Every kitchen-table close above $5K in 2026 trades passes through a financing portal — Wisetack for fast service-trade approvals and 0% promo windows, GreenSky for high-ticket replacement with deeper credit bands and longer terms, Synchrony for branded card programs and revolving lines. Each portal output is a regulated artifact governed by Reg Z, the Fair Credit Reporting Act, the CFPB, state-AG TILA analogs, and the lender's signed partnership agreement. AI tools — ResponsiBid, ServiceTitan financing summaries, Avoca outbound financing follow-up, the Comfort Advisor's iPad assistant — touch every surface adjacent to the portal output. Reg Z exposure runs $500-$5,000 per violation plus actual damages, attorney fees, CFPB complaint, state TILA exposure, state-AG action, and potential Wisetack/GreenSky/Synchrony partner-status loss that collapses financing close from 14% baseline to 28-40% target. FCRA exposure runs $100-$1,000 per violation plus actual damages plus attorney fees on every adverse-action notice missing one of four required components. This lesson is the owner's compliance map: what AI can draft, what AI never touches, what the consumer must sign, the portal-output-only rule for regulated numbers, the adverse-action discipline on soft-pull declines, lender-specific configuration for Wisetack/GreenSky/Synchrony, and the documented operating cadence that survives a CFPB look, a state-AG TILA inquiry, an FCRA class action, a Wrench Group QBR, and a one-star review on the Tuesday after the soft-pull decline got presented wrong.

Why Financing Disclosure Is the Highest Direct Legal Exposure on the Kitchen Table

The Comfort Advisor closes a $14K furnace swap, opens Wisetack, runs the soft-pull, the portal returns 8.99% APR over 84 months at $217/month. The advisor's iPad's AI assistant drafts a one-page narrative: "Your monthly investment is $217, financed at our best available rate, with no penalty for early payoff." That sentence is a Reg Z artifact. If the APR drifted to 9.99% in the AI summary because the model hallucinated a digit, the shop is in a Reg Z violation the moment the homeowner signs. If the term shifted to 96 months. If the payment shows $207 because AI rounded down. Each drift is a per-violation event at $500-$5,000 plus actual damages plus the regulatory cascade.

The cascade is structural. CFPB administrative complaint opens an examination. State TILA-analog statutes layer per-state private rights of action — California's Rosenthal Act, Texas's Finance Code, New York's General Business Law all carry TILA-shaped components. State-AG unfair-practice actions under UDAP add another vector. Wisetack/GreenSky/Synchrony partner agreements include compliance-failure clauses that suspend or terminate the lender relationship — partner-status loss collapses financing close rate, which collapses ticket revenue on $5K+ jobs. Class-action exposure is the asymmetric ceiling; 2025-2026 settlements in auto financing, retail installment, medical lending sit in the $5M-$50M+ band. Vendor disclaimer is irrelevant — SaaS LoL clauses cap at 12 months of fees ($12K-$36K) while Reg Z and FCRA private rights of action attach to the entity presenting the financing language. The vendor exits; the shop pays.

The Portal-Output-Only Rule — Where AI Stops at the Kitchen Table

The non-negotiable rule: AI does not draft regulated financing numbers. The Wisetack, GreenSky, and Synchrony portal output is the only Reg Z-compliant source of APR, term, finance charge, total payments, payment schedule, and amount financed for that homeowner on that ticket. Portal output copy-pasted verbatim into the proposal artifact the homeowner signs. AI never touches the regulated numbers.

The rule operationalizes through three structural patterns. Pattern one: the literal placeholder. The shop's proposal template — ResponsiBid, ServiceTitan, custom PDF generator, or iPad app — has a literal placeholder in the financing section that reads "[paste Wisetack portal output here]" or "[paste GreenSky disclosure here]." The advisor opens the portal, copies the regulated disclosure block verbatim, pastes it in. AI surrounding the placeholder never crosses into it. Pattern two: the system-prompt prohibition. The shop's AI assistant carries an explicit prohibition: "You do not draft APR, finance charge, payment amount, term, total payments, or amount financed. If the user requests these, respond with: 'These come from the Wisetack/GreenSky/Synchrony portal output only. Please paste the portal disclosure block.'" The prohibition lives in the system prompt the shop controls, not the model behavior the vendor controls. Pattern three: the verification gate at proposal close. Before any proposal containing financing language gets sent or signed, a structural check confirms the regulated-numbers block matches the portal output character-for-character. ResponsiBid's 2026 build supports it as a checkbox; ServiceTitan's financing module enforces via the portal integration; custom workflows implement it as a pre-send validator the advisor cannot override without a logged exception.

