Primary Sources for Ongoing Borrower Monitoring
Regulatory expectations and public loan-agreement precedents for continuous read-only account access
Cited official sources
National Credit Union Administration(opens external site)
current federal commercial-lending regulation
“Use of loan covenants, if appropriate, including frequency of borrower and guarantor financial reporting;” Credit risk ratings must be “reviewed as frequently as necessary.”
Where: section 723.4(g)(1). The same subsection also requires periodic loan review sufficient for portfolio risk management and credit-risk ratings reviewed as frequently as necessary for the credit union’s monitoring policies.
Use: This is the strongest direct credit-union authority. It places borrower reporting, loan covenants, periodic review, and risk monitoring inside required commercial-lending risk-management processes.
Small Business Administration(opens external site)
Standard Operating Procedure 50 57 4
“Lenders are responsible for monitoring each 7(a) Loan in their portfolio” and must use an “alternative method to monitor the Borrower’s financial condition.”
Where: Chapter 3, section E, pages 32-33 of the Standard Operating Procedure. The surrounding text identifies periodic financial statements, borrower contact or site visits, and relevant financial data as monitoring tools.
Use: The Small Business Administration expressly treats post-closing monitoring of borrower financial and operational condition as a lender servicing responsibility and allows alternative monitoring methods.
Office of the Comptroller of the Currency(opens external site)
Lending and Loan Portfolio Risk Management
“Loan servicing and monitoring involve ongoing maintenance of each loan until payoff.” This includes “monitoring the status of required periodic borrower financial statements and loan covenant testing.”
Where: Loan Servicing and Monitoring, handbook pages 36-37.
Use: This is a current national-bank supervisory source expressly defining monitoring as ongoing through payoff and linking it to borrower financial statements and covenant testing.
Community Development Financial Institutions Fund(opens external site)
Bond Guarantee Program Annual Assessment Criteria and Checklist
“Portfolio Management and Servicing Capability”; “Loan Servicing; Compliance Monitoring; and Portfolio Management Activities”; and “Policies and procedures for monitoring compliance of Bond and Secondary Loans.”
Where: Portfolio Management and Servicing Capability, page 3; Internal Controls, page 4. The Fund also publishes Pledged Loan Monitoring, Financial Condition Monitoring, and Tertiary Loan Monitoring reporting resources updated April 18, 2025.
Use: This is direct Community Development Financial Institutions Fund evidence that formal loan servicing, compliance monitoring, financial-condition monitoring, and portfolio management are expected program capabilities. Scope caveat: the cited requirements are specific to participants in the Bond Guarantee Program, not every certified Community Development Financial Institution.
National Credit Union Administration Examiner’s Guide(opens external site)
Supporting credit-union examination guidance
“Risks should be monitored throughout the life of a loan based on periodic review of the financial position of the borrower”
Where: Underwriting Standards. The Risk Management Processes section separately discusses financial covenants, financial reporting, regular site visits, periodic review, and early detection of adverse changes.
Public contractual precedents for read-only bank-account access
These are contractual examples, not regulator mandates. They are useful because the operative provisions show lenders using persistent or ongoing read-only access as an express loan covenant or account-control requirement. Each agreement is a public filing with the United States Securities and Exchange Commission.
Exact location: Section 2(b), Maintenance of Designated Account(s), and section 2(c).
“new account(s) will be considered Designated Accounts” and “Lender shall have full read-only access to all Designated Accounts while this Agreement is in effect.”
Particularly relevant to smaller-business lending: the agreement requires notice of newly opened business accounts, brings them into the defined monitored-account set, and provides read-only access while the agreement remains in effect.
Exact location: Section 5.10, Online Access to View Bank Accounts, page 10 of 66.
“each Borrower shall provide Lender with online read-only access to all of Borrowers’ bank accounts”
The full clause requires the access to be maintained throughout the agreement term until the obligations are paid in full.
Exact location: Section 4.1, Lock Boxes and Blocked Accounts, filing page 13.
“On the Closing Date (and at all times thereafter), each Loan Party shall provide Lender with online read-only access to such Loan Party’s Deposit Accounts”
The full sentence requires that access to be maintained throughout the agreement term until all obligations are paid in full.
The full set of seven precedents is available to lenders in CircumFi.
Takeaways from the primary sources
- Ongoing post-closing monitoring of borrower financial condition is a recognized and, in several regulatory contexts, required part of commercial-loan risk management.
- Financial reporting requirements, loan covenants, periodic loan review, covenant testing, risk-rating review, and portfolio monitoring are explicitly identified in current official sources.
- Public loan agreements show multiple lenders contractually requiring online read-only access to borrower deposit accounts, sometimes from closing through full repayment.
- Some agreements also address newly opened accounts, account maintenance, and the duration of read-only access.
The complete set, available to our members
All seven loan-agreement precedents, with exact sections, are in CircumFi's lender workspace.