What's the Dilly-o with CRM & marketing: a buyer's guide for credit unions

The Dilly-o

Most credit unions should start with what their digital banking platform and core already offer, then buy only to fill the gap. Treat any vendor that holds member data as a critical third party, because its breach becomes your breach. Before you sign, check how the tool handles text consent and website tracking, since those are where the lawsuits are landing.

How we'd size up a vendor

1. Data security - how does the vendor protect member data, and how fast will it tell you about a breach? A breach at a marketing analytics vendor can start your 72-hour NCUA reporting clock when the vendor notifies you.³
2. Core and platform fit - does it connect to your core and your digital banking platform without custom middleware? We'd ask the vendor to name a credit union on your core that uses it, so you can check the fit with a peer.
3. Consent handling - does the tool record opt-outs from every channel and stop messages in time? We'd want to see a member's text opt-out flow through to email and calls in a live demo.
4. Tracking and privacy - what pixels and tags does it place on your website and digital banking, and who receives that data? Get a written list of every third party that sees member browsing data.

What changed this year

The FCC's amendments to its consent revocation rules were published in the Federal Register on October 26, 2026 and take effect November 25, 2026.⁴ They replace the delayed January 31, 2027 date for the "revoke all" provision.⁵ If you text through a one-way system, each text must say replies are unavailable and offer another way to opt out.⁶ Pixel tracking suits are also moving, and California's privacy act allows $5,000 in damages per violation without proof of harm.⁷ In one 2026 website tracking class action, a court let nine claims survive the pleadings stage.⁸ We'd review your marketing vendor's opt-out and tracking settings with your compliance team before either issue reaches you.

Will it work with your systems?

Banno Marketing Premium adds smart segments, so you can target messages by the devices your members use.⁹ You can send those messages through your own system or have Jack Henry deliver them.¹⁰ Alkami sells a Data & Marketing Solutions suite covering transaction-data enrichment, segmentation and campaign activation.^11C Alkami and Newgen Software both appear on Jack Henry's Fintech Integration Network for Symitar credit unions.^C Ask your provider which marketing tools you already pay for. Then ask which outside vendors it has certified for your core.

What other credit unions did

Everwise Credit Union, with 300,000 members, settled on Creatio in September 2024 after more than a year of research.¹²¹³ Strum says it signed five credit unions, including the $900 million Texas Bay CU and the $400 million St. Cloud Financial CU.¹⁴ On the cautionary side, a $1.95 million TCPA settlement involved Oregon Community Credit Union.¹⁵ We'd call a peer that uses your shortlisted vendor, and have your compliance team review the tool's texting setup before you sign.

What your examiner will ask

NCUA guidance says vendor contracts should address scope, subcontractor oversight, service levels, performance reporting and penalties for poor performance.¹⁶¹⁷ The same list covers ownership of and access to records, audit rights including who pays, data security and member confidentiality, business resumption planning and insurance.¹⁸¹⁹ One analysis says the 2023 third-party guidance stays in force until a final version is published.²⁰ Federally insured credit unions must include the official NCUA advertising statement in their ads, and one permitted version reads "Insured by NCUA."²¹²² Loan-only ads are exempt.²³ We'd keep the signed contract and the vendor's breach notice terms on hand, and check that ads sent through the tool carry the NCUA statement.

What it costs

One software review site lists Salesforce Financial Services Cloud's combined Sales and Service plan at $350 per user per month, with Agentforce 1 plans from $750.²⁴ One comparison site says HubSpot's Marketing Hub Enterprise starts at $3,600 a month, but a realistic all-in cost for a credit union runs $6,000 to $12,000.²⁵ CU 2.0 publishes tiers from $3,000 setup plus $600 a month up to $10,000 setup plus $5,000 a month.²⁶²⁷ Some AI marketing platforms price by asset size and member count, and one estimate puts a full CRM build at 9 to 14 months.²⁸²⁹ For anyone else, pricing is not public, so get it in writing. NCUA says some credit unions accepted steep termination penalties they thought were fixed, though early termination and default terms are often negotiable.¹⁷ We'd negotiate early termination and default terms you can live with before you sign.

Food for thought

We think a useful board question is which vendors hold a copy of your member data. Each marketing tool, data enricher and agency adds one more place a breach can start. We'd keep a current list of every vendor that holds member data, so you have the answer when your board asks.