The Compliance Landscape Has Changed

If you administered construction loans in 2020, your compliance toolkit was straightforward: maintain the credit file, document approvals in email, keep your spreadsheets organized, and have a reasonable story for the examiner.

That's no longer sufficient.

Between 2023 and 2026, regulatory agencies — particularly the OCC and FDIC — have materially raised their expectations for construction loan administration. The shift isn't subtle, and it's not theoretical. Lenders who went through examinations in 2025-2026 report 40% more documentation requests than comparable exams three years earlier, with a specific focus on three areas: audit trails, change order governance, and concentration risk monitoring.

Here's what examiners are actually looking for — and where most lenders have gaps.

Area #1: Audit Trails That Don't Require Archaeology

The most common examination finding in construction loan administration isn't a bad loan. It's inadequate documentation of the decision-making process.

Examiners want to see:

Who Approved What, and When

Every material action in the draw process — approval, revision, budget modification, change order acceptance, document waiver — must have a clear audit trail. That means:

• Timestamp: When did the approval happen? Not "sometime in March" — a specific date and time.
• Attribution: Who approved it? A named individual with documented authority, not a team email alias.
• Context: What information was the approver reviewing when they approved? The version of the SOV, the inspection report on file, the budget in effect at that moment.
• Authority verification: Did the approver have the authority to approve this specific action? Was the draw amount within their approval limit?

Where most lenders fail: Email-based approvals. An email saying "approved" from a fund manager technically documents the decision — but it doesn't capture what version of the draw package they reviewed, whether the budget they saw was current, or whether their approval authority covered the amount. Examiners increasingly view email approvals as insufficient for material decisions.

Version-Controlled Documents

Examiners expect to see the complete version history of key documents:

• Budget: Every version, with change documentation for each modification
• Schedule of values: Every draw-period SOV with reconciliation to the budget
• Change orders: Complete lifecycle from request through approval, with budget impact documentation
• Draw packages: The submitted version, any revision versions, and the final approved version

The standard: You should be able to reconstruct the exact state of any loan at any point in time — what the budget looked like, what the SOV showed, what documents were on file, and who had approved what. This is "point-in-time reconstruction," and it's a bar that spreadsheet-based processes fundamentally cannot meet.

Exception Documentation

When something deviates from policy — a draw approved despite a missing document, a budget overage waived, an expired insurance certificate accepted temporarily — the exception must be formally documented with:

• The specific policy exception
• The business justification
• The approving authority (which must be appropriate for the exception type)
• Any conditions attached to the exception
• Follow-up tracking to confirm conditions were met

Common finding: "Exceptions to policy were noted without formal documentation or appropriate approval authority." This finding alone accounts for approximately 18% of construction loan examination citations according to recent regulatory conference data.

Area #2: Change Order Governance

Change orders are the highest-risk area of construction loan administration from a compliance perspective. They modify the approved budget, affect the schedule of values, alter draw amounts, and may require additional capital — all of which must be properly governed.

What Examiners Want to See

A formal change order policy that specifies:

• Approval authority levels (e.g., analyst up to $25K, senior analyst up to $100K, credit committee above $100K)
• Required documentation (GC proposal, subcontractor quotes, scope description, cost justification)
• Budget impact analysis (which line items are affected, whether contingency covers the increase, whether total project cost changes)
• Capital stack implications (does a budget increase trigger an equity call or loan modification?)
• Timeline for approval (change orders shouldn't sit unresolved for months)

Evidence that the policy is followed — not just that it exists. Examiners will sample 5-10 change orders from your portfolio and trace each one from request to resolution. They're looking for:

• Consistent application of approval authority
• Complete documentation at each step
• Budget updates that reflect the approved change order
• SOV adjustments in subsequent draws
• Timely processing (change orders approved in days, not months)

The Contingency Question

Examiners pay special attention to contingency usage. Contingency is a budget reserve for unexpected costs — not a slush fund. When contingency draws are frequent or large, examiners want to see:

• Individual justification for each contingency draw
• Cumulative tracking (how much contingency has been used vs. the original reserve?)
• Re-assessment triggers (at 50% contingency usage, has the project risk been re-evaluated?)
• Communication to credit committee when contingency usage exceeds thresholds

Red flag: A project that burns through its contingency in the first half of construction without a corresponding risk assessment update. This suggests either inadequate initial budgeting or insufficient monitoring — both examination findings.

