---
title: "FCRA Compliance Checklist for Lead Pre-Qualification | FunnelFi"
url: https://funnelfi.ai/guides/fcra-compliance-checklist-for-pre-qualification
description: "A practical FCRA compliance checklist for lenders, agencies, and platforms running soft-pull lead pre-qualification workflows in 2026."
lang: en
---

Compliance

# FCRA Compliance Checklist for Lead Pre-Qualification

The consent, permissible purpose, and audit trail you need on every pull.

Schedule Demo: https://funnelfi.ai/schedule-call

See pricing: https://funnelfi.ai/pricing

- Permissible purpose
  Documented for every pull, no exceptions.
- Consent + timestamp
  IP, language shown, and time captured.
- Audit trail
  Decision + consent linked and retrievable.
- Adverse action
  Handled by the lender of record, not the pre-qual layer.

## The Checklist

1. **Permissible purpose declared.** Written instructions from the consumer is the standard purpose for consumer-initiated pre-qualification.
2. **Consent language displayed at intake.** Clear, plain-English, above the submit button, not buried in a linked policy.
3. **Consent artifact stored.** Timestamp, IP address, exact language shown, form field values.
4. **Soft inquiry only.** No hard pulls at pre-qualification stage, hard pulls are for underwriting decisions.
5. **Decision linked to consent.** Every stored verdict references the consent record.
6. **Retention policy documented.** How long consent and pull artifacts are kept, and how they're destroyed.
7. **Adverse action pathway.** When a lender downstream denies based on the report, the lender issues the adverse action notice, not the pre-qualification layer.
8. **Vendor certification.** Your pre-qualification vendor certifies FCRA-compliant data access.

## Who Owns What

| Obligation | Owner |
| --- | --- |
| Permissible purpose declaration | Pre-qualification customer (lender / agency) |
| Consent capture at intake | Form owner |
| Bureau data access | Pre-qualification vendor |
| Adverse action notice | Lender of record after hard-pull decision |
| Consumer dispute handling | Bureau + furnisher |

## Frequently Asked Questions

- Do I need to issue an adverse action notice for a DNQ verdict?
  No. A DNQ verdict at pre-qualification is not a credit decision; it's a routing signal. Adverse action is owned by the lender after a formal hard-pull decision.
- How long should I retain consent records?
  Industry standard is a minimum of 5 years post-inquiry, though state laws vary. Consult counsel for your specific footprint.
- Is name + phone + email enough for a soft pull?
  Yes. Modern bureau APIs establish permissible purpose with name, phone, email, and address. SSN is not required for a soft inquiry.

## See it on your pipeline

Schedule a 30-minute demo and we'll map the pre-qualification layer to your current stack.

## Structured data

```json
[
  {
    "@context": "https://schema.org",
    "@graph": [
      {
        "@type": "Organization",
        "@id": "https://funnelfi.ai/#organization",
        "name": "FunnelFi",
        "url": "https://funnelfi.ai",
        "logo": "https://funnelfi.ai/favicon.png",
        "sameAs": []
      },
      {
        "@type": "WebSite",
        "@id": "https://funnelfi.ai/#website",
        "url": "https://funnelfi.ai",
        "name": "FunnelFi",
        "publisher": {
          "@id": "https://funnelfi.ai/#organization"
        }
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@type": "TechArticle",
    "headline": "FCRA Compliance Checklist for Lead Pre-Qualification",
    "description": "A practical FCRA compliance checklist for lenders, agencies, and platforms running soft-pull lead pre-qualification workflows in 2026.",
    "url": "https://funnelfi.ai/guides/fcra-compliance-checklist-for-pre-qualification",
    "inLanguage": "en-US",
    "isPartOf": {
      "@id": "https://funnelfi.ai/#website"
    },
    "author": {
      "@id": "https://funnelfi.ai/#organization"
    },
    "publisher": {
      "@id": "https://funnelfi.ai/#organization"
    },
    "datePublished": "2026-07-15",
    "dateModified": "2026-07-15",
    "mainEntityOfPage": "https://funnelfi.ai/guides/fcra-compliance-checklist-for-pre-qualification"
  },
  {
    "@context": "https://schema.org",
    "@type": "FAQPage",
    "mainEntity": [
      {
        "@type": "Question",
        "name": "Do I need to issue an adverse action notice for a DNQ verdict?",
        "acceptedAnswer": {
          "@type": "Answer",
          "text": "No. A DNQ verdict at pre-qualification is not a credit decision; it's a routing signal. Adverse action is owned by the lender after a formal hard-pull decision."
        }
      },
      {
        "@type": "Question",
        "name": "How long should I retain consent records?",
        "acceptedAnswer": {
          "@type": "Answer",
          "text": "Industry standard is a minimum of 5 years post-inquiry, though state laws vary. Consult counsel for your specific footprint."
        }
      },
      {
        "@type": "Question",
        "name": "Is name + phone + email enough for a soft pull?",
        "acceptedAnswer": {
          "@type": "Answer",
          "text": "Yes. Modern bureau APIs establish permissible purpose with name, phone, email, and address. SSN is not required for a soft inquiry."
        }
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "position": 1,
        "name": "Home",
        "item": "https://funnelfi.ai"
      },
      {
        "@type": "ListItem",
        "position": 2,
        "name": "Guides",
        "item": "https://funnelfi.ai/guides"
      },
      {
        "@type": "ListItem",
        "position": 3,
        "name": "FCRA Compliance Checklist for Lead Pre-Qualification",
        "item": "https://funnelfi.ai/guides/fcra-compliance-checklist-for-pre-qualification"
      }
    ]
  }
]
```