IOanyT Innovations

Lending & fintech

Which applications can a rule decide, and can you show the reason for each one?

For lenders, fintechs and the operations teams behind them. Credit policy is written down; the hard part is applying it the same way every time and showing the specific reason behind each decision.

What to compile, what to keep on a model, what to leave alone

Typical calls, not a verdict on your workflow. The Workflow Diagnostic decides yours, on your own cases.

  • Credit-policy eligibility with reason codes

    Compile into code

    Your credit policy is already rules. Compiled into code, each decision carries the specific reason it was made, ready for an adverse-action notice.

  • Income and affordability rules

    Compile into code

    Thresholds and calculations that must give the same answer for the same file, every time.

  • KYC and KYB document checks

    Keep with an AI model

    Reading identity and company documents is language and image work. A model extracts the fields inside a schema; the pass/fail rules run as code.

  • Exceptions and appeals

    Don’t automate

    A person decides, with the full decision trace in front of them.

What your regulator or auditor will ask

  • Under ECOA and Regulation B (12 CFR 1002.9), a creditor that denies credit must give the specific principal reasons. Saying the applicant failed the creditor’s scoring system is not enough, whatever model made the decision.

    Source: 12 CFR 1002.9(b)(2)

  • In April 2026 the Federal Reserve, OCC and FDIC issued revised interagency model risk management guidance (SR 26-2), replacing SR 11-7 (2011).

    Source: Federal Reserve SR 26-2, 17 April 2026

  • Under the EU AI Act (Annex III point 5(b)), AI used to evaluate the creditworthiness or credit score of natural persons is high-risk, except AI used to detect financial fraud. Under the 2026 Digital Omnibus agreement, Annex III obligations apply from 2 December 2027.

    Source: EUR-Lex; Regulation (EU) 2026/1744

Last reviewed: 11 October 2026 by the IOanyT advisory team. This is general information, not legal advice.

Old system holding the rules?

Loan origination and servicing systems often run on stacks nobody wants to touch, with credit rules buried in the code. Write them down before you move them.

Legacy System Specification Assessment

How we’d start

  1. 1. AI Reliability Review. Free, 60–90 minutes, a 2-page findings note you keep.
  2. 2. Workflow Diagnostic. Two to three weeks to decide what to compile, keep on a model or leave alone.

Fixed price, agreed at scoping. Stop after any step. The findings are yours.

Tell us which decision is stuck.

We'll tell you in writing whether we can help.

Book a Reliability Review

Free · 60–90 minutes · a 2-page findings note you keep