{
  "id": "onboarding-training-mentoring/file-standards-and-audits-what-redrock-checks-and-why",
  "title": "File Standards and Audits: What Redrock Checks and Why",
  "slug": "onboarding-training-mentoring/file-standards-and-audits-what-redrock-checks-and-why",
  "description": "What a compliant broker file contains, how Redrock's file reviews and quarterly compliance reviews work, and why the audit regime protects the broker.",
  "category": "",
  "content": "New brokers tend to hear the word \"audit\" and think surveillance. That is the wrong frame. For someone writing their first fifty loans, a file standard is scaffolding — it tells you exactly what a finished file looks like before you have the experience to know it yourself. The brokers who struggle are not the ones who get audited. They are the ones who never had a standard to work to.\n\nHere is what Redrock checks, and why each item is on the list. This is general information about how the review regime works, not legal or compliance advice.\n\n## The compliance document checklist\n\nEvery file is assessed against a compliance document checklist. It is deliberately mechanical: either the item is on the file or it is not. That removes argument and, more usefully, removes guesswork. Before you submit anything, you can self-check against the same list the reviewer will use.\n\n## Fact-find and evidence of reasonable enquiries\n\nThe fact-find is not a form to be filled in and forgotten. It is the evidence that you made reasonable enquiries into the client's financial situation, requirements and objectives. A reviewer is looking for two things: that the enquiries were made, and that they were specific to this client. \"Wants a home loan\" is not a requirement. \"Wants to fix half the balance because they intend to reduce hours in eighteen months\" is.\n\n## Verification\n\nEnquiry and verification are separate obligations. Verification is the evidence behind what the client told you:\n\n| Area | What's verified | Typical evidence |\n|---|---|---|\n| Income | Amount, stability, source | Payslips, tax returns, employer confirmation, business financials |\n| Expenses | Actual living costs, not a benchmark alone | Bank statement analysis, declared expenses reconciled |\n| Transactions | Conduct, undisclosed commitments | Bank statement verification or open banking data |\n| Credit | Existing liabilities, conduct history | Access seeker credit file from a credit reporting body |\n| Security | Value and type of property | Property valuation and market data service |\n\nThe specific service providers Redrock gives you access to for each of these are set at the platform level and change from time to time — confirm the current tooling at induction or on **1300 667 694** rather than assuming a particular provider.\n\nThe common audit finding is not missing documents. It is documents on file that contradict the assessment and were never addressed in writing.\n\n## The preliminary assessment\n\nThe written preliminary assessment records why the credit contract is not unsuitable for this client. A reviewer reads it looking for the link between what the client said they needed and what you recommended. If that link is only in your head, the file has a gap.\n\n## File notes\n\nFile notes are the cheapest insurance in this industry. They cost you two minutes at the time and they are the only record of conversations that are otherwise unrecoverable — why the client rejected the cheaper option, what they said about upcoming changes to their income, what you warned them about.\n\nUnder **Best Interests Duty** you must act in the client's best interests and, where your interests and the client's conflict, give priority to the client's. A file note is often the only place that reasoning exists.\n\n## Which obligations apply to which file\n\nThis distinction determines what the audit measures your file against.\n\n**Best Interests Duty and the responsible lending obligations apply to credit assistance for consumer credit. They do not apply to commercial or business lending.** A commercial file is not assessed for a preliminary assessment or a BID rationale, because those obligations do not attach to it.\n\nCommercial and private lending files are still assessed — against Redrock's own file standards, which cover them deliberately. The finding that matters most here is the purpose classification itself: document the test you applied to conclude a loan was business-purpose, not just the conclusion. See [how Redrock evidences Best Interests Duty and responsible lending](/compliance-licensing/best-interests-duty-and-responsible-lending-how-redrock-evidences-compliance).