The audit-prep checklist we wish we'd had.

Whether it's a CFPB exam, a state regulator, a client's quarterly compliance review, or your own internal audit — the questions are remarkably consistent. Here's how to be ready before they ask.

72 hours before the exam

1. Pull the universe. Generate the list of every consumer notice that left your environment in the audit window. Group by template ID and version.
2. Reconcile to your library.Every notice must trace back to an approved template version. Any notice that doesn't is your priority finding to surface yourself, before the examiner does.
3. Snapshot the audit log. Generate a signed export of every authoring, review, and deployment event in the window.
4. Pre-stage exhibits. Build a binder (or PDF set) of the five most-frequently-sent templates, including current version, prior version, change log, and reviewer chain.

The questions every examiner asks

• "Show me the version of [Template X] that was active on [date Y]."
• "Who approved the most recent change to [block Z], and when?"
• "How do you know that the language in your CRM matches the language compliance approved?"
• "What is your process for incorporating regulatory updates? Walk me through the most recent example."
• "How long has it been since this template was last reviewed?"
• "Describe your review-and-approval workflow. Show me a recent submission and its approval chain."

The five things examiners flag most often

1. Stale templates.A template that hasn't been touched in 18+ months and still references superseded regulatory language.
2. CRM drift.What the CRM is sending doesn't match what the binder says compliance approved.
3. Audit-log gaps.Edits and approvals that happened but weren't recorded — or were recorded inconsistently.
4. Itemization-date math errors. Especially in initial validation notices.
5. State-disclosure freshness.The NY DFS or CA DFPI language says "as of 2022" and we're in 2025.

The writecomply audit-prep export

If you're a customer, the answer to all of the above is one click. Audit → New export → Date range → Generate. The result is a signed PDF with the universe, change log, and approval chain — fully reconciled to your CRM. The goal is for that export to be the first thing you hand an examiner, not the last thing you scramble to assemble.