Audit Trail

An audit trail is a time-stamped record of the actions taken on a loan or in a system. The US National Institute of Standards and Technology (NIST) describes it as a chronological record that is detailed enough to rebuild the sequence of events behind a transaction, from start to finish.

For a loan, a useful audit trail answers five questions for every change: who made it, what changed, the old and new values, when it happened and, where it matters, why. Typical entries include an application received, a document uploaded, a credit decision approved, a rate changed in a loan modification, a payment posted or reversed and a notice sent.

A good audit trail is created by the system automatically. It is not a note someone remembers to write later, and ordinary users cannot edit or delete it.

Why it matters for lenders

Lenders are asked to prove what happened all the time. Examiners want to see that approvals followed policy. Auditors trace balances back to transactions. Funders and investors ask how a number in a report was produced. In a borrower dispute, the lender needs to show exactly when a payment arrived and how it was applied.

Fair lending is a big reason too. Under the Equal Credit Opportunity Act, a lender must be able to show that it treated similar applicants the same way and that a decline was based on real reasons. That requires a record of what was considered, by whom and when.

AI tools raise the bar further. If software drafts a summary or flags a risk, the lender should keep that output with a time stamp and the tool's version, plus a record of any person who overrode it. That is what keeps a human in the loop accountable and visible.

The biggest gap is work done outside the system. An approval given by email or a balance fixed in a spreadsheet leaves no trail on the loan.

How it works in practice

A borrower disputes a late fee, saying she paid on time. The servicing manager opens the loan's history. It shows the payment arrived by automatic draft on the due date, was returned by the bank two days later for insufficient funds, and was then reversed by the system, which added the late fee. A staff member waived the fee a week later, and the record shows her name and the reason, "first return in five years."

The manager sends the borrower a clear timeline in ten minutes. In a spreadsheet-based shop, the same answer takes a morning of digging through bank files and email, and it may still have holes.