What AI does draft is the surrounding context: the "here's why financing fits this replacement" paragraph, the three-option comparison narrative (with each monthly investment number sourced from a portal output for that homeowner's pre-approved tier), the energy-savings present-value math, the "what happens at the end of the 0% promo window" explanation summarized verbatim from lender-supplied disclosure, the pivot script when a financing tier doesn't work. AI's job is the surrounding narrative, customer-facing context, comparison framing, closing flow. The regulated numbers stay in the portal output.

Wisetack, GreenSky, Synchrony — The Lender-Specific Configuration

Wisetack. Fast service-trade approvals — 60-second soft-pull at the door, tier handoff to the tablet within 2 minutes, 0% promo windows on 12-24 months close repair-to-replace pivots in the $3K-$15K band. AI assistants drafting Wisetack-related context reference the promo-window end-state disclosure verbatim from the portal — "after the 12-month 0% promotional period ends, the standard APR of [Wisetack-disclosed rate] applies." Hallucinating the standard APR or promo terms is a Reg Z violation. Wisetack's partner agreement makes AI-summarized disclosure failures a partner-compliance failure eligible for suspension or termination.

GreenSky. High-ticket replacement — $10K-$80K residential, $25K-$250K commercial. Deeper credit bands, longer terms (60-144 months), reduced-APR and 0%-deferred-interest closing surfaces. GreenSky's disclosure block is more complex than Wisetack's — deferred-interest math, reduced-APR step-down, prepayment terms, interest-accrual-during-promo language all carry Reg Z exposure. AI summaries of GreenSky produce the highest per-call exposure in the lender stack because dollar amounts are largest and disclosure complexity is highest. The verification gate is most critical for GreenSky.

Synchrony. Branded card programs and revolving lines for the ongoing repair-and-replace relationship. Reg Z exposure shape is different: revolving-credit terms include APR, minimum payment, late fee, returned-payment fee, default APR, and balance-transfer terms living in the cardholder agreement. AI's job is the introduction narrative, never the cardholder-agreement terms. The Synchrony partner agreement includes branded-card-presentment compliance terms advisors and CSRs honor verbatim.

The lender tier decision. AI surfaces the right lender for homeowner profile and ticket size — Wisetack under $15K service-trade closes, GreenSky for replacement above $10K with longer-term capacity, Synchrony for ongoing relationship and revolving needs. The decision logic lives in the AI's system prompt as a routing rule; regulated terms live exclusively in whichever lender's portal output the advisor runs the soft-pull through.

Adverse-Action Notices on Soft-Pull Declines — Where FCRA Hits

When a Wisetack, GreenSky, or Synchrony soft-pull declines a homeowner — declined entirely, or approved at a tier below what the ticket needs — FCRA requires an adverse-action notice with four specific components. Each missing component is a per-violation event at $100-$1,000 plus actual damages plus attorney fees. The 2025-2026 plaintiff bar has aggressive FCRA practices because statutory damages don't require proof of consumer harm and attorney-fee recovery aligns with class-litigation economics.

The four FCRA-required components: One: action taken (decline, counter-offer at lower tier, approval with adverse terms). Two: credit-bureau identification with full contact info (Experian, Equifax, TransUnion address and phone). Three: score range or specific score with reason codes producing the decline. Four: dispute-rights notice — right to free credit report within 60 days, right to dispute inaccurate information directly with the bureau, right to submit a consumer statement.

AI cannot reliably reproduce all four for a specific decline. Bureau identification varies by lender — Wisetack uses one, GreenSky another, Synchrony may pull across multiple. Score ranges vary by scoring model — FICO 8, FICO 9, VantageScore 4, lender-proprietary all produce different ranges and reason codes. Dispute-rights language is regulator-prescribed and lender-specific. AI-drafted adverse-action notices cobbled from training data are structurally incapable of FCRA compliance for any specific decline; the lender's signed template is the only compliant artifact.

Operating discipline: every soft-pull decline routes to the lender's signed adverse-action template, delivered through the lender's portal-mediated workflow or through the shop's compliance binder. AI's job is surrounding context — "what an adverse-action means," "what you can do next," "alternative financing tier we can try if you'd like." Monthly compliance audit pulls every soft-pull decline, confirms template delivery, logs the audit pass. The compliance binder plus the monthly audit log is what the CFPB examiner, state-AG investigator, and FCRA plaintiff firm read first.

What AI Can and Cannot Draft

AI can draft. Financing-fits-this-replacement narrative. Three-option comparison framing using portal-output payment amounts. Energy-savings present-value math at the proposed efficiency tier. 0%-promo-window context paraphrased from the lender's verbatim disclosure. Repair-vs-replace economic justification. Lender-tier routing logic. Decline-context narrative ("what an adverse-action notice means, what your next steps are"). Alternative-financing-tier pivot script. Follow-up cadence after a soft-pull (AI-drafted, human-reviewed, no auto-send). Objection-rebuttal library — "I want to think about it," "Can we do cash," "My credit isn't good enough" — drafted by AI, reviewed by the sales manager, deployed across the advisor team.

