Choosing compliance software for a mortgage advice firm is not simply an IT purchase. The system may influence how advisers record recommendations, how managers supervise work and how the firm demonstrates that clients have received appropriate support. A checklist needs to test those outcomes rather than count features on a sales page.
The most useful assessment follows real work. It examines what happens when a new enquiry arrives, when a case becomes complex, when marketing needs approval and when management needs evidence across the whole firm. The questions below can be adapted for a directly authorised business or used when assessing technology supplied through a network.
Define the records the firm must keep
List the documents, data and decisions created during advice. Include the fact-find, research, suitability explanation, disclosures, client communications, identity checks and evidence of consent. Add records linked to training, competence, supervision, complaints and financial promotions where they form part of the firm’s responsibilities.
Decide which information should be structured for reporting and which needs free text or uploaded evidence. A system that captures every answer in a fixed field may make reports easy but lose important context. One that relies entirely on documents may preserve detail while making oversight slow.
Test the compliance functions with a sample case
Request a demonstration using a realistic client journey rather than a prepared tour. Ask the provider to show how an adviser records objectives, compares options, explains the recommendation, obtains documents and responds when information changes. Include an exception so the demonstration cannot follow only the easiest path.
When assessing mortgage compliance software, check whether the functions connect to the rest of the case rather than sitting in a separate module. Stonebridge says its Revolution system includes suitability letters, promotion approvals, compliance reports, one-to-ones and continuing professional development, automated file checks and integrated sourcing. A prospective member should see how those functions exchange information and where manual work remains.
Ask what a file reviewer sees, how feedback is recorded and whether an adviser can show that remedial action has been completed. Check whether the system retains the original record when information is amended. A useful audit trail should help the firm understand what changed, when and by whom.
Review controls for financial promotions
The checklist should cover website copy, social posts, emails, printed materials and introducer communications where applicable. Find out how staff submit content, who can approve it and how the approval period or conditions are recorded.
Version control is important because similar files can easily be confused. The system should make the approved version clear and prevent outdated wording from being mistaken for current material. If a library of pre-approved content is available, ask who maintains it and how users are notified about changes.
The process also needs a route for unusual requests. Advisers should know what information to supply and how long review normally takes. An urgent campaign should not create pressure to publish before the required approval is in place.
Examine supervision and competence records
One-to-one meetings, training, continuing professional development and competence assessments should form a coherent record. Managers need to see what has been completed, where development is required and whether agreed actions have been followed through.
Check whether access reflects reporting lines. A supervisor may need a view across several advisers, while an individual should see their own actions and evidence. The system should support the firm’s structure without giving everyone unrestricted access to personnel and client information.
Notifications can help with overdue actions, but they should be configurable. Too many alerts are often ignored. Ask whether the firm can set priorities, assign owners and produce a report of work that remains outstanding.
Ask what management information can demonstrate
Start with decisions rather than dashboards. Identify the questions management needs to answer, such as whether file quality is improving, where cases are delayed or whether particular clients are receiving poorer outcomes. Then ask the provider to build or show those reports.
The FCA expects firms subject to the Consumer Duty to monitor whether retail customers receive good outcomes. Its guidance covers products and services, price and value, consumer understanding and consumer support. Software may help collect and organise information across those areas, but a report needs enough context for management to interpret the findings.
Check whether data can be filtered by adviser, office, product, client group and time period where relevant. Ask how missing information is handled because an apparently positive result can be misleading if many records are incomplete. The firm should also be able to export information in a usable format when deeper analysis is needed.
Check integrations and repeated data entry
Map the systems used for customer relationship management, sourcing, identity checks, document collection, email and sales progression. For each integration, ask what data moves, how often it updates and what happens when the connection fails.
Repeated entry wastes time and creates inconsistencies. A client’s address or income should not need to be typed into several systems without a clear reason. During the demonstration, change a piece of information and observe where the update appears. Find out which record is treated as the authoritative version.
Stonebridge states that Revolution includes mortgage, protection and general insurance sourcing and referrals, as well as a client portal and an introducer portal. Firms considering an integrated platform should still check whether it supports their chosen partners and existing working methods.
Assess security and access management
The Information Commissioner’s Office requires organisations to protect personal data with appropriate technical and organisational measures. Mortgage advice firms hold extensive financial and identity information, so security questions should be part of the initial assessment.
Review authentication, permissions, audit logs, backups, encryption, incident response and account removal. Ask how the supplier tests its controls and how the firm will be told about a security incident. Understand where data is stored and which third parties process it.
Access should be easy to administer as the firm changes. Test how a new starter is added, how a role change is handled and how access is removed promptly when someone leaves. The audit record should show administrator actions as well as case activity.
Measure training and ongoing support
A system can meet the technical requirements and still fail if staff cannot use it confidently. Ask what training is included for advisers, administrators, supervisors and new starters. Recorded videos are useful for reference, but staff may also need live help when applying a process to a difficult case.
Find out how support requests are logged, prioritised and escalated. Ask about planned updates and how changes are communicated. If the technology is provided through a network, clarify whether the network or the software team handles each type of question.
Score evidence rather than promises
Turn the checklist into a simple record of the requirement, evidence seen, outstanding question and owner. A live demonstration, sample report or written service term carries more weight than a general assurance. Record limitations as well as strengths so the final comparison remains realistic.
The chosen system should help people complete work accurately and give managers a reliable view of risk and customer outcomes. A disciplined checklist makes that easier to judge. It also creates a record of why the software was selected and which controls need attention during implementation.
