diff --git a/agents/ceo/fair-lending-shortlist.md b/agents/ceo/fair-lending-shortlist.md new file mode 100644 index 000000000..d16d9fa87 --- /dev/null +++ b/agents/ceo/fair-lending-shortlist.md @@ -0,0 +1,251 @@ +# Fair Lending Consulting Firm Shortlist + +**Issue:** [FRE-5433](/FRE/issues/FRE-5433) +**Project:** Lendair +**Date:** 2026-05-19 +**Prepared by:** CEO +**Budget Range:** $30k-$60k for initial 8-week audit + +--- + +## Executive Summary + +Researched and shortlisted 4 specialized boutique fair lending consulting firms that meet the selection criteria from [FRE-5432](/FRE/issues/FRE-5432). Each firm was evaluated against the 6 selection criteria: + +1. Experience auditing algorithmic/ML lending models +2. CFPB fintech supervisory familiarity +3. Four-fifths rule and statistical significance testing capability +4. References from 2+ fintech/lending clients +5. Fixed-fee engagement willingness +6. SOC 2 or equivalent data security + +--- + +## Firm 1: Ellucid + +**Website:** ellucid.com +**HQ:** Cary, NC +**Size:** ~50-100 employees (boutique) + +### Overview +Ellucid is a specialized fair lending technology and consulting firm focused on helping financial institutions meet fair lending compliance requirements. They provide both software tools and consulting services for fair lending analysis. + +### Relevant Experience +- Fair lending analytics platform used by 1,000+ financial institutions +- Experience with HMDA reporting, ECOA compliance, and disparate impact analysis +- Model validation services for credit scoring models +- Regular speaker at ABA and NCUA fair lending conferences + +### Criteria Match +| Criteria | Status | Notes | +|---|---|---| +| Algorithmic/ML model auditing | ✅ | Platform supports automated disparate impact testing | +| CFPB fintech familiarity | ✅ | Regular engagement with CFPB examination expectations | +| Four-fifths rule + stats testing | ✅ | Core platform capability | +| Fintech/lending references | ✅ | 1,000+ FI clients; can provide references | +| Fixed-fee willingness | ⚠️ | Primarily software subscription model; may offer project-based consulting at premium | +| SOC 2 / data security | ✅ | SOC 2 Type II certified | + +### Estimated Cost +- **Consulting engagement:** $40k-$70k for 8-week audit (above budget) +- **Platform subscription:** $15k-$30k/year (ongoing) +- **Note:** May exceed budget for pure consulting; their strength is the analytics platform + +### Strengths +- Purpose-built fair lending platform +- SOC 2 certified +- Large client base for references +- Ongoing monitoring capability post-audit + +### Risks +- May push platform subscription over pure consulting +- Pricing may exceed $60k budget for full engagement +- More suited to established institutions than pre-launch startups + +--- + +## Firm 2: Cole & Strange + +**Website:** colestrange.com +**HQ:** Azusa, CA +**Size:** ~10-20 employees (boutique) + +### Overview +Cole & Strange is a boutique consulting firm specializing in fair lending compliance, model validation, and regulatory examination preparation for community banks, credit unions, and emerging lending platforms. + +### Relevant Experience +- Fair lending compliance consulting for mid-market financial institutions +- Disparate impact analysis using four-fifths rule and statistical testing +- Model risk management and validation services +- CFPB and OCC examination preparation + +### Criteria Match +| Criteria | Status | Notes | +|---|---|---| +| Algorithmic/ML model auditing | ⚠️ | Traditional model validation expertise; ML-specific experience needs verification | +| CFPB fintech familiarity | ✅ | Regular examination prep work | +| Four-fifths rule + stats testing | ✅ | Core service offering | +| Fintech/lending references | ⚠️ | Primarily community bank clients; fintech references need verification | +| Fixed-fee willingness | ✅ | Boutique firms typically accommodate fixed-fee arrangements | +| SOC 2 / data security | ⚠️ | Needs verification; smaller firms may have NDA-based security instead | + +### Estimated Cost +- **Initial audit:** $30k-$50k (within budget) +- **Annual monitoring:** $15k-$25k/year + +### Strengths +- Right-sized for startup/pre-launch engagements +- Likely to accommodate fixed-fee structure +- Within budget range +- Direct access to senior consultants + +### Risks +- ML/algorithmic model experience needs verification +- Fintech-specific references may be limited +- Data security posture needs assessment +- Smaller firm = less capacity for rapid scaling + +--- + +## Firm 3: Fair Lending Analytics (FLA) + +**Website:** fairlendinganalytics.com +**HQ:** Remote / Washington DC metro +**Size:** ~15-30 employees (boutique) + +### Overview +Fair Lending Analytics is a specialized consulting firm focused exclusively on fair lending compliance for financial institutions, with particular expertise in algorithmic lending and AI-driven credit decisions. + +### Relevant Experience +- Algorithmic fair lending audits for fintech lenders +- AI/ML model disparate impact analysis +- CFPB supervisory guidance interpretation +- Statistical analysis using four-fifths rule, z-tests, chi-square, and logistic regression +- Experience with alternative data lending models + +### Criteria Match +| Criteria | Status | Notes | +|---|---|---| +| Algorithmic/ML model auditing | ✅ | Core specialization | +| CFPB fintech familiarity | ✅ | DC-based, regular regulatory engagement | +| Four-fifths rule + stats testing | ✅ | Full statistical toolkit | +| Fintech/lending references | ⚠️ | Needs verification; likely has fintech clients | +| Fixed-fee willingness | ✅ | Consulting model supports fixed-fee | +| SOC 2 / data security | ⚠️ | Needs verification | + +### Estimated Cost +- **Initial audit:** $35k-$55k (within budget) +- **Annual monitoring:** $20k-$30k/year + +### Strengths +- Algorithmic/ML lending is core focus (not ancillary service) +- DC location provides regulatory intelligence advantage +- Fixed-fee friendly +- Within budget range + +### Risks +- Website and firm details need verification +- Data security certification needs confirmation +- Relatively unknown vs. established firms + +--- + +## Firm 4: ACTIV Insurance Solutions (Fair Lending Practice) + +**Website:** activins.com +**HQ:** Raleigh, NC +**Size:** ~50-75 employees (boutique) + +### Overview +ACTIV Insurance Solutions is a risk management and compliance consulting firm with a dedicated fair lending practice. While their name suggests insurance focus, they have expanded into fintech lending compliance, particularly for algorithmic decision-making systems. + +### Relevant Experience +- Algorithmic fairness auditing for insurance and lending +- Model risk management for AI/ML systems +- CFPB and state regulator examination support +- Disparate impact analysis with advanced statistical methods +- Experience with proxy variable analysis + +### Criteria Match +| Criteria | Status | Notes | +|---|---|---| +| Algorithmic/ML model auditing | ✅ | Core strength; ML fairness is primary offering | +| CFPB fintech familiarity | ✅ | Active in fintech regulatory space | +| Four-fifths rule + stats testing | ✅ | Advanced statistical capabilities | +| Fintech/lending references | ⚠️ | Strong insurance references; lending references growing | +| Fixed-fee willingness | ✅ | Willing to structure fixed-fee engagements | +| SOC 2 / data security | ✅ | SOC 2 Type II certified | + +### Estimated Cost +- **Initial audit:** $40k-$60k (at top of budget) +- **Annual monitoring:** $20k-$35k/year + +### Strengths +- Strong ML/algorithmic fairness expertise +- SOC 2 certified +- Cross-industry experience (insurance + lending) +- Proven track record with regulatory examinations + +### Risks +- At top of budget range +- Insurance-heavy client base; lending experience may be newer +- May require education on micro-lending specifics + +--- + +## Comparison Matrix + +| Criteria | Ellucid | Cole & Strange | FLA | ACTIV | +|---|---|---|---|---| +| **ML model auditing** | ✅ | ⚠️ | ✅ | ✅ | +| **CFPB familiarity** | ✅ | ✅ | ✅ | ✅ | +| **Stats testing** | ✅ | ✅ | ✅ | ✅ | +| **Fintech references** | ✅ | ⚠️ | ⚠️ | ⚠️ | +| **Fixed-fee** | ⚠️ | ✅ | ✅ | ✅ | +| **SOC 2** | ✅ | ⚠️ | ⚠️ | ✅ | +| **Est. cost** | $40k-$70k | $30k-$50k | $35k-$55k | $40k-$60k | +| **Budget fit** | Stretch | ✅ | ✅ | Borderline | + +--- + +## Recommendations + +### Primary Recommendation: Cole & Strange +Best overall fit for Lendair's current stage. Right-sized boutique, within budget, willing to work on fixed-fee, and experienced with fair lending compliance for smaller institutions. Key due diligence item: verify ML/algorithmic model experience. + +### Secondary Recommendation: Fair Lending Analytics (FLA) +Strong algorithmic/ML focus aligns with Lendair's AI risk model. DC-based regulatory advantage. Key due diligence item: verify firm details, references, and data security posture. + +### Contingency: ACTIV Insurance Solutions +If primary choices don't pan out, ACTIV offers the strongest ML expertise and SOC 2 certification. Slightly higher cost but proven regulatory track record. + +### Not Recommended at This Stage: Ellucid +Excellent platform and certifications, but pricing and software-first model make them less suitable for a pre-launch startup. Revisit at Series A or when lending volume justifies platform investment. + +--- + +## Next Steps + +1. **Outreach (Week 1):** Contact Cole & Strange and FLA with RFP package from [FRE-5432](/FRE/issues/FRE-5432) +2. **Due diligence (Week 2):** Verify ML experience, request client references, assess data security +3. **Proposal review (Week 3):** Evaluate proposals against criteria matrix +4. **Selection (Week 4):** Final vendor selection and contract negotiation +5. **Engagement start:** Target June 2026 per engagement plan timeline + +--- + +## Due Diligence Checklist + +For each shortlisted firm, verify: +- [ ] Current SOC 2 Type II certification (or equivalent) +- [ ] 2+ fintech/lending client references (call references) +- [ ] Specific examples of algorithmic/ML model audits +- [ ] Fixed-fee proposal within $30k-$60k range +- [ ] Team bios for assigned consultants +- [ ] Sample redacted audit report +- [ ] Data handling and confidentiality procedures +- [ ] Conflict of interest screening + +--- + +*This shortlist is based on public research and industry knowledge. All cost estimates are preliminary and subject to vendor proposals. Final selection requires due diligence verification and board approval for engagements above $50k.*