AI cannot draft. APR, finance charge, term, total payments, amount financed, payment schedule, payment amount, late-fee terms, default-APR terms, prepayment terms, balance-transfer terms. Adverse-action notice components — action taken, credit-bureau identification, score range with reason codes, dispute-rights notice. Federal Reg Z model disclosures (Schumer-box-equivalent for closed-end credit, GreenSky deferred-interest disclosure, Synchrony cardholder-agreement summary). State TILA-analog required disclosures. Lender-partnership-required brand language from Wisetack/GreenSky/Synchrony partner agreements.

The system-prompt prohibition holds across model updates because it lives in the shop's system prompt. Quarterly governance review confirms configuration at every assistant; sample outputs reviewed against the boundary; failures logged for remediation.

The Consumer Signature and the Defensible Artifact

What the consumer signs is the defensible Reg Z and FCRA artifact. The proposal, the financing application, the adverse-action acknowledgement — each is a regulated document whose contents must match the regulated source verbatim. The signature is the moment exposure crystallizes; everything upstream is preparation; the signature is the regulated event.

The shop's proposal template for any financed transaction includes a clearly demarcated financing block containing the portal-output disclosure verbatim, the consumer's printed name, the signature line, and the date. The financing block is structurally separated from AI-drafted surrounding narrative so regulated content is identifiable on inspection — the CFPB examiner reads the financing block; the FCRA plaintiff firm reads the financing block; the lender's compliance auditor reads the financing block. Structural separation prevents AI-drafted narrative bleeding into the regulated zone.

The signed artifact lives in the customer record — ServiceTitan, Sera, HCP, or BuildOps — for the lender-required retention period (5-7 years on Reg Z; longer on certain adverse-action records). Compliance binder cross-references the customer record with the portal-output source. Quarterly audit samples 20 financed transactions per lender; each confirms portal-output match, signature presence, and adverse-action template usage if applicable. Consumer's right to the signed artifact is honored on request within the lender-required timeframe (typically 30 days).

The Monthly Compliance Cadence

The owner's monthly financing-compliance cadence is 45-60 minutes and produces the documented audit-pass artifact every examiner, plaintiff firm, and lender auditor reads first.

Step one: pull every financed transaction from the prior month from ServiceTitan/Sera/HCP/BuildOps; cross-reference with each lender's monthly partner report; reconcile counts.

Step two: sample 10-20 financed proposals per lender; pull the signed artifact; pull the portal-output disclosure block from the lender portal; confirm character-for-character match in the financing block. Any mismatch escalates to immediate remediation — consumer notification, corrective documentation, lender notification, failure-log entry, root-cause analysis.

Step three: pull every soft-pull decline; confirm the lender's adverse-action template was delivered for each. Any decline without a delivered template is an FCRA per-violation event ($100-$1,000) requiring immediate remediation.

Step four: sample 5-10 AI-drafted proposal narratives; confirm regulated-term language did not bleed into AI-drafted content; confirm the system-prompt prohibition held; confirm the verification gate at proposal close functioned. Prohibition failures escalate to system-prompt review and assistant re-configuration.

Step five: log the audit pass — date, transaction counts, sample sizes, findings, remediations, lender-partner status. The audit log is the artifact under regulatory inquiry; absence of the cadence is presumptive non-compliance.

Vendor Configuration and Quarterly Governance Review

Every AI tool touching a financing-adjacent surface requires per-vendor configuration confirmation at pilot and quarterly re-audit. Vendors ship per-shop configuration; the operator carries deployment-confirmation responsibility; vendor disclaimers exclude liability for misconfiguration.

ResponsiBid. The 2026 build supports system-prompt prohibition and the verification gate at proposal close. Configure the prohibition; confirm the gate is enabled; sample 5 proposals per quarter; the advisor cannot override the gate without a logged exception.

ServiceTitan Financing Summary. Integrates with Wisetack and GreenSky through the partner-portal connection. Configure to pull portal output verbatim into the proposal; quarterly audit confirms portal-pull integrity. Titan Intelligence layered on top respects the prohibition.

Custom Comfort Advisor tablet workflows. Shop-built or third-party (n8n, Zapier, custom GPT assistants) require explicit system-prompt prohibition and explicit verification gate implementation. Compliance officer reviews at pilot and quarterly.

Avoca outbound financing follow-up. Outbound sequences after soft-pull configured to honor the regulated-term prohibition and route regulated-term requests to the advisor's direct line. Quarterly audit samples outbound recordings.

Hatch nurture sequences referencing financing. Templates configured at the shop level respect the prohibition; marketing manager cannot include AI-drafted regulated-term values; quarterly audit reviews template samples.

