Scoping and evidencing QFC stay clause remediation across the agreement estate

Stay requirements reach beyond derivatives into repo, securities lending and custody. The hard part is not the amendment language, it is knowing which agreements are in scope.

What does QFC stay clause remediation involve?

It involves identifying every qualified financial contract a covered entity holds, confirming whether each already contains compliant stay and cross-default override language, remediating the rest through protocol adherence or bilateral amendment, and maintaining the recordkeeping capability regulators expect. In practice the scoping step dominates the effort, because qualified financial contracts include repurchase agreements, securities lending, custody arrangements and certain guarantees, not only derivatives.

Last updated: September 24, 2026 · Reviewed by the Aavenir Financial Services practice

Key takeaways

  • ✓Scope extends well past derivatives, and firms routinely under-identify custody and guarantee arrangements.
  • ✓Protocol adherence covers many counterparties but leaves a bilateral remediation tail that needs tracking.
  • ✓Recordkeeping obligations continue indefinitely, long after the remediation project closes.
  • ✓New and amended agreements need a compliance gate, or the remediated population decays.

The qualified financial contract stay rules adopted by the Federal Reserve, the Office of the Comptroller of the Currency and the Federal Deposit Insurance Corporation require covered entities to ensure that their qualified financial contracts contain provisions limiting a counterparty’s ability to exercise default rights based on the entity’s affiliate entering resolution. The regulatory intent is to prevent a disorderly unwinding of contracts during a resolution event. The operational consequence for the firms subject to them is a contract remediation exercise of unusual breadth.

Most firms handled the initial wave through the industry resolution stay protocol, which delivered coverage efficiently for adhering counterparties. What tends to remain afterwards is a tail: counterparties that did not adhere, agreement types that sit outside the protocol’s reach, newly onboarded relationships, and legacy documents whose in-scope status was never definitively established. That tail is where remediation programs stall.

This guide treats the problem as a contract data exercise rather than a documentation exercise. The amendment language is largely settled. What is not settled, in many institutions, is a defensible answer to the question of which agreements are in scope, what their current compliance state is, and how that state is maintained as the estate changes.

Why scoping is the hard part

Qualified financial contracts are defined by product characteristics rather than by document title, which means scope cannot be determined from a contract type field alone. Five factors make identification harder than it first appears.

  • Breadth of the definition, covering securities contracts, commodity contracts, forward contracts, repurchase agreements, swap agreements and related credit enhancements.
  • Credit enhancements travel with the contract, so guarantees and collateral arrangements supporting an in-scope agreement fall into scope themselves.
  • Document titles are unreliable, because a master agreement may cover both in-scope and out-of-scope activity depending on the annexes executed under it.
  • Entity structure matters, since the rules apply by covered entity, and the same counterparty relationship may be in scope for one legal entity and not another.
  • Legacy documentation gaps, where older agreements lack the metadata needed to classify them without a document-level review.

The practical consequence is that scoping cannot be completed from a counterparty list. It requires a document-level classification pass across the agreement estate, with the classification recorded as durable data rather than as the output of a one-off project spreadsheet that ages out within a year. Institutions that approach this as a legal review rather than as a data exercise tend to produce an answer that is correct on the day it is delivered and stale within months, because nothing in the process keeps it current as new agreements are executed.

The tail is the risk

Protocol adherence typically resolves the majority of counterparties quickly, which makes the remaining bilateral population look small. It is also the population with the weakest documentation, the least standard agreements and the counterparties least inclined to sign an amendment, which is why the tail consumes most of the program timeline.

What has to be maintained after remediation

Remediation is a project. Compliance is a standing state. These are the controls that keep the two from diverging once the project team disbands.

  • Recordkeeping capability. The ability to produce qualified financial contract records in the required form and timeframe is an ongoing obligation, not a project deliverable, and it degrades when the underlying data is not maintained.
  • A gate on new agreements. Every new in-scope agreement must carry compliant language at execution. Without a gate in the onboarding path, the remediated population erodes with each new relationship.
  • Amendment monitoring. An amendment to an in-scope agreement can affect its compliance status, so amendments need the same classification and check as originals.
  • Entity and affiliate changes. Reorganizations, acquisitions and new legal entities change which agreements sit with which covered entity, and therefore which are in scope.
  • Evidence of coverage. Adherence letters, executed amendments and classification decisions retained and retrievable, because the question will be asked long after the people who answered it first have moved on.

Five steps to a defensible compliance position

Step 1, classify the estate at document level

Run a classification pass across master agreements, annexes, guarantees and collateral documents, recording in-scope status, covered entity, counterparty and current compliance state as structured fields. Treating this as a durable data model rather than a project extract is what allows the answer to be reproduced later, and the same discipline underpins broader third-party contract automation work.

Step 2, reconcile protocol coverage against the population

Match adherence records to the classified population to produce a precise remaining set. Most firms find discrepancies here, usually because adherence was recorded at counterparty group level while agreements sit with specific legal entities.