\n\n## The credit proposal disclosure document\n\nThe disclosure required under the **National Consumer Credit Protection Act 2009** — the Statement of Credit Assistance in Redrock's framework — must be provided, and the file must show when. Reviewers check timing as well as presence.\n\n## Record keeping\n\nFiles are expected to be complete, retrievable and stored in the systems provided rather than on a personal laptop. The [broker portal and compliance platform](/tools-technology/inside-the-redrock-broker-portal-and-compliance-platform) exist so that there is one version of every document and one place every file lives. Lodgement and CRM run on Salestrekker, a third-party platform Redrock provides access to rather than software Redrock built.\n\n## How the review regime actually runs\n\nRedrock operates file reviews and audits against the compliance document checklist, supported by quarterly compliance reviews, compliance registers, ongoing risk monitoring and corrective action management.\n\n- **File reviews and audits** look at individual files against the checklist.\n- **Quarterly compliance reviews** step back and look at patterns across your files rather than one deal.\n- **Compliance registers** track the things that need to be tracked — complaints, breaches, conflicts, training.\n- **Risk monitoring** watches for the early signals that usually precede a problem.\n- **Corrective action management** is the part that matters most: a finding is not a verdict, it is an item with an owner, an action and a date. It is closed when it is fixed.\n\nWhere a finding amounts to a reportable situation, it moves into breach management, and statutory reporting windows apply — as short as **10 business days** for the most serious matters. Verify current obligations with ASIC. The full regime is set out in [how Redrock supervises and audits broker files](/compliance-licensing/how-redrock-supervises-and-audits-broker-files).\n\nRedrock has not published how many files are sampled per review or what score triggers escalation. Ask before you sign — call 1300 667 694.\n\n## Why this protects you, not just the client\n\nThree reasons, in order of how often they bite.\n\n**Memory fails.** A complaint or a lender query can arrive years after settlement. The file is your account of what happened. If it is thin, you are relying on recollection against a written record held by someone else.\n\n**Habits set early.** The standard you keep on file ten becomes the standard you keep on file five hundred. Fixing a bad habit at file ten costs an afternoon. At file five hundred it is a remediation project.\n\n**Findings compound quietly.** A single missing file note is trivial. The same omission across forty files is a pattern, and patterns are what reviewers and regulators respond to. Quarterly reviews exist to catch patterns while they are still small.\n\n## Getting it right from file one\n\nIf you are new to the industry, you are not expected to know this instinctively. Tailored mentoring, the [induction program](/onboarding-training-mentoring/the-redrock-induction-program-how-joining-actually-runs) and direct support cover file standards explicitly.\n\nMentoring for new entrants is **required under MFAA and FBAA membership standards together with the licensee's supervision obligations** — not by statute. Association requirements are updated periodically, so confirm current standards with the MFAA or the FBAA directly. See [mentoring at Redrock](/onboarding-training-mentoring/mentoring-at-redrock-what-new-brokers-actually-get).\n\nThe practical advice from brokers who have been through it: build the file as you go, not at lodgement. Write the note while the conversation is still in your head. Treat the checklist as a pre-flight list rather than a post-mortem.\n\nMore on the framework in [compliance, licensing and trust](/compliance-licensing/compliance-licensing-and-trust-how-redrock-operates-under-asic-s-credit-regime), the systems in [tools, technology and support](/tools-technology/tools-technology-and-support-what-a-redrock-broker-gets-on-day-one), and definitions in the [mortgage aggregation glossary](/glossary/mortgage-aggregation-glossary-the-terms-that-matter).",
  "geography": {},
  "metadata": {},
  "publishedAt": "2026-07-30T14:37:13.612274+00:00Z",
  "tags": [
    "mortgage broker file audits",
    "compliance document checklist",
    "fact-find requirements",
    "loan verification evidence"
  ],
  "workspaceId": "05c2bd24-b8a3-431b-8690-30ce38d17d11",
  "_links": {
    "canonical": "https://redrock.agentic.norg.ai/-group/onboarding-training-mentoring/file-standards-and-audits-what-redrock-checks-and-why/"
  }
}