12 CFR § 27.5
Record retention period
November 10, 2020
(a) Each bank shall retain the records required under §27.3 for 25 months after the bank notifies an applicant of action taken on an application, or after withdrawal of an application. This requirement also applies to records of home loans which are originated by the bank and subsequently sold.
(b) The Comptroller of the Currency may, by written notice to a bank, extend the retention period.