Step 3, work the bilateral tail with a tracked outreach

Each remaining counterparty becomes a tracked item with an owner, a status and a next action. The value of tracking is less about speed than about being able to demonstrate a reasoned, documented effort on the relationships that remain unresolved. Where the discrepancy runs the other way, and adherence is recorded for an entity with no in-scope agreements, that is worth understanding too, since it usually indicates a classification gap rather than surplus coverage.

Step 4, install the execution gate

Add a compliance check to the agreement approval path so that an in-scope agreement cannot be executed without compliant stay and cross-default override language. This is the control that prevents the population from decaying after the project closes.

Step 5, rehearse the recordkeeping request

Periodically produce the qualified financial contract records as if responding to a request, and measure how long it takes and what is missing. A capability that has never been exercised is an assumption rather than a control.

See in-scope classification maintained as live data

Aavenir keeps agreement classification, compliance state and evidence linked to the executed documents, so scope questions have a current answer.

Book a demo

Where this connects to the wider contract program

Stay clause remediation is one of several regimes that ask the same underlying question of a financial institution: can you tell us, with evidence, which of your agreements have a particular characteristic and what their current state is. Vendor oversight expectations ask it about service providers. Resolution planning asks it about critical services and their contractual continuity. Each program that answers the question separately builds a separate dataset that ages separately. Firms that instead maintain one classified agreement estate, with regime-specific attributes layered on top, find that the second and third programs cost a fraction of the first. The obligation register that results also serves ongoing obligation management rather than sitting idle between examinations. There is also a practical argument for doing the classification well rather than adequately. A classification recorded as structured data supports queries nobody anticipated when it was built, which is exactly what the next regulatory request tends to require. A classification recorded as a project spreadsheet supports only the question it was built to answer, and usually not for very long.

Agreement types and scoping considerations

An orientation table for the classification pass. Scope determination should follow the regulatory definitions and legal advice rather than this summary, which is intended to show where classification effort concentrates.

Agreement familyScoping difficultyCommon gapClassification approach
Derivatives master agreementsLowEntity-level adherence mismatchMatch adherence to executing entity
Repurchase and reverse repoModerateAssumed covered by protocolConfirm annex-level coverage
Securities lendingModerateLegacy documents lacking metadataDocument-level review
Guarantees and credit supportHighNot recognized as in scopeTrace to the supported agreement
Custody and related servicesHighClassified as service agreementsAssess against product characteristics

The stay rules have been in force long enough that the initial remediation wave is history in most institutions. What remains is the steadier discipline of keeping the classification current, gating new agreements, and being able to produce records on request without a scramble. That is contract data work rather than legal drafting work, and it rewards a single maintained estate over a series of project datasets. Firms that have built it report that the next regime to ask a similar question, and there is always a next one, lands as a configuration exercise rather than a program. The institutions that struggle are those where the answer lives with the people who produced it rather than in a system, because those people move on and the question does not.

For related guidance, see DORA Article 28, what your ICT contracts must carry, Finding embedded leases in your contracts under ASC 842 and The bank’s guide to DORA ICT third-party contract terms.

FAQ

QFC remediation questions

What is a qualified financial contract? +
Under the resolution stay rules it is a contract with defined product characteristics, including securities contracts, commodity contracts, forward contracts, repurchase agreements and swap agreements, together with credit enhancements such as guarantees that support them. Because the definition follows product characteristics rather than document titles, classification requires a document-level assessment.
Does the industry protocol resolve stay clause compliance completely? +
It resolves it efficiently for adhering counterparties and for the agreement types within its reach. What typically remains is a tail of non-adhering counterparties, agreement families outside the protocol, and newly onboarded relationships, and that tail generally consumes most of a remediation program’s timeline.
Why is scoping harder than remediation? +
Because the amendment language is largely settled while the in-scope population is not. Document titles are unreliable, a master agreement can cover both in-scope and out-of-scope activity depending on its annexes, credit enhancements inherit scope from the agreements they support, and the same counterparty may be in scope for one covered entity and not another.
What recordkeeping obligations apply? +
Covered entities are expected to maintain the capability to produce qualified financial contract records in a specified form and within a specified timeframe. This is a continuing obligation rather than a project deliverable, and it degrades quietly when the underlying agreement data stops being maintained after remediation.
How do you stop the remediated population from decaying? +
By putting a compliance gate in the agreement execution path, so an in-scope agreement cannot be executed without compliant stay and cross-default override language, and by applying the same classification check to amendments. Without a gate, each new relationship reintroduces the exposure the project just removed.
How does this relate to other regulatory contract programs? +
Stay remediation, vendor oversight and resolution planning all ask an institution to identify agreements with a particular characteristic and evidence their state. Maintaining one classified agreement estate with regime-specific attributes layered on it is considerably cheaper than building a separate dataset for each program.

One classified agreement estate, many regulatory answers

Aavenir maintains agreement classification, compliance state and supporting evidence as live contract data across covered entities.

  • ✓Document-level classification retained as structured fields
  • ✓Execution gates that keep new agreements compliant
  • ✓Standalone or native on ServiceNow