Part 09 — Data & Integrations

Bureau Report Anatomy

Why bureau reading is more than a score

An SME loan file normally has two bureau stories. The first is the consumer bureau of the proprietor, partners, directors, guarantors and sometimes key shareholders. The second is the commercial bureau of the borrowing entity and related entities. The score or rank is only the index page. The underwriting value sits in tradelines, utilisation, repayment grids, enquiries, derogatory flags and relationship mapping.

India has four credit information companies (CICs) commonly used in lending: TransUnion CIBIL, Experian, Equifax and CRIF High Mark. RBI consolidated CIC reporting obligations in the Master Direction - Reserve Bank of India (Credit Information Reporting) Directions, 2025, dated 6 January 2025 (RBI Credit Information Reporting Directions, 2025). For a lender, the compliance basics are borrower consent for access, permissible purpose, data security, dispute handling, and timely reporting of its own loan performance.

Consumer bureau report: field groups

A consumer bureau report begins with input details and matching metadata: name, date of birth, gender, PAN, mobile, voter ID, passport, driving licence, Aadhaar reference where applicable, address and bureau control number. In India, small variations matter. “Rakesh Kumar & Co” may be a proprietorship trade name while the borrower is “Rakesh Kumar”; a father-name mismatch or old address should not automatically fail the case, but it should trigger identity resolution.

The score section usually shows a consumer credit score, often in the familiar 300-900 band. CRIF states that its consumer report comes with a credit score in the RBI-recommended 300-900 range (CRIF credit information). A thin-file proprietor can have no score or a low-confidence score even with healthy business banking. A high score can still hide recent leverage if new loans have not seasoned.

The account summary condenses open and closed accounts, current balance, sanctioned amount or credit limit, overdue amount, secured versus unsecured mix, and counts by product. The report then gives account-level tradelines: lender name or masked member name, account type, ownership indicator, open date, last reported date, sanctioned amount, current balance, cash limit where relevant, EMI, interest rate where reported, repayment tenure, collateral value in some secured loans, overdue amount, asset classification, written-off/settled status, suit-filed/wilful-default flags and closure date.

The most important consumer field is the payment history grid. It is normally a month-by-month view for up to 36 months, using days past due (DPD), standard/sub-standard/doubtful/loss asset classification codes, or status markers. Read it as a sequence, not as isolated blemishes. A 30 DPD two years ago on a credit card is different from three consecutive 30/60/90 DPD marks on an unsecured business loan. A “000” string after a settlement does not erase the settlement; it only says later reported months were current or closed.

Enquiries show who pulled the bureau, when, for what product and what amount. Five enquiries in fifteen days can be normal if the borrower shopped through a marketplace. Five enquiries across personal loan, credit card and consumer durable finance in three months can indicate liquidity stress. For SME underwriting, separate enquiries related to business expansion from enquiries for consumption debt.

Consumer derogatory sections include written-off, settled, suit-filed, wilful-default, post write-off settled, restructured, credit-card over-limit, high utilisation and frequent recent delinquencies. Experian’s public default-account search page distinguishes suit-filed, wilful-default and large-defaulter datasets, reflecting why these flags are not routine delinquencies (Experian India default accounts).

Commercial bureau report: field groups

Commercial reports cover non-individual borrowers: proprietorships, partnerships, LLPs, private limited companies, public companies, trusts, societies and other entities. CRIF describes its commercial report as covering borrowings of business entities such as public limited companies, private limited companies, partnerships and proprietorships, including term loans, working capital finance, overdrafts and non-funded facilities (CRIF commercial report).

The identifier block includes legal name, trade names, PAN, CIN or LLPIN, GSTIN, registered office, operating addresses, constitution, industry, incorporation date, contact details and bureau subject ID. Matching is harder than consumer matching because entities have branch addresses, old names, group entities and director-linked borrowings. A good LOS should store bureau-match confidence and the identifiers used, not just the PDF.

The commercial summary shows total funded exposure, non-funded exposure, working-capital limits, term debt, secured/unsecured split, current balance, overdue amount, utilisation, delinquency count, enquiry count and relationship summary. TransUnion CIBIL says its Commercial Credit Information Report includes recent and last 36 months history, enquiry details, delinquency, derogatory data, related-party information, location details, loan-type details and asset-classification information with on-lender and off-lender bifurcation (TransUnion CIBIL commercial risk assessment).

