TheLOSDirectory

Guide

Section 1071 Small Business Lending Data: Which LOS Platforms Are Ready?

Short answer: if you need a practical Section 1071 shortlist, start with nCino, Abrigo, Baker Hill, and Jack Henry. Numerated and MeridianLink have enough public evidence to justify a demo, but buyers should demand more product proof. If you are already deep in the Fiserv ecosystem, test it too, but its public 1071-specific positioning is thinner.

Updated July 2026 · 11 min read

The buyer-side answer

If you are building a serious shortlist for small business or commercial lending under CFPB Section 1071, start with four names: nCino, Abrigo, Baker Hill, and Jack Henry. They had some of the clearest public evidence we found tying commercial lending workflows to 1071 data collection, reporting, or readiness content.

That still does not mean automatic compliance. It means their public materials are easier to diligence. Your actual decision should still come down to product fit, covered-transaction scope, role-based data controls, reporting exports, and implementation risk.

The rule changed in May 2026. Read this first.

On May 1, 2026 the CFPB issued a revised final 1071 rule that reshapes the buying decision in three ways. First, the tiered rollout is gone: every covered lender now shares a single compliance date of January 1, 2028. Second, coverage narrowed sharply: you are covered only if you originated at least 1,000 covered small business credit transactions in each of the two preceding calendar years, which by the CFPB's own estimate leaves roughly 170-180 covered depositories. Third, the data set got leaner: five data points were dropped, including pricing and denial reasons.

What that means for a buyer: if you are under the threshold, 1071 is no longer a forcing function for your LOS decision, though the data discipline still pays for itself. If you are over it, you have a real runway to January 2028, and the vendor conversation changes: make them demo against the revised rule, not the 2023 version their collateral was built on. Litigation over the rule continues, so even these dates can move.

What “1071-ready” should mean in practice

CFPB Section 1071 requires covered financial institutions to collect, maintain, and submit data on applications for credit for small businesses, including certain demographic information for women-owned, minority-owned, and LGBTQI+ owned businesses. The rule also includes reporting, recordkeeping, and access-control requirements. The final rule page is blunt about it: this is not just a form-field update.

For buyers, a platform is only meaningfully “ready” if it can support most or all of the following:

  • ▸Small business application intake across the products you actually originate, not just generic business lending marketing copy.
  • ▸Applicant-provided demographic collection in the workflow, with the right notices and handling logic.
  • ▸Firewall or role-based access controls so decision-makers are not casually seeing protected demographic responses.
  • ▸Reporting and export support for the required data set, edits, and submission prep.
  • ▸Commercial and small business lending workflow fit, because that is where 1071 actually bites. Mortgage-first LOS tools are not the center of this problem.

That last point matters. Jack Henry’s public 1071 explainer notes that HMDA-reportable transactions are excluded from covered transactions, which is one reason this guide focuses on commercial, small business, SBA, and business banking platforms rather than mortgage-only LOS products.

Which platforms show the strongest public signal?

This is not a ranking of who is “most compliant.” It is a ranking of whose public evidence is strongest and easiest for a buyer to validate before getting pulled into a long sales cycle.

Platform Public 1071 signal Why it makes the shortlist What to verify live
nCino Strong Public 1071 news and compliance content tied to its Small Business Banking Solution and end-to-end workflow. Exact data set coverage, export format, firewall controls, and Salesforce-related admin complexity.
Abrigo Strong Explicit 1071 resource hub, borrower-facing collection form, pre-built reports, export support, and firewall language. How much is native versus services-led, plus product fit outside traditional bank and credit union use cases.
Baker Hill Strong Dedicated 1071 solution page centered on gathering data, processing data, and reporting. How mature the delivered workflow is today, reference customers, and the reporting handoff to compliance teams.
Jack Henry Strong Commercial lending product page links directly to a 1071 compliance resource with current dates, data points, and firewall discussion. Borrower intake UX, reporting depth, and whether your specific business lines fit the platform cleanly.
Numerated Moderate Public webinar and blog content around 1071 product updates and firewall-related support, plus strong digital SMB lending orientation. Whether the 1071 workflow is GA, how reporting works, and how much depends on the broader Moody’s stack.
MeridianLink Moderate Public 1071 thought leadership plus a broad loan origination platform spanning consumer, mortgage, business, and indirect lending. Business-lending-specific 1071 workflow depth, covered-application handling, and data export/reporting detail.
Fiserv Moderate to light Broad compliance and workflow claims, plus incumbent-core advantage, but thinner public 1071-specific evidence. Whether 1071 support is live for your products, which modules are required, and what references exist for small business lending use cases.

Method: public buyer-visible evidence only, not private demos or vendor assurances.

Platform-by-platform notes

Here is the blunt version of what the public evidence says.

nCino

nCino is one of the clearest public fits for Section 1071 because it has gone past generic compliance language. Public nCino materials describe enhancements to its Small Business Banking Solution that let banks and credit unions capture relevant data in the origination workflow and export it for Dodd-Frank 1071 compliance. That is the kind of concrete claim buyers can test in demo before spending months in diligence.

Public source trail: nCino investor release, nCino blog.

Abrigo

Abrigo has some of the most explicit public language in the market. Its 1071 resource page says customers get required data fields in a borrower-facing collection form, pre-built reports, export support for CFPB reporting, and an easy way to enforce firewalls limiting access to 1071 personal data. That is unusually specific. If you are a bank or credit union running small business lending, Abrigo belongs on the shortlist.

Public source trail: Abrigo 1071 lender resources, deadline guide.

Baker Hill

Baker Hill has a dedicated 1071 solution page and frames the problem around three concrete compliance jobs: gathering data, processing data, and reporting. That is not proof by itself, but it is the right product framing. For community and regional institutions already leaning commercial, Baker Hill is worth a serious look.

