attach along the top. No need for tricky placement, messy tape, or damaging adhesive. Easily remove and reattach when you need it.
- 【Filter Dimensions】: Width: 13.56" (344.5 mm), Height: 8.49" (215.6 mm), Diagonal: 16" (406 mm) - SightPro Blackout Privacy Filter is engineered to be compatible with Lenovo, HP, Dell, Acer, Asus, Samsung, and other laptop brands. Please verify your screen's width and height measurements before ordering. It's not recommended to make your selection based solely on your screen's diagonal size. [Not optimized for touchscreens.]
- 【Superior Privacy】- Our advanced multi-layered film filter blacks out your screen when viewing from the side, while maintaining a crystal clear screen straight-on. It also protects your eyes from harmful UV and blue light. [Note: It does not block visibility directly behind you, regardless of the distance.]
- 【Perfect for Travel and Open Workspaces】- The Laptop Privacy Screen Filter is the ideal solution for healthcare providers, mobile workers, commuters, students, and business travelers. Now you can stay compliant and safeguard sensitive corporate information while working in airplanes, subways, airports, and public areas.
- 【Package Contents】- Each package includes a magnetic privacy screen filter, magnetic stickers, a webcam privacy cover, a storage folder, and a cleaning cloth. Buy with confidence – located in the US, Sight Pro specializes in providing best-in-class privacy solutions to individuals, small businesses, corporations, government, and educational institutions. Our privacy screens are Section 889 and TAA compliant.
Map every person and company that can receive the data
Ask for a data-flow explanation: from your device to the lender’s application, then to hosting, document processing, identity verification, analytics, customer support, and AI-model services. The legal relationship matters because the lender may remain responsible for selecting and supervising a vendor even when the vendor operates the technology.
Recipient and contract questions
- Which lender departments can access the information—origination, underwriting, servicing, fraud, compliance, information security, or customer support?
- Which affiliates, cloud hosts, document processors, analytics companies, AI/model vendors, and subcontractors receive or can access it?
- In which countries or regions is data stored or accessed?
- Do contracts prohibit vendors from selling the data, using it for their own model training, or sharing it with additional parties?
- Do vendors have to notify the lender of a suspected incident, return or delete information, and assist with borrower requests?
- Can a vendor use a subcontractor without the lender’s approval or notice to you?
Ask for the current privacy notice and any relevant vendor or AI disclosure, including the effective date. Marketing language such as “trusted partners” is not a substitute for a recipient category and a stated contractual limit.
Check security and access controls
Security is more than encryption. FTC Safeguards Rule guidance describes a written security program with administrative, technical, and physical safeguards. Ask the lender how that program applies to the assistant, the uploaded documents, and every connected vendor.
Useful security questions
- Is data encrypted in transit and at rest, and are encryption keys managed separately from the stored data?
- Is multi-factor authentication required for borrower and employee access?
- Is access granted according to job role and least privilege?
- Are employee, contractor, and vendor accesses logged, reviewed, and removed promptly when no longer needed?
- Are production mortgage records separated from development and testing environments?
- Are uploads scanned for malware, and are unsafe file types blocked?
- How are backups protected, and are they subject to the same access controls?
- Are independent security tests, vulnerability scans, or audits performed, and how are findings corrected?
Ask who is authorized to read an individual conversation and what triggers access. “Only authorized personnel” is meaningful only when the provider can describe authorization, logging, review, and disciplinary controls.
Rank #4
- 【Filter Dimensions】: Width: 13 9/16" (345 mm), Height: 7 5/8" (194 mm), Diagonal: 15.6" (396.24 mm) - SightPro Blackout Privacy Filter is engineered to be compatible with Lenovo, HP, Dell, Acer, Asus, Samsung, and other laptop brands. Please verify your screen's width and height measurements before ordering. It's not recommended to make your selection based solely on your screen's diagonal size. [Not optimized for touchscreens.]
- 【Two Attachment Options】- Installs in minutes. Option 1 uses clear adhesive strips that securely attach to any screen. Option 2 uses slide mount tabs that easily stick to the display frame, allowing you to slide the filter on and off the screen as needed.
- 【Superior Privacy and Reduce Glare】- Our advanced multi-layered film filter blacks out your screen when viewing from the side, while maintaining a crystal clear screen straight-on. It also protects your eyes from harmful glare, UV, and blue light. [Note: It does not block visibility directly behind you, regardless of the distance.]