Facility-level data is where credit teams spend time. A cash credit line should be read for limit, drawing power, utilisation, overdrawn days and renewal behaviour. A term loan should be read for original amount, current balance, instalment pattern, DPD grid and security. Non-funded facilities such as bank guarantees and letters of credit matter because they consume bank lines and can crystallise. A borrower with a clean term-loan grid but a constantly maxed cash-credit line may still have working-capital stress.

Commercial reports also show related parties: proprietors, partners, directors, guarantors, group companies and sometimes relationship links inferred from reported data. This is crucial in SME lending because risk often moves through related entities. A clean applicant company may be promoted by directors whose older company has a settled working-capital account or unpaid equipment loan. That is not an automatic decline, but it is a deviation that should be documented.

CMR bands and commercial scores

TransUnion CIBIL’s CreditVision CIBIL Commercial Rank (CV CMR) classifies commercial borrowers into ten bands, CMR-1 to CMR-10. CIBIL states that CMR-1 reflects the strongest profile and CMR-10 the weakest, and that the model uses observed credit behaviour and risk characteristics (CIBIL CV CMR). Its API marketplace page adds that CV CMR profiles borrowers based on the past 36 months and factors in borrower size, product type and behavioural trends (CIBIL commercial risk assessment).

Policy teams often group ranks this way: CMR-1 to CMR-3 as preferred, CMR-4 to CMR-5 as acceptable with normal controls, CMR-6 to CMR-7 as caution/deviation, and CMR-8 to CMR-10 as high-risk or decline except for strongly secured/restructured cases. That grouping is a lender-policy convention, not a CIBIL rule. It must be calibrated against the lender’s own vintage loss data.

CRIF says its commercial credit score is on a 300-900 scale, with 900 indicating the lowest risk profile, and that its commercial report can include an MSME Rank with 13 points for risk differentiation (CRIF credit information). This is why “commercial bureau rank” is not a single market-standard field. The LOS should store bureau name, product name, score/rank version, pull date and score reason codes separately.

How to read tradelines

Start with ownership. For consumer reports, distinguish individual, joint, guarantor and authorised-user exposure. A director’s guarantee on a company loan may not imply direct repayment cash outflow until invocation, but it signals contingent leverage. For commercial reports, distinguish borrower, co-borrower, guarantor and related-party exposure.

Next read facility behaviour by product. A gold loan with frequent renewals has different meaning from a personal loan top-up cycle. Credit-card utilisation above 80 percent for six months is liquidity pressure. A business loan closed in three months may be a takeover or a short-tenor fintech line; check enquiry and bank-statement evidence. An overdraft with repeated over-limit days is more serious than high utilisation within sanctioned limit.

Then read velocity. Recent unsecured disbursals, new enquiries, limit enhancements and fresh guarantor obligations matter more than old closed loans. A CMR-2 company that added three unsecured facilities in the last quarter and has rising utilisation deserves more scrutiny than a CMR-5 company with stable secured debt and no recent delinquency.

Finally read derogatory resolution. “Settled” means the lender accepted less than contractual dues. “Written off” means accounting write-off, even if recovery continues. “Post write-off settled” is still a serious derogatory marker. “Restructured” may be benign during a sector shock or severe if repeated. The credit note should state the exact marker, lender, amount, date and explanation; do not hide it under “minor bureau issue.”

Common exceptions

No-hit is not good risk. It means the bureau has no usable record for the identifiers supplied. For micro proprietors, no-hit may be acceptable if bank statements, GST and field investigation are strong. For a private limited company with several years of borrowing, no-hit may indicate bad identifiers or deliberate entity substitution.

Multiple bureau pulls can disagree. The difference may be reporting lag, member coverage, matching logic or dispute correction. If a serious derogatory appears in one bureau and not another, underwrite the derogatory unless it is disproved by lender NOC, closure letter or updated bureau dispute result.

Commercial bureau data can lag bank reality. A working-capital account regularised yesterday may still show overdue. A newly disbursed fintech loan may not have reported. Always reconcile bureau obligations with bank statement EMI/NACH debits, sanction letters and borrower declarations.