Public source trail: Baker Hill 1071 solution page.

Jack Henry

Jack Henry belongs in this conversation. Its commercial lending page links directly to a 1071 compliance explainer covering compliance dates, required data points, and the need for a firewall between demographic responses and loan decision-makers. That is a strong sign the company is treating 1071 as an actual product requirement, not just a blog topic.

Public source trail: Jack Henry commercial lending, FinTalk 1071 explainer.

Numerated

Numerated looks credible, especially for lenders that care about digital small business borrower experience, but the public evidence is more webinar-heavy. Search-visible materials describe 1071 product updates, support for institutions adopting 1071 application requirements early, and help with firewall data. That is enough to justify a demo, not enough to skip proof questions.

Public source trail: Numerated webinar highlights, on-demand webinar page.

MeridianLink

MeridianLink has broad platform coverage across consumer, mortgage, business, and indirect lending, plus public 1071 content discussing covered institutions, covered applications, cost, complexity, and the role of software updates. That is enough to justify a serious demo. What is less obvious in public materials is exactly how detailed its business-lending-specific 1071 workflow support is today. So the public evidence is credible, but buyers need a tighter proof process.

Public source trail: MeridianLink 1071 article, loan origination platform page.

Fiserv

Fiserv is the classic incumbent question. Its public loan origination materials talk about automated workflows, document management, regulatory compliance, and integration with Fiserv and non-Fiserv cores. That makes it reasonable to evaluate, especially if you already live in the Fiserv stack. But compared with nCino, Abrigo, Baker Hill, or Jack Henry, the public 1071 story is lighter. I would not rule it out, but it should earn its place with product proof and references.

Public source trail: Fiserv loan origination overview.

The current compliance picture you should plan around

The dates matter because “we will build it before you need it” is one of the easiest lines for vendors to throw around. The revised final rule issued May 1, 2026 replaced the old three-tier rollout with a single framework:

Question Under the revised final rule (May 2026) What changed vs the 2023 rule
Who is covered Lenders with at least 1,000 covered originations in each of the two preceding calendar years Threshold was 100; coverage shrank from thousands of lenders to roughly 170-180 depositories
Compliance date January 1, 2028 for all covered lenders Replaced the tiered start dates that would have begun July 1, 2026
Data set Leaner: five data points removed, including pricing and denial reasons Less discretionary data to capture, firewall and reporting duties remain

Sources: Federal Register, revised final rule, CFPB. Litigation over the rule continues in multiple jurisdictions; treat all dates as current, not guaranteed.

What to force every vendor to prove in the demo

This is where a lot of teams get lazy. A nice slide saying “Section 1071 support” is worthless. Make vendors show the ugly parts.

  • 1.Small business intake by product. Show term loan, line of credit, SBA, equipment, or whatever you actually originate. One canned workflow is not enough.
  • 2.Applicant-provided demographic capture. Show the form, the notices, the storage behavior, and what happens when the applicant declines to respond.
  • 3.Firewall controls. Show precisely who can see protected responses, when, and how exceptions are handled and logged.
  • 4.Covered-application and covered-transaction logic. Ask how the system helps classify edge cases and exclusions without creating more manual cleanup work.
  • 5.Reporting export. Show the output, edits, validation workflow, and who owns it operationally after go-live.
  • 6.Reference customers. Ask for a live bank or credit union with similar asset size, product mix, and origination volume already using the 1071 workflow you were shown.

My recommendation for most depository buyers

If you need a clean first pass, do not overcomplicate it.

  • Start with: nCino, Abrigo, Baker Hill, Jack Henry.
  • Add Numerated if digital small business borrower experience is a major priority.
  • Add Biz2X if SBA 7(a), 504, or Express programs are a real operating requirement and you need banker-assisted workflow plus E-Tran handling — but verify 1071 demographic capture and firewall behavior live, since the public 1071 evidence is lighter than the SBA workflow story.
  • Add MeridianLink or Fiserv if you are already invested there and want to avoid a bigger platform change.
  • Do not confuse mortgage LOS strength with 1071 readiness. This is a small business lending problem first.

FAQ

Did the CFPB change the 1071 deadlines in 2026?

Yes. The May 1, 2026 revised final rule replaced the tiered rollout with a single compliance date of January 1, 2028, raised the coverage threshold to 1,000 covered originations in each of the two preceding years, and cut five data points including pricing and denial reasons. Litigation continues, so treat the dates as current rather than settled.

Which LOS platforms are “ready” for Section 1071 right now?

The strongest public readiness signals come from nCino, Abrigo, Baker Hill, and Jack Henry. Numerated and MeridianLink look credible but need more proof in demo. Fiserv may be workable, especially for incumbents, but public 1071-specific evidence is thinner.

Does vendor readiness equal compliance?

No. Your institution still owns scope interpretation, procedures, monitoring, and legal compliance. A vendor can give you workflow, controls, and reporting support. It cannot make your governance mistakes disappear.

Why not lead with mortgage LOS vendors here?

Because Section 1071 is about small business lending data collection and reporting. HMDA-reportable mortgage transactions are excluded, so commercial and small business workflows deserve most of the buyer attention.

What is the biggest mistake buyers make with 1071 vendor evaluations?

Letting the vendor stay abstract. If the demo never shows the intake form, demographic handling, firewall controls, and reporting export, you did not evaluate 1071 support. You watched marketing.

Next steps

Use this as a shortlist filter, not your final answer

This guide helps you avoid wasting time on weak fits. The next job is running a tighter evaluation process with proof, references, and total cost context.

Read the selection framework → Review core integration risk →