- 【Perfect for Travel and Open Workspaces】- Our computer screen privacy filter is the ideal solution for healthcare providers, mobile workers, commuters, students, and business travelers. Now you can stay compliant and safeguard sensitive corporate information while working in airplanes, subways, airports and public areas.
- 【Package Contents】- Each package includes one privacy screen shield filter, two sets of clear adhesive strips, two sets of slide mount tabs, and a microfiber cleaning cloth. Buy with confidence – located in the US, Sight Pro specializes in providing best-in-class privacy solutions to individuals, small businesses, corporations, government, and educational institutions. Our privacy screens are Section 889 and TAA compliant.
Clarify retention, deletion, and secure disposal
Retention is often split across several systems: the chat interface, an application record, document storage, audit logs, analytics stores, model-evaluation datasets, and backups. Ask for a retention schedule that distinguishes each.
Retention questions
- How long are prompts, transcripts, uploaded files, extracted text, derived scores, and support records retained?
- Does retention differ if I become a borrower, withdraw an application, or never complete an application?
- Which records must be kept for legal, regulatory, servicing, fraud, or accounting reasons?
- Are data copies held by AI or cloud vendors retained after the lender deletes its copy?
- How long do backups persist, and when are deleted records removed from them?
Deletion-request questions
- How do I submit a deletion request, and how will you verify my identity?
- What will be deleted, what cannot be deleted, and why?
- Will you instruct every relevant vendor and subcontractor to delete the data?
- Will I receive confirmation of completion and an explanation of any retained records?
- Does deletion stop future model training or remove information already incorporated into a model?
Fannie Mae’s Selling Guide calls for secure disposal of information for covered parties. Ask the lender what disposal method and verification process it uses rather than assuming that closing a chat deletes an uploaded document.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Ask what happens during a security incident
A useful incident answer identifies detection, containment, investigation, decision-making, and communication—not just a promise to “take security seriously.” Ask which party leads the response when an AI vendor is involved and who contacts you.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Incident-response questions
- How do you detect unauthorized access, data loss, prompt leakage, or a compromised vendor account?
- What is the escalation path from the vendor to the lender’s security and privacy teams?
- How do you contain the incident, preserve evidence, reset credentials, and assess affected records?
- Who decides whether borrowers, regulators, business partners, or law enforcement must be notified?
- What information will a borrower notice include, and how will you deliver it?
- How can I verify that an incident message is genuine and report a suspected compromise?
Fannie Mae’s Information Security and Business Resiliency Supplement says covered business partners subject to the Supplement must report a cybersecurity incident to Fannie Mae within 36 hours of identification. The page lists implementation dates of August 12, 2025 for single-family sellers and servicers and multifamily lenders, December 31, 2025 for technology service providers, and April 1, 2026 for document custodians. This is a partner-reporting requirement, not a universal deadline for notifying borrowers or regulators. Ask the lender what notification rules apply to your situation and how quickly it intends to contact affected customers.
Best Value
- 【Instant Snap-on Magnetic Attachment】- The Patented Magnetic Privacy Screen – Protected by U.S. Patents 9,829,669 and D844,012. Simply place the privacy screen along the top of your MacBook and let the magnets attach along the top. No need for tricky placement, messy tape, or damaging adhesive. Easily remove and reattach when you need it.
- 【Filter Dimensions】: Width: 12 3/16" (310 mm), Height: 6 7/8" (175 mm), Diagonal: 14" (355.6 mm) - There are two different 14 inch screen sizes, please select the correct one. SightPro Blackout Privacy Filter is engineered to be compatible with Lenovo, HP, Dell, Acer, Asus, Samsung, and other laptop brands. Please verify your screen's width and height measurements before ordering. It's not recommended to make your selection based solely on your screen's diagonal size. [Not optimized for touchscreens.]
- 【Superior Privacy】- Our advanced multi-layered film filter blacks out your screen when viewing from the side, while maintaining a crystal clear screen straight-on. It also protects your eyes from harmful UV and blue light. [Note: It does not block visibility directly behind you, regardless of the distance.]
- 【Perfect for Travel and Open Workspaces】- The Laptop Privacy Screen Filter is the ideal solution for healthcare providers, mobile workers, commuters, students, and business travelers. Now you can stay compliant and safeguard sensitive corporate information while working in airplanes, subways, airports, and public areas.
- 【Package Contents】- Each package includes a magnetic privacy screen filter, magnetic stickers, a webcam privacy cover, a storage folder, and a cleaning cloth. Buy with confidence – located in the US, Sight Pro specializes in providing best-in-class privacy solutions to individuals, small businesses, corporations, government, and educational institutions. Our privacy screens are Section 889 and TAA compliant.
