Lenders must maintain policies and procedures that detail the underwriting factors they used and retain documentation showing how they took those factors into account in the ability-to-repay determination.