Is borrower authorization required?
Yes. Every analysis requires explicit borrower consent for the specific evaluation. Borrowers receive a secure link to authorize a one-time, read-only accounting export. Credeity does not access any data without that authorization in place.
How is this used alongside D&B or LexisNexis?
D&B, LexisNexis, and similar providers supply information about a business. Credeity performs a different function. It tests whether borrower-reported information is corroborated by the other evidence in the credit file, and records the result as a source-linked verification finding with the rule and methodology version applied. Payment and receivables analytics are supplemental to that.
How quickly is analysis delivered?
Standard turnaround is 48 hours from the time borrower authorization is received and the accounting export is complete. Volume or portfolio engagements may have custom timelines.
Does Credeity originate loans?
No. Credeity does not originate loans, represent borrowers, or hold any lender or broker license. Every analysis is delivered as an independent third-party report for the lender's internal credit evaluation use only.
Is Credeity a consumer reporting agency?
No. Credeity is not a consumer reporting agency as defined under the Fair Credit Reporting Act (FCRA). Reports are delivered solely for institutional credit evaluation purposes.
What does an analysis cost?
Commercial terms are scoped to verification scope, volume, delivery model, and monitoring requirements. Engagements are case-based; no subscription is required. A typical engagement includes Tier 1 general ledger to bank reconciliation across the review period, coverage-conditioned findings, supplemental analytics such as the Payment Discipline Index (PDI), Tier 2 payment analysis, AR aging and DSO where available, and documented methodology. Authoritative-source screening is included where applicable to the borrower type; for example, NPI and OIG LEIE apply to healthcare borrowers, and SAM.gov exclusion screening applies more broadly. Every report states the obtaining party and as-of date for each record. Items that cannot be corroborated are reported as Unable to Verify rather than omitted.
Who pays for the report?
Most lenders order and pay for reports directly, either per engagement or under a volume agreement. Some lenders treat the report as a third-party cost recovered from the borrower at closing under their own fee policy. Credeity provides an itemized invoice suitable for the credit file under either arrangement.
Can the cost be passed to an SBA borrower?
That determination rests with the lender under its own SOP 50 10 fee policy and its treatment of third-party report costs. Credeity does not advise on fee eligibility. Credeity provides an itemized invoice identifying the report, the borrower, the engagement date, and the fee, suitable for inclusion in the loan file.
Does Credeity receive protected health information?
No. Credeity receives vendor payables records, payroll and payroll tax timing, and accounts receivable aging in aggregate. Credeity does not receive patient records, claims detail, or any individually identifiable health information. Credeity is not a HIPAA business associate and does not require a business associate agreement.
What happens if a borrower disputes a finding?
Either the borrower or the lender may initiate a review of any finding by submitting supporting documentation. Credeity responds within five business days. Where a correction is warranted, a revised report is issued under a new version number, and every institution that received the original is notified. The findings correction policy is published in full at /corrections.
Which accounting platforms are supported?
Credeity accepts CSV exports from any accounting platform, including QuickBooks, Xero, and Sage. The borrower exports directly from their accounting software: no integration or API connection required.
How is borrower data protected?
All data is processed under TLS 1.2 encryption in transit and AES-256 encryption at rest. Access is restricted to the authorized analysis only. Credeity operates under documented data handling, access control, and retention policies designed for regulated financial institution workflows.
What if a borrower declines to authorize?
Authorization is always voluntary. If a borrower declines, no data is accessed, no analysis is performed, and no report or finding is produced. Credeity does not report or characterize a declination to the lender beyond confirming that no engagement took place. How a lender proceeds with a file where no Credeity report exists is governed entirely by the lender's own credit policy and fair lending obligations.
Where can I learn more about the methodology?
For a deeper look at how payment behavior data fits into healthcare underwriting, read our research note: Reducing Underwriting Surprises in Healthcare Lending →
How does Credeity fit into SBA underwriting?
Under SOP 50 10, the applicant's cash flow is the primary source of repayment, and lenders must document repayment ability before closing. Credeity provides independent third-party evidence of how a commercial borrower manages its operating obligations: transaction-level payment discipline across all vendors and receivables performance from the practice's own accounting exports. It supports the cash flow narrative in your credit memo and strengthens your file in the event of early default review or guaranty audit.