Determine whether the assistant influences a mortgage decision
Some assistants are informational: they explain terminology, list missing documents, or route a question to a human. Others may feed information into eligibility, pricing, underwriting, fraud, servicing, or collections workflows. The distinction changes the questions you should ask.
Decision-role questions
- Is the assistant strictly informational, or can its output influence eligibility, pricing, underwriting, servicing, fraud review, or another decision?
- Does a human review the assistant’s recommendation or extracted information before an important action?
- Can I correct an inaccurate input, inferred value, or document extraction?
- How do I obtain a specific explanation for an adverse action or other consequential outcome?
- Is there an appeal, reconsideration, or manual-review process, and how do I start it?
Consumer Financial Protection Bureau guidance says creditors using complex models must provide specific and accurate reasons for adverse actions. Generic sample reasons are inadequate when they do not reflect the actual reason for the decision. That guidance concerns creditors and credit decisions; it does not mean every chatbot response is a credit decision. Ask the lender to identify the exact point at which an assistant’s output enters a regulated decision process.
As CFPB Director Rohit Chopra said on September 19, 2023, “Technology marketed as artificial intelligence is expanding the data used for lending decisions, and also growing the list of potential reasons for why credit is denied.” The practical response is to request an accountable human reviewer and a concrete explanation, not merely a label such as “the model found you ineligible.”
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsUse a written comparison sheet when evaluating providers
If you are considering assistants from two lenders or mortgage service providers, record answers against identical criteria. Do not compare brand claims; compare current written disclosures and the person who is contractually responsible for the data.
| Comparison point | Provider A | Provider B | What to verify |
|---|---|---|---|
| Data collected | Record the fields, files, transcripts, usage data, and connected sources. | Record the fields, files, transcripts, usage data, and connected sources. | Whether collection is limited to what the requested function needs. |
| Purpose and model use | Record operational, analytics, fraud, product-improvement, and training uses. | Record operational, analytics, fraud, product-improvement, and training uses. | Opt-out scope and whether vendor practices differ. |
| Recipients | List lender teams, affiliates, hosts, processors, and AI vendors. | List lender teams, affiliates, hosts, processors, and AI vendors. | Contractual limits, subcontractors, and access regions. |
| Safeguards and access | Record authentication, encryption, role limits, logging, testing, and incident controls. | Record authentication, encryption, role limits, logging, testing, and incident controls. | Who can read records and how access is reviewed. |
| Retention and deletion | Record periods for chats, uploads, derived records, and backups. | Record periods for chats, uploads, derived records, and backups. | Deletion exceptions and vendor deletion confirmation. |
| Incidents | Record detection, escalation, notification, and borrower support. | Record detection, escalation, notification, and borrower support. | Any partner deadline versus the borrower-notification process. |
| Decision role | Record whether outputs affect credit, pricing, servicing, or fraud decisions. | Record whether outputs affect credit, pricing, servicing, or fraud decisions. | Human review, correction rights, appeal, and specific reasons. |
Read the privacy notice like a contract checklist
Before uploading documents, confirm that the conversation matches the written terms. Look for definitions of “personal information,” “nonpublic personal information,” “service providers,” “affiliates,” “business purposes,” “de-identified data,” “retention,” and “security incident.” Check whether the notice covers the AI assistant itself or only the lender’s general website and application.
The CFPB describes a privacy impact assessment as “an analysis of how personally identifiable information (PII) is handled to (i) ensure that collection, use, and handling conforms with applicable requirements, (ii) determine the privacy risks associated with an information system or activity, and (iii) identify ways to mitigate privacy risks.” You can use the same logic as a borrower: identify the data flow, ask what risk each step creates, and request the mitigation and accountable owner.
Pause when an answer is incomplete
- The provider cannot identify whether conversations are retained.
- A vendor is named but its role, training policy, or deletion obligations are undisclosed.
- The assistant requests a full sensitive document for a question that could be answered with less information.
- There is no clear human contact for corrections, deletion, or incident questions.
- The written notice and the assistant’s answer conflict.
- The provider says the assistant makes or recommends decisions but cannot explain review or appeal.
In those cases, ask for a secure human channel and submit only the minimum information needed after the lender gives a documented answer. Privacy protections are strongest when collection is minimized before data enters the system.
Free tools Windows power users keep installed
One-click scans. No signup required.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