The quarterly governance review walks the vendor matrix once every 90 days: each tool crossed against the prohibition, the verification gate, the lender-portal integration, the audit-log access, and partnership-agreement compliance. The artifact is a per-vendor, per-quarter attestation signed by owner and compliance officer — produced under audit on 24-hour notice; survives CFPB inquiry, state-AG TILA examination, FCRA class-action discovery, and lender partner audit.

The Asymmetric Architecture and the Week-One Build

Exposure is high: Reg Z $500-$5,000 per violation plus actual damages plus CFPB plus state TILA plus state AG plus partner-status loss plus class action; FCRA $100-$1,000 per violation plus actual damages plus attorney fees; cumulative six-to-seven figures on systemic patterns; partner-status loss collapses financing close from 14% baseline to 28-40% target. Fix is cheap: portal-output-only rule in the proposal template, system-prompt prohibition at every assistant, verification gate at proposal close, lender-signed adverse-action templates, monthly 45-60 minute audit, quarterly 90-minute vendor governance review. Annual counsel review $3K-$8K; ongoing cost is operator and compliance-officer time. Total: $10K-$20K annual pre-failure; post-failure cost compounds to seven figures plus 12-18 month financing-close-rate dormancy plus competitor capture during the dormancy. Three trades-adjacent FCRA class actions landed in late 2025 and early 2026; probability is converging toward certainty for shops above $5M in financing volume.

The L4 owner's posture by Q3 2026 composes the financing-compliance architecture alongside the TCPA architecture from the prior lesson. Counsel-reviewed disclosure for Wisetack, GreenSky, Synchrony plus AI-prohibition system prompts. Vendor configuration matrix — ResponsiBid, ServiceTitan Financing Summary, custom tablet workflows, Avoca outbound, Hatch nurture — crossed against portal-output integration, prohibition configuration, verification gate, audit-log access. Failure log. Monthly compliance audit plus quarterly vendor governance review. The four artifacts compose the operating system the PE-backed platform CEO walks into the board review with; the Authority Brands or Wrench Group regional president audits in the portfolio QBR; the CFPB examiner reads under inquiry; the FCRA plaintiff firm reviews under discovery. One operating system; every audience.

Key Takeaways

• AI never drafts regulated financing numbers. APR, finance charge, term, total payments, amount financed, payment amount, payment schedule come exclusively from the Wisetack/GreenSky/Synchrony portal output. Portal-output-only rule is non-negotiable; AI drafts surrounding narrative.
• Reg Z exposure $500-$5,000 per violation plus actual damages, attorney fees, CFPB complaint, state TILA exposure, state-AG action, potential partner-status loss, plus class-action exposure ($5M-$50M+ adjacent-industry bands).
• FCRA exposure runs $100-$1,000 per violation on every adverse-action notice missing one of four required components — action taken, credit-bureau identification, score range with reason codes, dispute-rights notice. Lender's signed template is the only compliant artifact.
• Three structural patterns operationalize the rule — the literal placeholder in the proposal template ("[paste Wisetack portal output here]"), the system-prompt prohibition at every AI assistant, the verification gate at proposal close that confirms character-for-character match.
• Wisetack, GreenSky, Synchrony tier decisions are routed by AI; regulated terms come from each lender's portal. Wisetack for service-trade closes under $15K; GreenSky for replacement above $10K with longer-term capacity; Synchrony for branded card and revolving. AI routes; the portal returns; AI never re-derives.
• Adverse-action notices use the lender's signed template. Bureau ID, score range, reason codes, and dispute-rights language are lender-specific and regulator-prescribed; AI cannot reliably reproduce all four. AI drafts surrounding context only.
• What the consumer signs is the defensible artifact. Financing block contains the portal-output disclosure verbatim, structurally separated from AI-drafted narrative. Signed artifact lives in the customer record for the lender-required retention period (typically 5-7 years on Reg Z).
• Monthly compliance audit: 45-60 minutes. Pull prior-month financed transactions; sample 10-20 proposals per lender for portal-output match; confirm adverse-action template delivery on every decline; review AI-drafted narrative samples; log the audit pass. The artifact every examiner reads first.
• Quarterly vendor governance review: 90 minutes. ResponsiBid, ServiceTitan Financing Summary, custom tablet workflows, Avoca outbound, Hatch nurture each crossed against the prohibition, the verification gate, the lender-portal integration, the partnership-agreement compliance. Per-vendor attestation signed by the owner.
• Asymmetric architecture: high exposure, cheap fix. $10K-$20K annual including counsel; post-failure cost compounds to seven figures plus 12-18 month financing-close-rate dormancy. Build the cheap fix in week one; the L4 owner's posture composes the financing-compliance architecture alongside the TCPA architecture as a named operating-system component by Q3 2026.