Area #3: Concentration Risk and Portfolio Monitoring

Construction loan concentration has been a regulatory focus since the 2006 CRE Guidance, but enforcement has intensified. The thresholds haven't changed — 300% of total capital for CRE, 100% for construction — but examiner scrutiny of lenders approaching these limits has.

What Examiners Now Expect

Real-time concentration tracking — not a quarterly report. Examiners want to see that you know your current concentration levels at any point in time, including:

• Total construction loan commitments (funded and unfunded)
• Concentration by property type, geography, and borrower
• Pending approvals that would affect concentration
• Maturity concentrations (loans maturing within the same period)

Stress testing: What happens to your portfolio if construction costs increase 15%? If interest rates rise 200bps? If a major borrower defaults? Examiners expect documented stress test results — not necessarily complex models, but reasonable scenario analysis with documented assumptions.

Individual loan monitoring: Beyond portfolio-level concentration, examiners look at how you monitor individual loans during construction:

• Regular inspection frequency (monthly for most projects)
• Budget-to-actual tracking with variance analysis
• Draw frequency monitoring (irregular draw patterns may indicate project issues)
• Guarantee and collateral monitoring (has the borrower's financial position changed?)
• Insurance and permit compliance tracking

The Technology Expectation

Here's the shift that's catching many lenders off guard: examiners are beginning to view manual, spreadsheet-based monitoring as a control weakness in itself.

The reasoning is straightforward. If your concentration reporting depends on a quarterly manual spreadsheet compilation, then for most of the quarter, you don't actually know your concentration level. If your loan monitoring depends on an analyst remembering to check insurance expirations, then the control is person-dependent rather than system-enforced.

This doesn't mean examiners require specific software. But they're asking pointed questions:

• "How do you ensure no draw is funded against an expired insurance certificate?"
• "How quickly can you produce a current concentration report?"
• "Show me the audit trail for this budget modification."
• "How do you track change order approvals against your policy limits?"

If the answer to any of these involves "we check manually" or "let me pull together a report," you're flagging a potential control gap.

The Five Most Common Findings

Based on 2025-2026 examination data and feedback from construction lending compliance officers:

1. Inadequate audit trails for draw approvals (24% of findings) — Email-based approvals without version control or authority documentation.

2. Change order governance gaps (18% of findings) — Missing approval documentation, inconsistent authority application, or delayed processing.

3. Expired or missing insurance documentation (16% of findings) — Draws funded against expired certificates, or certificates on file that don't meet policy requirements.

4. Incomplete exception documentation (14% of findings) — Policy exceptions without formal justification, appropriate approval, or condition tracking.

5. Concentration reporting delays (12% of findings) — Inability to produce current concentration data on demand during the examination.

Combined, these five categories account for 84% of construction loan administration findings. And every one of them is addressable through systematic process controls rather than heroic individual effort.

How a Unified Platform Addresses Each Finding

The lenders who sail through examinations share a common trait: their compliance isn't maintained by people remembering to do things — it's enforced by systems that won't let them skip things.

• Audit trails: Every action logged automatically — who, what, when, from where. Point-in-time reconstruction available via standard queries. No email archaeology required.
• Change order governance: Approval authority enforced at the system level. A junior analyst literally cannot approve a change order above their limit. Budget impact calculated automatically. Processing timeline tracked with escalation alerts.
• Insurance tracking: Certificate expiration dates monitored continuously. Draws blocked automatically when coverage lapses. Renewal reminders sent 30 days in advance.
• Exception management: Exceptions require formal documentation, appropriate approval authority, and condition tracking — all within the system, all auditable.
• Concentration reporting: Real-time portfolio view with current commitments, concentration ratios, and maturity analysis. Available on demand, not after a weekly compilation.

Preparing for Your Next Exam

If your next regulatory examination is within the next 12 months, here's a practical priority list:

1. Audit your change order documentation for the last 6 months. Can you trace each one from request to resolution with proper approvals?

2. Check insurance certificate currency across your entire portfolio. How many are expired right now?

3. Test your concentration reporting speed. Can you produce a current report within one business day?

4. Review your exception log. Are exceptions formally documented with justification and approval authority?

5. Evaluate your audit trail. Pick 5 random draws and reconstruct the complete approval history. How long does it take? How many gaps exist?

The lenders who do this proactively convert potential findings into process improvements. The ones who wait discover the gaps during the exam — when it's too late to fix them.